hg: jdk8/tl/jdk: 8020854: change RMI javadocs to specify that remote objects are exported to the wildcard address
Bernd Eckenfels
bernd-2013 at eckenfels.net
Tue Aug 6 02:41:11 UTC 2013
Hello,
> ! src/share/classes/java/rmi/server/RMISocketFactory.java
I think setting the rmi server name to localhost is a dangerous
recommendation. It might happen that it resolves to a IPv4 or IPv6 only
address on a dual socket host. And InetAddress.getLoopbackAddress() might
pick the preferred family different from that. So it is better to use the
literal returned by that function. (or remove this from javadoc).
Bernd
More information about the security-dev
mailing list