hg: jdk8/tl/jdk: 8020854: change RMI javadocs to specify that remote objects are exported to the wildcard address
Stuart Marks
stuart.marks at oracle.com
Tue Aug 6 21:12:43 UTC 2013
On 8/5/13 7:41 PM, Bernd Eckenfels wrote:
>> ! src/share/classes/java/rmi/server/RMISocketFactory.java
>
> I think setting the rmi server name to localhost is a dangerous recommendation.
> It might happen that it resolves to a IPv4 or IPv6 only address on a dual
> socket host. And InetAddress.getLoopbackAddress() might pick the preferred
> family different from that. So it is better to use the literal returned by that
> function. (or remove this from javadoc).
Oh yes, good point about localhost and IPv4 vs IPv6. I'll fix the example to
use an address instead of localhost.
Thanks,
s'marks
More information about the security-dev
mailing list