hg: jdk8/tl/jdk: 8020854: change RMI javadocs to specify that remote objects are exported to the wildcard address

Stuart Marks stuart.marks at oracle.com
Tue Aug 6 21:12:43 UTC 2013


On 8/5/13 7:41 PM, Bernd Eckenfels wrote:
>> ! src/share/classes/java/rmi/server/RMISocketFactory.java
>
> I think setting the rmi server name to localhost is a dangerous recommendation.
> It might happen that it resolves to a IPv4 or IPv6 only address on a dual
> socket host. And InetAddress.getLoopbackAddress() might pick the preferred
> family different from that. So it is better to use the literal returned by that
> function. (or remove this from javadoc).

Oh yes, good point about localhost and IPv4 vs IPv6. I'll fix the example to 
use an address instead of localhost.

Thanks,

s'marks




More information about the security-dev mailing list