A Bug in AccessControlContext.equals() and hashCode()?

Xiaomin Ding dingding303 at gmail.com
Thu Jun 26 04:02:24 UTC 2014


>On 6/16/2014 10:40 PM, David M. Lloyd wrote:
>On 06/16/2014 09:19 AM, Frank Ding wrote:
>> Hi Jeff,
>>   Thanks for your reply.  One further question is that you confirmed
>> that two AccessControlContext objects considered equal via method
>> equals() should return same results for
>> AccessControlContext.checkPermission() but test shows that 2
>> AccessControlContext objects are equal regardless of isLimited,
>> limitedContext, parent, permissions, or privilegedContext.  Does it make
>> sense and apply to Java 8 AccessControlContext with JEP140?
>
>Is it not true that a limited privileged context simply adds a
>protection domain that restricts permissions to the limited set?  This
>seems to be the "obvious" implementation of the feature.
>
>If so, then equals() should have taken it into account as a matter of
>course.
>--
>- DML
Hi Jeff,
  Could you pls let us know your insight?

Regards,
Frank



More information about the security-dev mailing list