RFR 8170900: Issue with FilePermission::implies for wildcard flag(-)

Xuelei Fan xuelei.fan at oracle.com
Wed Dec 21 20:39:28 UTC 2016


I'm trying to understand this update.  Does "/-" imply "/foo"?

Does the following spec can be used to explain the new added note?

      *     <li>if the wildcard flag is "-", the simple pathname's path
      *     must be recursively inside the wildcard pathname's path.

Xuelei

On 12/19/2016 11:25 PM, Wang Weijun wrote:
> Ping again.
>
>> On Dec 14, 2016, at 1:53 PM, Wang Weijun <weijun.wang at oracle.com> wrote:
>>
>> An clarification is added to FilePermission::implies:
>>
>>      * @implNote
>>        ....
>>      * a simple {@code npath} is recursively inside a wildcard {@code npath}
>>      * if and only if {@code simple_npath.relativize(wildcard_npath)}
>> -     * is a series of one or more "..". An invalid {@code FilePermission} does
>> +     * is a series of one or more "..". Note that this means "/-" does not
>> +     * imply "foo". An invalid {@code FilePermission} does
>>      * not imply any object except for itself.
>>
>> The newly added sentence is
>>
>>  Note that this means "/-" does not imply "foo".
>>
>> JCK has agreed to update their test.
>>
>> Since this is just a clarification inside an @implNote and no spec is updated, I suppose no CCC is needed. Please confirm.
>>
>> Thanks
>> Max
>>
>



More information about the security-dev mailing list