RFR 8170900: Issue with FilePermission::implies for wildcard flag(-)

Wang Weijun weijun.wang at oracle.com
Thu Dec 22 00:14:28 UTC 2016


> On Dec 22, 2016, at 8:12 AM, Xuelei Fan <xuelei.fan at oracle.com> wrote:
> 
> I think the note is an example, may not need an additional CCC.

That's always my understanding.

> 
> For easier reading, I may use a contrast example.  For example, "Note that this means "/-" implies "/foo" but not "foo".".

Good advice.

Thanks
Max

> 
> Use the one you like, I'm OK with the either.
> 
> Xuelei
> 
> On 12/21/2016 3:58 PM, Wang Weijun wrote:
>> 
>>> On Dec 22, 2016, at 4:39 AM, Xuelei Fan <xuelei.fan at oracle.com> wrote:
>>> 
>>> I'm trying to understand this update.  Does "/-" imply "/foo"?
>> 
>> Yes.
>> 
>>> 
>>> Does the following spec can be used to explain the new added note?
>>> 
>>>    *     <li>if the wildcard flag is "-", the simple pathname's path
>>>    *     must be recursively inside the wildcard pathname's path.
>> 
>> Yes.
>> 
>> But the precise meaning of "recursively inside" is different between the pre-jdk9 and jdk9 behaviors. The @implNote explains more.
>> 
>> --Max
>> 
>>> 
>>> Xuelei
>>> 
>>> On 12/19/2016 11:25 PM, Wang Weijun wrote:
>>>> Ping again.
>>>> 
>>>>> On Dec 14, 2016, at 1:53 PM, Wang Weijun <weijun.wang at oracle.com> wrote:
>>>>> 
>>>>> An clarification is added to FilePermission::implies:
>>>>> 
>>>>>    * @implNote
>>>>>      ....
>>>>>    * a simple {@code npath} is recursively inside a wildcard {@code npath}
>>>>>    * if and only if {@code simple_npath.relativize(wildcard_npath)}
>>>>> -     * is a series of one or more "..". An invalid {@code FilePermission} does
>>>>> +     * is a series of one or more "..". Note that this means "/-" does not
>>>>> +     * imply "foo". An invalid {@code FilePermission} does
>>>>>    * not imply any object except for itself.
>>>>> 
>>>>> The newly added sentence is
>>>>> 
>>>>> Note that this means "/-" does not imply "foo".
>>>>> 
>>>>> JCK has agreed to update their test.
>>>>> 
>>>>> Since this is just a clarification inside an @implNote and no spec is updated, I suppose no CCC is needed. Please confirm.
>>>>> 
>>>>> Thanks
>>>>> Max
>>>>> 
>>>> 
>> 




More information about the security-dev mailing list