RFR(S) 8160987: JDWP ClassType.InvokeMethod doesn't validate class

harold seigel harold.seigel at oracle.com
Thu Sep 15 15:31:47 UTC 2016


Hi,

Please review this small fix for JDK-8160987.  The JDWP InvokeStatic() 
method was depending on the JNI function that it called to enforce the 
requirement that the specified method must be a member of the specified 
class or one of its super classes. But, JNI does not enforce this 
requirement.  This fix adds code to JDWP to do its own check that the 
specified method is a member of the specified class or one of its super 
classes.

JBS Bug: https://bugs.openjdk.java.net/browse/JDK-8160987

Open webrev: http://cr.openjdk.java.net/~hseigel/bug_8160987/

The fix was tested with the two failing JCK vm/jdwp tests listed in the 
bug, the JCK Lang, VM, and API tests, the hotspot JTReg tests, the 
java/lang, java/util and other JTReg tests, the co-located and 
non-colocated NSK tests, and with the RBT Tier2 tests.

Thanks, Harold



More information about the serviceability-dev mailing list