Review Request: 8073361: Missing doPrivileged in com.sun.xml.internal.bind.v2.ClassFactory
Sean Mullan
sean.mullan at oracle.com
Tue Feb 24 20:40:30 UTC 2015
This fix looks fine.
--Sean
On 02/20/2015 01:54 PM, Mandy Chung wrote:
> This fixes a regression due to JDK-8057645 moving JAXB to ext loader
> that was tested before the fix for JDK-8054367 went in jdk9. This
> was uncovered after JDK-8057645and JDK-8054367 met.
>
> The fix is simple. Class.getDeclaredConstructor on a class defined
> by the null loader will require RuntimePermission("accessDeclaredMembers")
> check that needs to be wrapped with doPrivileged block.
>
> http://cr.openjdk.java.net/~mchung/jdk9/webrevs/8073361/webrev.00/
>
> It doesn't change the behavior as previously when JAXB was loaded
> by the null class loader that it always has access to any declared
> member of any class (it's the ancestor of all class loaders).
>
> Mandy
> [1] http://hg.openjdk.java.net/jdk9/jdk9/jaxws/rev/ef93f7aa0d2f
More information about the core-libs-dev
mailing list