This is the mail archive of the
java@gcc.gnu.org
mailing list for the Java project.
Re: gcjik
- From: Tom Tromey <tromey at redhat dot com>
- To: Per Bothner <per at bothner dot com>
- Cc: Adam Megacz <gcj at lists dot megacz dot com>, java at gcc dot gnu dot org
- Date: 20 Sep 2002 14:20:18 -0600
- Subject: Re: gcjik
- References: <86bs6s33mv.fsf@nowhere.com> <3D8B82CF.4010103@bothner.com>
- Reply-to: tromey at redhat dot com
>>>>> "Per" == Per Bothner <per@bothner.com> writes:
Per> This sounds like an interesting project, but be aware that
Per> neither the compile-time verifier (in gcj) or the run-time
Per> verifier (in libgcj) have been "vetted" for security.
Per> Specifically, I'm fairly sure we don't handle interface types in
Per> gcj securely.
Or in libgcj, as I found out this week to my dismay. Running a recent
xerces through the libgcj verifier was an exercise in humility.
It looks like the best fix is to change the internal type
representation to keep track of the union of the interfaces. I
remember you talking about this approach years ago... Hopefully I can
find the time.
Tom