This is the mail archive of the
java@gcc.gnu.org
mailing list for the Java project.
Linking libgcj, and Java security
We don't link libgcj with the -Bsymbolic option: this means that we
resolve most calls within libgcj dynamically. I suspect this also
means that it's possible for a Java program to replace any method in
libgcj. This may be a security hole.
I don't think this is desirable, and in any case runtime relocation
wastes time and space; the performance gain using -Bsymbolic might be
well worth having.
Before I submit a patch, is there any good reason _not_ to use
-Bsymbolic?
Andrew.