[Bug libgcj/12294] New: gnu.java.net.PlainSocketImpl security risk

["bryce at mckinlay dot net dot nz" <gcc-bugzilla at gcc dot gnu dot org>]

PLEASE REPLY TO gcc-bugzilla@gcc.gnu.org ONLY, *NOT* gcc-bugs@gcc.gnu.org.

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=12294

           Summary: gnu.java.net.PlainSocketImpl security risk
           Product: gcc
           Version: 3.4
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: libgcj
        AssignedTo: unassigned at gcc dot gnu dot org
        ReportedBy: bryce at mckinlay dot net dot nz
                CC: gcc-bugs at gcc dot gnu dot org

PlainSocketImpl is now a public class in the gnu.java.net package. This could pose a security risk 
as untrusted code could open a socket by constructing a PlainSocketImpl directly and 
bypassing java.net security checks.

It probably needs a security check to be added to its constructor.