This is the mail archive of the
gcc-bugs@gcc.gnu.org
mailing list for the GCC project.
[Bug libgcj/21892] gnu.* and native code security audit
- From: "tromey at gcc dot gnu dot org" <gcc-bugzilla at gcc dot gnu dot org>
- To: gcc-bugs at gcc dot gnu dot org
- Date: 13 Jul 2005 17:17:46 -0000
- Subject: [Bug libgcj/21892] gnu.* and native code security audit
- References: <20050602224341.21892.tromey@gcc.gnu.org>
- Reply-to: gcc-bugzilla at gcc dot gnu dot org
------- Additional Comments From tromey at gcc dot gnu dot org 2005-07-13 17:17 -------
According to mjw there is already code in classpath's ClassLoader
to do gnu.* checking (whether it is exactly what we want is not clear --
aph suggested we rename packages to make it very clear which parts
are private and which are not).
The idea is, classes loaded by the bootstrap loader have total access.
Other access attempts are checked for validity by the application loader.
I'm not sure what happens with class loaders that bypass the application
loader when delegating.
--
http://gcc.gnu.org/bugzilla/show_bug.cgi?id=21892