This is the mail archive of the
java-patches@gcc.gnu.org
mailing list for the Java project.
Re: URLClassLoader update
- From: Tom Tromey <tromey at redhat dot com>
- To: Mark Wielaard <mark at klomp dot org>
- Cc: java-patches at gcc dot gnu dot org
- Date: 25 Nov 2002 17:47:17 -0700
- Subject: Re: URLClassLoader update
- References: <1038267557.25590.63.camel@elsschot>
- Reply-to: tromey at redhat dot com
>>>>> "Mark" == Mark Wielaard <mark@klomp.org> writes:
Mark> The last couple of weeks I have rewritten the URLClassLoader
Mark> implementation based on the old GNU Classpath version and the
Mark> changes that the Orp developers made.
Wow, cool.
I'll look at this patch this week.
Mark> (URLClassLoader now works for remote locations! - now if only we
Mark> had a complete verifier and security permissions framework...).
What's missing from the verifier? Or are you referring to its known
bugs? Or something else?
About security stuff, yes, that would be great. My impression is that
the Classpath code has the required checks (are there places where it
doesn't?). So we just need the runtime support (which Andrew has and
which should go in pretty soon), an audit of unmerged classes, and an
audit of gnu.* to ensure that implementation classes can't be used to
circumvent security.
Tom