This is the mail archive of the java-patches@gcc.gnu.org mailing list for the Java project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: URLClassLoader update


>>>>> "Mark" == Mark Wielaard <mark@klomp.org> writes:

Mark> I was referring to its known bugs. At the moment I don't trust
Mark> it to catch all malformed byte code. We could really use someone
Mark> who wants to go over that piece of code and prove it correct.

Yes.  I imagine that is an unlikely occurrence, though :-(

I'm definitely the wrong person to try to do that (not only because I
wrote it).  I'm slowly working on a test suite, but it really has a
small number of tests (in Mauve, module `verify').

Mark> We have most security checks in place, but a good audit of all
Mark> the code to make sure that it cannot be used to circumvent the
Mark> security policy is really needed (and costs a lot of time).

Indeed.

These things are important because they help block the road to
integrating libgcj into a browser.

Tom


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]