This is the mail archive of the
java@gcc.gnu.org
mailing list for the Java project.
Re: SharedLibLoader loading more then one lib and SecureClassLoader
- From: Michael Koch <konqueror at gmx dot de>
- To: tromey at redhat dot com, Steve Pribyl <steve at netfuel dot com>
- Cc: gcj mail list <java at gcc dot gnu dot org>
- Date: Tue, 8 Jul 2003 06:49:44 +0200
- Subject: Re: SharedLibLoader loading more then one lib and SecureClassLoader
- References: <3F09E510.6040401@netfuel.com> <87llv9hca9.fsf@fleche.redhat.com>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Am Dienstag, 8. Juli 2003 06:29 schrieb Tom Tromey:
> >>>>> "Steve" == Steve Pribyl <steve@netfuel.com> writes:
>
> Steve> Any reason I could not add the following method to the
> SharedLibLoader Steve> AddLibrary(String libname, flag)
> Steve> To allow more then on library to the Loader.
>
> I'm not certain we even want to keep this class around.
>
> Steve> Also why is this not a sub class of SecureClassLoader or
> even Steve> URLClassLoader?
>
> See the patch I mentioned. It lets you add a shared library to an
> existing URLClassLoader. That is pretty convenient, since it
> integrates a little better with existing applications. At least in
> some situations.
URLClassLoader supports loading solib ? Isnt this a security whole ?
If I prepare a special .so file on a webserver, can I then import bad
code into the JVM ?
Michael
- --
Homepage: http://www.worldforge.org/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQE/Ck1oWSOgCCdjSDsRAoV9AJ4ti6VCC1TOB+h2DYb5V4Q7ko/iAwCfRk79
G1QIkvlmaR4IyQkZwW6aksc=
=R7GV
-----END PGP SIGNATURE-----