This is the mail archive of the java@gcc.gnu.org mailing list for the Java project.

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]
Other format:	[Raw text]

Re: SharedLibLoader loading more then one lib and SecureClassLoader

From: Tom Tromey <tromey at redhat dot com>
To: Michael Koch <konqueror at gmx dot de>
Cc: Steve Pribyl <steve at netfuel dot com>, gcj mail list <java at gcc dot gnu dot org>
Date: 08 Jul 2003 08:05:37 -0600
Subject: Re: SharedLibLoader loading more then one lib and SecureClassLoader
References: <3F09E510.6040401@netfuel.com> <87llv9hca9.fsf@fleche.redhat.com><200307080649.44822.konqueror@gmx.de>
Reply-to: tromey at redhat dot com

>>>>> "Michael" == Michael Koch <konqueror@gmx.de> writes:

Michael> URLClassLoader supports loading solib ? Isnt this a security whole ? 
Michael> If I prepare a special .so file on a webserver, can I then import bad 
Michael> code into the JVM ?

You can only load local .so files.  And, once security checks are
added, we'll add a check here to prevent untrusted code from loading
one.

Tom

References:
- SharedLibLoader loading more then one lib and SecureClassLoader
  - From: Steve Pribyl
- Re: SharedLibLoader loading more then one lib and SecureClassLoader
  - From: Tom Tromey
- Re: SharedLibLoader loading more then one lib and SecureClassLoader
  - From: Michael Koch

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]