[Bug libgcj/13606] New: need extra runtime verification of compiled code

["tromey at gcc dot gnu dot org" <gcc-bugzilla at gcc dot gnu dot org>]

With the new binary compatibility ABI, it is possible for
compiled code to be loaded into an environment where dependent
classes are different from the classes visible to the compiler
at bytecode verification time.

This can be used to circumvent type safety in some situations.

One potential fix is for the compiler to emit "verifier assertions"
that must be checked at runtime.  For example these could be checked
at class preparation time.

It isn't completely clear what assertions will need checking.
It might suffice to check extends/implements requirements
implied by the bytecode (and checked by the verifier).

It could also be worthwhile to look at the JSR relating to
"split verification".  I haven't done this yet due to the strange
license on this JSR.  Beware of this before downloading.

-- 
           Summary: need extra runtime verification of compiled code
           Product: gcc
           Version: unknown
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: libgcj
        AssignedTo: unassigned at gcc dot gnu dot org
        ReportedBy: tromey at gcc dot gnu dot org
                CC: gcc-bugs at gcc dot gnu dot org
 BugsThisDependsOn: 13603


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=13606