Patch: FYI: new Java news item

Tom Tromey tromey@redhat.com
Tue Nov 6 15:03:00 GMT 2001


I'm checking this in.
It updates the Java web pages to reflect the bytecode verifier.

Tom

Index: ChangeLog
from  Tom Tromey  <tromey@redhat.com>

	* index.html: Added news item for verifier.
	* projects.html: Remove bytecode verifier from project list.

Index: index.html
===================================================================
RCS file: /cvs/gcc/wwwdocs/htdocs/java/index.html,v
retrieving revision 1.92
diff -u -r1.92 index.html
--- index.html 2001/10/24 22:21:26 1.92
+++ index.html 2001/11/06 23:02:15
@@ -69,13 +69,20 @@
 
 <table>
 <tr><td valign="top">
+<b>November 5, 2001</b>
+</td><td>
+Tom Tromey contributed a bytecode verifier.  It hasn't yet been
+extensively tested, so it is still disabled by default.
+</td></tr>
+
+<table>
+<tr><td valign="top">
 <b>October 24, 2001</b>
 </td><td>
 Tom Tromey of Red Hat checked in the <code>javax.naming</code> and
 <code>javax.transaction</tt> packages, started by Anthony Green
 finished by Warren Levy and Tom.
 </td></tr>
-
 
 <tr><td valign="top">
 <b>October 2, 2001</b>
Index: projects.html
===================================================================
RCS file: /cvs/gcc/wwwdocs/htdocs/java/projects.html,v
retrieving revision 1.25
diff -u -r1.25 projects.html
--- projects.html 2001/10/26 21:36:51 1.25
+++ projects.html 2001/11/06 23:02:15
@@ -51,36 +51,6 @@
 to allow Java virtual machines to be plugged into Mozilla.  A gij
 based plugin would be very nice indeed (gijzilla?).
 <p>
-This project will eventually need a bytecode verifier.
-<p>
-
-<br>
-<table border="0" cellpadding="4" width="95%">
-<tr bgcolor="#b0d0ff">
- <th align="left">
-Bytecode Verifier
- </th>
-</tr>
-</table>
-<br>
-
-Some applications written in the Java programming language expect to
-be able to download and execute classes from untrusted sources.
-<a href=" http://java.sun.com/sfaq/verifier.html" ;>Bytecode
-verification</a> is the process of analyzing class file bytecode to
-ensure the integrity of the security model.
-
-<p> 
-
-GCJ contains a <a
-href=" http://gcc.gnu.org/cgi-bin/cvsweb.cgi/~checkout~/gcc/gcc/java/verify.c" ;>verifier</a>
-to ensure the validity of natively compiled code.  What's really needed is
-a verification package that the libgcj ClassLoader can use to 
-verify dynamically loaded bytecode.  It may be possible to use
-GCJ's <code>verify.c</code> as a starting point.  It may even be possible
-(with suitable macros and typedefs) to use the same verifier both in
-GCJ and the run-time.
-<p>
 
 <br>
 <table border="0" cellpadding="4" width="95%">



More information about the Gcc-patches mailing list