On Fri, 9 Jun 2023 13:07:27 GMT, Chris Hegarty <che...@openjdk.org> wrote:

>> A trivial use of the Vector API when run with the security manager and a 
>> domain that does not grant permissions fails with 
>> java.security.AccessControlException: access denied 
>> ("java.util.PropertyPermission" 
>> "jdk.incubator.vector.VECTOR_ACCESS_OOB_CHECK" "read").
>> 
>> The fix it minimal, as consistent with other system property access in the 
>> JDK - just access the property while asserting privileged. Note: no explicit 
>> permission grant to the vector module is required, as it is in the boot 
>> loader.
>> 
>> This is the only such security manager related issue I see in this code, and 
>> I have looked.
>
> @PaulSandoz We just ran into this yesterday, 
> https://github.com/elastic/elasticsearch/pull/96715. The change here is 
> trivial.

Thanks @ChrisHegarty for fixing. Lucene's tests didn't find this, unfortunately!

-------------

PR Comment: https://git.openjdk.org/jdk/pull/14392#issuecomment-1584832808

Reply via email to