[ 
https://issues.apache.org/jira/browse/DERBY-4287?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Kathey Marsden updated DERBY-4287:
----------------------------------

    Attachment: derby-4287_diff.txt

Attached is a patch for this issue.  There was also a call to new 
FileOuputStream which needed wrapping as well, so I did that. I was, however,  
a bit perplexed that the creation of the class file still seemed to happen even 
without the FileOutputStream change.


> call to System.getProperty in BCClass.java is not wrapped in a priv block so 
> may fail when running under SecurityManager
> ------------------------------------------------------------------------------------------------------------------------
>
>                 Key: DERBY-4287
>                 URL: https://issues.apache.org/jira/browse/DERBY-4287
>             Project: Derby
>          Issue Type: Bug
>          Components: Services
>    Affects Versions: 10.1.3.1, 10.2.2.0, 10.3.3.0, 10.4.2.0, 10.5.1.1, 
> 10.6.0.0
>            Reporter: Kathey Marsden
>            Assignee: Kathey Marsden
>            Priority: Minor
>         Attachments: derby-4287_diff.txt
>
>
> I noticed in org.apache.derby.impl.services.bytecode.BCClass.java we have 
> this code:
>                       String systemHome = 
> System.getProperty(Property.SYSTEM_HOME_PROPERTY,".");
>                               writeClassFile(systemHome,false,null);
> which will fail when run under security manager because we have no privilege 
> block.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to