On Wed, Jan 16, 2013 at 2:43 AM, Daniel Campbell <dlcampb...@gmx.com> wrote: > On 01/15/2013 11:32 PM, Nilesh Govindrajan wrote: >> On Wednesday 16 January 2013 10:32:11 AM IST, Kevin Brandstatter wrote: >>> I'm curious as well about the potential exploitability of icedtea. I >>> would think that since the icedtea vm is not the same as the sun/oracle >>> one and so I don't think the code base is the same, which would mean an >>> exploit in the sun/oracle jvm would not necessarily affect icedtea. >>> However, I know very little on this matter and seeing as i think both >>> are open sourced i have no idea how much or if there is any code overlap. >>> >> >> Oracle Java is open source? >> >> -- >> Nilesh Govindarajan >> http://nileshgr.com >> > > I was thinking the same thing. Last I knew, the VM is closed while the > language is pretty much open.
IIRC, the VM spec is open, the implementation isn't. Further, the supporting libraries are open (as in you can see them). The biggest 'closed' aspect is the pricey (and terms-restricting) certification process to get a different implementation certified. But I might be woefully out of date. -- :wq