At 15:16 17.10.2000 -0400, you wrote:
> It was just a thought, not (yet) a problem:
>
> Let's say you have beans A and B, and A has a method getB which
>returns a B, and B has a method getA which returns an A. When you go to
>verify A, it checks whether B is a valid RMI-IIOP type (since it is
>returned from a method in A). In order to do that, it examines all the
>methods of B.
Does it?
It's pretty late, and I didn't look really hard, but to me it seems that it
does not. For A's return type B there's a check against the RMI/IIOP type,
but we aren't going through the B's methods and their return types so we
never get back to A.
For B we just check if its:
- a primitive type
- an array, in which case we check its component type
- CORBA object interface
- IDLEntity interface
- Remote, in which case we check
* that all methods throw RemoteException
* all other exceptions are valid RMI/IIOP exceptions
- RMI/IIOP Value type, that cannot be Remote
So that's as deep as we go. Remote interface methods aren't checked any
further, and the requirements are mostly for run time there anyway, and the
value types are not required to map the methods at all.
It's possible there are circular checks in the code but for this case I
don't see it.
-- Juha
