On 12/10/2016 16:33, Sundararajan Athijegannathan wrote:
:
Dynalink used to automatically add those necessary add edges. With the
current change, nashorn adds necessary read edges. CallerSensitive
methods are found only in java.base, java.logging, java.sql and
java.sql.rowset modules - the first two are always present [in nashorn's
compact1 dependency world]. The later two are checked for presence and
read-edges are added conditionally (see ScriptLoader.java changes).
JDK-8154346 tracks fixing java.sql.DriverManager, there are
compatibility concerns to changing it but it is being looked at.
I'm not familiar with the issue in the java.sql.rowset module but it may
be that the security checks in SerialJavaObject::getFields can be
re-visited (I don't know all the history on that).
Yes, I need boot layer modules only and I'll change that.
Thanks.
-Alan.
