[drlvm][kernel_classes] ThreadLocal vulnerability

2006-11-17 Thread Thomas Hawtin
I had a quick browse through the Harmony SVN and spotted what appears to be a vulnerability in the java.lang.ThreadLocal implementation. I have briefly discussed this with Tim Ellison and Geir Magnusson Jr., off list before posting here. Harmony uses a per Thread HashMap (WeakHashMap in

Re: [drlvm][kernel_classes] ThreadLocal vulnerability

2006-11-17 Thread Tim Ellison
Thomas Hawtin wrote: I had a quick browse through the Harmony SVN and spotted what appears to be a vulnerability in the java.lang.ThreadLocal implementation. I have briefly discussed this with Tim Ellison and Geir Magnusson Jr., off list before posting here. Yep, and I'll say again publicly,

Re: [drlvm][kernel_classes] ThreadLocal vulnerability

2006-11-17 Thread Thomas Hawtin
Tim Ellison wrote: Thomas Hawtin wrote: Some modern code, such as I believe Spring, creates many ThreadLocal instances, so you may wish to look further at quality of implementation issues. Ack -- thanks. What do you call many? 100's? 1,000s? more? Good question. Googling tends to just

Re: [drlvm][kernel_classes] ThreadLocal vulnerability

2006-11-17 Thread Geir Magnusson Jr.
I grok this. I have no problem. geir Tim Ellison wrote: Thomas Hawtin wrote: I had a quick browse through the Harmony SVN and spotted what appears to be a vulnerability in the java.lang.ThreadLocal implementation. I have briefly discussed this with Tim Ellison and Geir Magnusson Jr., off