Re: Java and the NTFS Path weakness

2021-01-19 Thread Bernd Eckenfels
openjdk. Microsoft (and the mass media) seems to be aware of the Windows problems. Gruss Bernd -- http://bernd.eckenfels.net Von: Alan Bateman Gesendet: Tuesday, January 19, 2021 9:26:02 AM An: Bernd ; OpenJDK Dev list ; nio-dev Betreff: Re: Java and the NTFS Path

Re: Java and the NTFS Path weakness

2021-01-19 Thread Alan Bateman
On 18/01/2021 21:29, Bernd wrote: Hello, bad news everyone. The second Windows Filesystem related security bug reported by Jonas Lykkegaard which allows crashing Windows with a unpriveledged read access also affects JVM and it is not filtered by Path.of. Which means bot new File(bad).exists

Re: Java and the NTFS Path weakness

2021-01-18 Thread Bernd
Hello, bad news everyone. The second Windows Filesystem related security bug reported by Jonas Lykkegaard which allows crashing Windows with a unpriveledged read access also affects JVM and it is not filtered by Path.of. Which means bot new File(bad).exists() and Files.readAllLines(Path.of(bad)) w

Java and the NTFS Path weakness

2021-01-17 Thread Bernd
Hello, you might have seen the media coverage on a Microsoft Windows 10 and Windows Server problem where a certain NTFS internal path causes the Windows driver to claim corruption and mark the filesystem dirty. (Some even reported actual corruption of their filesystems). The java.nio Path seems t