Hi Alex,
There is no need to repeat this:
"deploy applications that package an agent with the application,
or use tools that load agents into a running application"
I'd suggest to rephrase it to something like:
"Agents can transform classes in arbitrary ways at load time, transform
modules, or transform the bytecode of methods of already loaded classes.
Developers or administrators that deploy agents are responsible for their
trustworthiness and must therefore verify each agent including the content
and structure of its JAR file."
Also, could you, please, replace:
* <p> The three ways to start an agent is described below.
with:
* <p> The three ways to start an agent are described below.
Thanks,
Serguei
On 5/7/20 18:19, Alex Menkov wrote:
There is no need to repeat this:
"deploy applications that package an agent with the application,
or use tools that load agents into a running application"
I'd suggest to rephrase it to something like:
"Agents can transform classes in arbitrary ways at load time, transform
modules, or transform the bytecode of methods of already loaded classes.
Developers or administrators that deploy agents are responsible for their
trustworthiness and must therefore verify each agent including the content
and structure of its JAR file."
Also, could you, please, replace:
* <p> The three ways to start an agent is described below.
with:
* <p> The three ways to start an agent are described below.
Thanks,
Serguei
On 5/7/20 18:19, Alex Menkov wrote:
On 05/01/2020 15:22, Alex Menkov wrote:
Hi all,
Please review the fix for
https://bugs.openjdk.java.net/browse/JDK-8243012
The change fixes security note in the java.lang.instrument javadoc.
webrev:
http://cr.openjdk.java.net/~amenkov/jdk15/java_instrument_spec/webrev.1/
--alex