On 02.11.2016 19:23, Sergey Bylokhov wrote:

On 02.11.16 9:43, Semyon Sadetsky wrote:
The path is not printed because there always several paths to look for
the system module.
But I did not get how filesystem read permission is related to the
console output.

This is not a console output this is an exception which can be handled.
Really?
How?

This is a question how to catch an exception which we throw in the Java_sun_awt_shell_Win32ShellFolder2_initIDs, or what?
You are right it is possible. I already wrote the path is not shown. What is your concern?

Filesystem access can be blocked by Securitymanager, access to the
system properties can be blocked as well. So we should not expose
these data via any other ways, like via the messages from the native
errors.

Some useful link:
http://www.oracle.com/technetwork/java/seccodeguide-139067.html#2





Reply via email to