SharedLibLoader loading more then one lib and SecureClassLoader

Michael Koch konqueror@gmx.de
Tue Jul 8 04:45:00 GMT 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Am Dienstag, 8. Juli 2003 06:29 schrieb Tom Tromey:
> >>>>> "Steve" == Steve Pribyl <steve@netfuel.com> writes:
>> Steve> Any reason I could not add the following method to the
> SharedLibLoader Steve> AddLibrary(String libname, flag)
> Steve> To allow more then on library to the Loader.
>> I'm not certain we even want to keep this class around.
>> Steve> Also why is this not a sub class of SecureClassLoader or
> even Steve> URLClassLoader?
>> See the patch I mentioned. It lets you add a shared library to an
> existing URLClassLoader. That is pretty convenient, since it
> integrates a little better with existing applications. At least in
> some situations.

URLClassLoader supports loading solib ? Isnt this a security whole ? 
If I prepare a special .so file on a webserver, can I then import bad 
code into the JVM ?
Michael
- -- 
Homepage: http://www.worldforge.org/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQE/Ck1oWSOgCCdjSDsRAoV9AJ4ti6VCC1TOB+h2DYb5V4Q7ko/iAwCfRk79
G1QIkvlmaR4IyQkZwW6aksc=
=R7GV
-----END PGP SIGNATURE-----


More information about the Java mailing list

AltStyle によって変換されたページ (->オリジナル) /