[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Small ZipFile patch
|
From: |
Brian Jones |
|
Subject: |
Re: Small ZipFile patch |
|
Date: |
07 Apr 2003 23:31:10 -0400 |
|
User-agent: |
Gnus/5.09 (Gnus v5.9.0) Emacs/21.2 |
Tom Tromey <address@hidden> writes:
> >>>>> "Jeroen" == Jeroen Frijters <address@hidden> writes:
>
> Jeroen> Sun's ClassLoader has a hack that prevents this from being
> exploitable:
> Jeroen> http://www.securingjava.com/chapter-five/chapter-five-8.html
>
> Sounds like we need this in ClassLoader and in any other class that
> performs security checks in its constructor.
Still on my list of things to look at.
Brian
--
Brian Jones <address@hidden>
- Re: Small ZipFile patch,
Brian Jones <=