Re: [cp-patches] FYI: Patch java.lang.ClassLoader

[Archie Cobbs]

Jeroen Frijters wrote:
> > > I committed the attached patch to implement the
> > > SecurityManager.checkPackageDefinition() security check.
> > 
> > Just checking.. can this be subverted by the same trick mentioned
> > before, i.e., using '/' instead of '.' in the class name?
> 
> Not if the VM does its job. VMClassLoader.defineClass() is supposed to
> check that the class file name matches the name in the class definition.

Ah right.. thanks.

-Archie

__________________________________________________________________________
Archie Cobbs      *        CTO, Awarix        *      http://www.awarix.com