You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@ofbiz.apache.org by "Dennis Balkir (JIRA)" <ji...@apache.org> on 2017/08/25 13:11:00 UTC
[jira] [Updated] (OFBIZ-9631) [FB] Package
org.apache.ofbiz.common.period
[ https://issues.apache.org/jira/browse/OFBIZ-9631?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Dennis Balkir updated OFBIZ-9631:
---------------------------------
Attachment: OFBIZ-9631_org.apache.ofbiz.common.period_bugfixes.patch
- changed the parameter to final and private, to prevent possible vulnerability through external code changing
> [FB] Package org.apache.ofbiz.common.period
> -------------------------------------------
>
> Key: OFBIZ-9631
> URL: https://issues.apache.org/jira/browse/OFBIZ-9631
> Project: OFBiz
> Issue Type: Sub-task
> Components: framework
> Affects Versions: Trunk
> Reporter: Dennis Balkir
> Priority: Minor
> Attachments: OFBIZ-9631_org.apache.ofbiz.common.period_bugfixes.patch
>
>
> - PeriodWorker.java:34, MS_SHOULD_BE_FINAL
> MS: org.apache.ofbiz.common.period.PeriodWorker.module isn't final but should be
> This static field public but not final, and could be changed by malicious code or by accident from another package. The field could be made final to avoid this vulnerability.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)