[jira] [Created] (FELIX-6697) ServiceReference.isAssignableTo() allows any bundle to get access to unexported services from any other bundle

["Radu Cotescu (Jira)" <ji...@apache.org>]

Radu Cotescu created FELIX-6697:
-----------------------------------

             Summary: ServiceReference.isAssignableTo() allows any bundle to get access to unexported services from any other bundle
                 Key: FELIX-6697
                 URL: https://issues.apache.org/jira/browse/FELIX-6697
             Project: Felix
          Issue Type: Bug
          Components: Framework
    Affects Versions: framework-7.0.5, framework-6.0.0, framework-5.0.0, framework-4.0.0, framework-3.0.0
            Reporter: Radu Cotescu


I was investigating some code that does a call similar to:
{noformat}
bundleContext.getService(bundleContext.getServiceReference("anyClassYouWant"));{noformat}
where {{anyClassYouWant}} is indeed a service provided by a different bundle than the caller, but not exported. Therefore, there is no wire in between the two. The requester seems to get the service without any issue. This seems to boil down to this [0] commit:, where the thrown exception gets ignored.

 

[0]  - https://github.com/snefru/org.apache.felix.framework/commit/36ee4b59af9d86e4f135bbd96ae0b1b97407dcf5



--
This message was sent by Atlassian Jira
(v8.20.10#820010)