You are viewing a plain text version of this content. The canonical link for it is here.

Posted to derby-dev@db.apache.org by "Knut Anders Hatlen (JIRA)" <ji...@apache.org> on 2014/06/24 09:40:25 UTC

[jira] [Resolved] (DERBY-6629) Restrict privileged operation in CreateXMLFile

     [ https://issues.apache.org/jira/browse/DERBY-6629?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Knut Anders Hatlen resolved DERBY-6629.
---------------------------------------

          Resolution: Fixed
       Fix Version/s: 10.11.0.0
    Issue & fix info:   (was: Patch Available)

Thanks, Bryan. I've checked in the patch on trunk. Resolving the issue.

> Restrict privileged operation in CreateXMLFile
> ----------------------------------------------
>
>                 Key: DERBY-6629
>                 URL: https://issues.apache.org/jira/browse/DERBY-6629
>             Project: Derby
>          Issue Type: Bug
>          Components: Tools
>    Affects Versions: 10.10.2.0
>            Reporter: Knut Anders Hatlen
>            Assignee: Knut Anders Hatlen
>             Fix For: 10.11.0.0
>
>         Attachments: d6629-1a.diff
>
>
> The PlanExporter tool has a public method CreateXMLFile.writeTheXMLFile(). This method opens a FileOutputStream in a privileged block. We should change this so that unprivileged code cannot use the method to write files using derbytools.jar's privileges.



--
This message was sent by Atlassian JIRA
(v6.2#6252)