On 10/14/2013 11:05 AM, Daniel Fuchs wrote:
Hi,

Please find below a fix for:

   8026404: Logging in Applet can trigger ACE:
         access denied ("java.lang.RuntimePermission"
         "modifyThreadGroup")

In some circumstances the call to JavaAWTAccess.getAppletContext()
will trigger a call to ecx.threadGroup.getParent() == null
The trouble is that this call will require a "modifyThreadGroup"
permission if it happens that ecx.threadGroup.getParent() is
the root thread group.

The fix for that is simple - the call to
    ecx.threadGroup.getParent() == null
needs to be done within a doPrivileged:

<http://cr.openjdk.java.net/~dfuchs/webrev_8026404/webrev.00/>


The change looks okay to me.

Mandy

Reply via email to