Knut Anders Hatlen created DERBY-6629:
-----------------------------------------

             Summary: Restrict privileged operation in CreateXMLFile
                 Key: DERBY-6629
                 URL: https://issues.apache.org/jira/browse/DERBY-6629
             Project: Derby
          Issue Type: Bug
          Components: Tools
    Affects Versions: 10.10.2.0
            Reporter: Knut Anders Hatlen
            Assignee: Knut Anders Hatlen


The PlanExporter tool has a public method CreateXMLFile.writeTheXMLFile(). This 
method opens a FileOutputStream in a privileged block. We should change this so 
that unprivileged code cannot use the method to write files using 
derbytools.jar's privileges.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to