[
https://issues.apache.org/jira/browse/DERBY-6629?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14041820#comment-14041820
]
ASF subversion and git services commented on DERBY-6629:
--------------------------------------------------------
Commit 1605021 from [~knutanders] in branch 'code/trunk'
[ https://svn.apache.org/r1605021 ]
DERBY-6629: Restrict privileged operation in CreateXMLFile
Remove the privileged operation in the CreateXMLFile class. Instead, let
the caller do the privileged operation and pass in a Writer object that
CreateXMLFile can write the file to.
Make the tests invoke the plan exporter tool via its main class instead
of calling the internal API.
> Restrict privileged operation in CreateXMLFile
> ----------------------------------------------
>
> Key: DERBY-6629
> URL: https://issues.apache.org/jira/browse/DERBY-6629
> Project: Derby
> Issue Type: Bug
> Components: Tools
> Affects Versions: 10.10.2.0
> Reporter: Knut Anders Hatlen
> Assignee: Knut Anders Hatlen
> Attachments: d6629-1a.diff
>
>
> The PlanExporter tool has a public method CreateXMLFile.writeTheXMLFile().
> This method opens a FileOutputStream in a privileged block. We should change
> this so that unprivileged code cannot use the method to write files using
> derbytools.jar's privileges.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
