[
https://issues.apache.org/jira/browse/DERBY-6654?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14146419#comment-14146419
]
Rick Hillegas commented on DERBY-6654:
--------------------------------------
The ClassLoadingTest introduced by this issue depends on work done on
DERBY-6648. I don't think this issue is worth the effort to unravel that
dependency. So I don't intend to back port this work to the 10.11 branch or
earlier.
> Require that generated code live in the org.apache.derby.exe package.
> ---------------------------------------------------------------------
>
> Key: DERBY-6654
> URL: https://issues.apache.org/jira/browse/DERBY-6654
> Project: Derby
> Issue Type: Bug
> Components: Services
> Affects Versions: 10.11.1.1
> Reporter: Rick Hillegas
> Assignee: Rick Hillegas
> Fix For: 10.12.0.0
>
> Attachments: derby-6654-01-aa-requireCorrectPackage.diff,
> derby-6654-02-aa-ClassLoadingTest.diff
>
>
> We require that generated code must implement Activation. This helps prevent
> applications from using Derby's class loaders to load arbitrary classes. We
> should also require that generated code live in the org.apache.derby.exe
> package. This will prevent applications from loading highly privileged code
> using Derby class loaders.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
