[ 
https://issues.apache.org/jira/browse/DERBY-6629?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14171480#comment-14171480
 ] 

Myrna van Lunteren commented on DERBY-6629:
-------------------------------------------

I've decided to back out backport and mark this one backport_reject.
The new version of the test relies on being able to pass a url around and so 
call the planexporter tool with that. This implies having a DriverManager 
connection. However, in the case of j2ME, there is no DriverManager connection, 
so this would not work.
I do not think it's ok to disable the test for this environment.
I played with trying to use the old version of the test and adjusting it, but 
the changes get complex so it's probably not a good thing.


> Restrict privileged operation in CreateXMLFile
> ----------------------------------------------
>
>                 Key: DERBY-6629
>                 URL: https://issues.apache.org/jira/browse/DERBY-6629
>             Project: Derby
>          Issue Type: Bug
>          Components: Tools
>    Affects Versions: 10.10.2.0
>            Reporter: Knut Anders Hatlen
>            Assignee: Myrna van Lunteren
>             Fix For: 10.11.1.1
>
>         Attachments: d6629-1a.diff
>
>
> The PlanExporter tool has a public method CreateXMLFile.writeTheXMLFile(). 
> This method opens a FileOutputStream in a privileged block. We should change 
> this so that unprivileged code cannot use the method to write files using 
> derbytools.jar's privileges.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to