Radu Cotescu created FELIX-6697:
-----------------------------------
Summary: ServiceReference.isAssignableTo() allows any bundle to
get access to unexported services from any other bundle
Key: FELIX-6697
URL: https://issues.apache.org/jira/browse/FELIX-6697
Project: Felix
Issue Type: Bug
Components: Framework
Affects Versions: framework-7.0.5, framework-6.0.0, framework-5.0.0,
framework-4.0.0, framework-3.0.0
Reporter: Radu Cotescu
I was investigating some code that does a call similar to:
{noformat}
bundleContext.getService(bundleContext.getServiceReference("anyClassYouWant"));{noformat}
where {{anyClassYouWant}} is indeed a service provided by a different bundle
than the caller, but not exported. Therefore, there is no wire in between the
two. The requester seems to get the service without any issue. This seems to
boil down to this [0] commit:, where the thrown exception gets ignored.
[0] -
https://github.com/snefru/org.apache.felix.framework/commit/36ee4b59af9d86e4f135bbd96ae0b1b97407dcf5
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
