[
https://issues.apache.org/jira/browse/LUCENE-9517?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17195586#comment-17195586
]
ASF subversion and git services commented on LUCENE-9517:
---------------------------------------------------------
Commit 8e95b900130e0d9658d0121a972bba1c1ec0dde5 in lucene-solr's branch
refs/heads/reference_impl_gradle_updates from Uwe Schindler
[ https://gitbox.apache.org/repos/asf?p=lucene-solr.git;h=8e95b90 ]
LUCENE-9517: Don't subclass Deflater and instead create a patch for
setDictionary() using a functional interface (#1850)
> BugfixDeflater_JDK8252739 causes Java security issues in JDK 11
> ---------------------------------------------------------------
>
> Key: LUCENE-9517
> URL: https://issues.apache.org/jira/browse/LUCENE-9517
> Project: Lucene - Core
> Issue Type: Bug
> Components: core/index
> Affects Versions: 8.x, master (9.0)
> Reporter: Ignacio Vera
> Assignee: Uwe Schindler
> Priority: Major
> Labels: Java10, Java11
> Fix For: 8.x, master (9.0)
>
> Time Spent: 5h
> Remaining Estimate: 0h
>
> We are running into issues when running Elasticsearch CI with java security
> turned on and using JDK11 (only for the ones that contains the jdk bug ).
> The errors look like:
>
>
> {code:java}
> java.security.AccessControlException: access denied
> ("java.lang.RuntimePermission" "accessDeclaredMembers") {code}
>
> The issue seems to be here:
> [http://hg.openjdk.java.net/jdk/jdk11/file/1ddf9a99e4ad/src/java.base/share/classes/java/util/zip/Deflater.java#l989]
> As we now have a subclass that wants to run this code. Note that this code
> has been removed in JDK12 and above.
> We might need to wrap the creation of this object in a doPriviledged Block or
> find a different solution that does not need to subclass the Deflater class.
>
> cc: [~uschindler]
>
>
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org
For additional commands, e-mail: issues-h...@lucene.apache.org
