On 3/28/06, Michael S Hines <[EMAIL PROTECTED]> wrote: > Isn't it possible to break out of the sandbox even with managed code? (That > is, can't > managed code call out to unmanaged code, i.e. Java call to C++)? I was > thinking this was > documented for Java - perhaps for various flavors of .Net too?
Java _can_ call c++ but the the way to do it can be restricted by the security manager. i.e. you can't call "System.loadLibrary" without permission. you "may" be able to call native functions of already loaded dll's though by registering their headers like: public native foo( ... ); not sure how far you'll get with that though. -- Michael _______________________________________________ Secure Coding mailing list (SC-L) SC-L@securecoding.org List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l List charter available at - http://www.securecoding.org/list/charter.php
