[Bug libgcj/21892] New: gnu.* and native code security audit

[Bug libgcj/21892] New: gnu.* and native code security audit

[tromey at gcc dot gnu dot org]

In order to be confident in our security implementation we must
ensure that calls to gnu.* code (which might bypass security checks)
are inaccessible to user code running in a secure context.
Some sort of automated testing would be ideal, so that we could reliably
re-run the audit whenever we like.  That will ensure we don't have
a (disastrous) regression here.

Likewise we must audit the CNI code for things like buffer overflows.

-- 
           Summary: gnu.* and native code security audit
           Product: gcc
           Version: 4.1.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: libgcj
        AssignedTo: unassigned at gcc dot gnu dot org
        ReportedBy: tromey at gcc dot gnu dot org
                CC: gcc-bugs at gcc dot gnu dot org,java-prs at gcc dot gnu
                    dot org
OtherBugsDependingO 13603
             nThis:


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=21892

[Bug libgcj/21892] gnu.* and native code security audit

[konqueror at gmx dot de]

------- Additional Comments From konqueror at gmx dot de  2005-06-03 06:14 -------
What if people wanna access some gnu.* stuff we ship directly, like 
gnu.regexp? 

-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=21892

[Bug libgcj/21892] gnu.* and native code security audit

[tromey at gcc dot gnu dot org]

------- Additional Comments From tromey at gcc dot gnu dot org  2005-06-03 15:13 -------
Good point; I think we'll have to make sure that safe and useful parts
of gnu.* are still accessible.


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=21892

[Bug libgcj/21892] gnu.* and native code security audit

[pinskia at gcc dot gnu dot org]

------- Additional Comments From pinskia at gcc dot gnu dot org  2005-06-19 14:25 -------
Confirmed.

-- 
           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
     Ever Confirmed|                            |1
   Last reconfirmed|0000-00-00 00:00:00         |2005-06-19 14:25:29
               date|                            |


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=21892

[Bug libgcj/21892] gnu.* and native code security audit

[tromey at gcc dot gnu dot org]

------- Additional Comments From tromey at gcc dot gnu dot org  2005-07-13 17:17 -------
According to mjw there is already code in classpath's ClassLoader
to do gnu.* checking (whether it is exactly what we want is not clear --
aph suggested we rename packages to make it very clear which parts
are private and which are not).

The idea is, classes loaded by the bootstrap loader have total access.
Other access attempts are checked for validity by the application loader.

I'm not sure what happens with class loaders that bypass the application
loader when delegating.


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=21892