From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 17088 invoked by alias); 11 Mar 2006 22:18:50 -0000 Received: (qmail 17074 invoked by uid 22791); 11 Mar 2006 22:18:49 -0000 X-Spam-Check-By: sourceware.org Received: from smtp4-g19.free.fr (HELO smtp4-g19.free.fr) (212.27.42.30) by sourceware.org (qpsmtpd/0.31) with ESMTP; Sat, 11 Mar 2006 22:18:48 +0000 Received: from [10.0.0.4] (pcedev.com [82.234.81.179]) by smtp4-g19.free.fr (Postfix) with ESMTP id 1B8FD4F37D; Sat, 11 Mar 2006 23:18:46 +0100 (CET) Message-ID: <44134CC8.9020907@pcedev.com> Date: Sat, 11 Mar 2006 22:18:00 -0000 From: Olivier Jolly User-Agent: Mozilla Thunderbird 1.0.7 (X11/20051017) MIME-Version: 1.0 To: Jeroen Frijters CC: mauve-discuss@sources.redhat.com, Mauve Patch List Subject: Re: runFinalization in Classloader.initialize doesn't run on cacao References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-IsSubscribed: yes Mailing-List: contact mauve-discuss-help@sourceware.org; run by ezmlm Precedence: bulk List-Subscribe: List-Archive: List-Post: List-Help: , Sender: mauve-discuss-owner@sourceware.org X-SW-Source: 2006-q1/txt/msg00061.txt.bz2 Jeroen Frijters a écrit : >Olivier Jolly wrote: > > >>Ok, I feared something like this. However, the way this test >>is written seems very obscure (to me at least). Could you advise me >> >> >why > > >>is the class loader created with an exception thrown in the >> >> >constructor > > >>and then the reference to the semi-created instance is retrieved in >> >> >the > > >>finalizer. And then I wonder why it then raises SecurityException >>instead of ClassFormatError. I reread about the finalizer semantic and >>the ClassLoader api without finding a clue. >> >> > >Read http://www.securingjava.com/chapter-five/chapter-five-8.html for a >description of the class loader attack that this is simulating. > > > Okey, it does make perfect sense now. Thanks for the test and the info. If you don't mind, I'll add comments to your testlet and link to this url. And, then, we don't have any test which checks ClassLoader.getPackages behaviour, I'm getting on this. >Regards, > > Thanks again, take care >Jeroen > > +Olivier