-
Bug
-
Resolution: Not an Issue
-
P4
-
None
-
1.3.0
-
generic
-
generic
I've run JSAT (Java Security-Audit Tool) on some of AWT source files and found
that xrgbmodel (the color model) is non-final public static in
java.awt.TexturePaintContext and consequently any client which has access to the
PaintContext can modify it. Is this intentional? I'm not sure what
the consequences of this might be; Still, if the intention is to let
users modify the color model, this should be done via an accessor
method.
that xrgbmodel (the color model) is non-final public static in
java.awt.TexturePaintContext and consequently any client which has access to the
PaintContext can modify it. Is this intentional? I'm not sure what
the consequences of this might be; Still, if the intention is to let
users modify the color model, this should be done via an accessor
method.