-
Enhancement
-
Resolution: Fixed
-
P3
-
9
-
None
-
b89
-
generic
-
generic
| Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
|---|---|---|---|---|---|---|
| JDK-8142838 | emb-9 | Attila Szegedi | P3 | Resolved | Fixed | team |
Make sure CallSiteDescriptor classes perform a security check on getLookup(). When needed, invoke getLookup() using privileged operation. At the same time, minimize the need to use a Lookup object.
This is not a security issue at the moment as all of Dynalink is in a restricted package.
This is not a security issue at the moment as all of Dynalink is in a restricted package.
- backported by
-
JDK-8142838 Make sure CallSiteDescriptor.getLookup is subject to a security check
-
- Resolved
-
- relates to
-
-
- Resolved
-