Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8332786

When dumping static CDS archives, explicitly assert that we don't use a CDS archive

XMLWordPrintable

    • Icon: Enhancement Enhancement
    • Resolution: Fixed
    • Icon: P4 P4
    • 24
    • 23
    • hotspot
    • b05

      Currently, we don't use a CDS archive when dumping the static archive. And that is fine.

      It has security implications: if a customer re-generates the dump with -Xshare:dump, the content of the dump should depend on only the runtime parts of the JVM, resp. only on those parts that had been built on the build host. It should not depend on an archive that may or may not have been produced after the build and that may be tainted.

      This just reduces the attack surface for possible supply chain attacks.

      Since we already do this, I'd only like to add explicit asserts to ensure that we continue to do this.

            stuefe Thomas Stuefe
            stuefe Thomas Stuefe
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: