1 files changed, 63 insertions, 0 deletions
diff --git a/tests/jnlp_tests/signed/ReadPropertiesBySignedHack/srcs/ReadPropertiesBySignedHack.java b/tests/jnlp_tests/signed/ReadPropertiesBySignedHack/srcs/ReadPropertiesBySignedHack.java
new file mode 100644
index 0000000..cea64af
--- /dev/null
+++ b/tests/jnlp_tests/signed/ReadPropertiesBySignedHack/srcs/ReadPropertiesBySignedHack.java
@@ -0,0 +1,63 @@
+/* ReadPropertiesSigned.java
+Copyright (C) 2011 Red Hat, Inc.
+
+This file is part of IcedTea.
+
+IcedTea is free software; you can redistribute it and/or
+modify it under the terms of the GNU General Public License as published by
+the Free Software Foundation, version 2.
+
+IcedTea is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with IcedTea; see the file COPYING.  If not, write to
+the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+02110-1301 USA.
+
+Linking this library statically or dynamically with other modules is
+making a combined work based on this library.  Thus, the terms and
+conditions of the GNU General Public License cover the whole
+combination.
+
+As a special exception, the copyright holders of this library give you
+permission to link this library with independent modules to produce an
+executable, regardless of the license terms of these independent
+modules, and to copy and distribute the resulting executable under
+terms of your choice, provided that you also meet, for each linked
+independent module, the terms and conditions of the license of that
+module.  An independent module is a module which is not derived from
+or based on this library.  If you modify this library, you may extend
+this exception to your version of the library, but you are not
+obligated to do so.  If you do not wish to do so, delete this
+exception statement from your version.
+ */
+import java.lang.reflect.*;
+
+public class ReadPropertiesBySignedHack {
+
+    /**
+    *some system property is expected as arg[0], eg user.name or user.home
+    */    
+    public static void main(String[] args) throws Throwable {
+        //security manager is not protecting us from accessing classes  from
+        //net.sourceforge.jnlp.runtime via reflection
+        Class c2= Class.forName("net.sourceforge.jnlp.runtime.JNLPRuntime");
+        Field f2 = c2.getDeclaredField("trustAll");
+        f2.setAccessible(true);
+        f2.setBoolean(null, true);
+        Method m2=c2.getDeclaredMethod("setTrustAll",Boolean.TYPE);
+        m2.setAccessible(true);
+        m2.invoke((Object) null, true );
+        //but security manager is guarding us against lunching unsigned code
+        //from signed archvive even if Xtrustall is on.
+        Class c1= Class.forName("ReadProperties");
+        Method m1=c1.getDeclaredMethod("main",args.getClass());
+        m1.invoke((Object) null, (Object)args);
+    }
+         
+
+  
+}