| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
|
| |
|
| |
|
| |
|
|
|
|
|
| |
Copy deployment configration read into system properties so it is
visibile to target programs.
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
This is a long-planned rework of JarCertVerifier, allowing it to handle
multiple certificates. The algorithms used to verify jars with multiple
certificates vary between JNLPs and Applets.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
It is possible for the ClassLoader to encounter a ClassCircularityError.
This can happen when the ClassLoader detects that checking if a class
'A' has been loaded triggers another check of whether 'A' has been
loaded before the first check has completed. This can happen easily when
trying to load Policy or Permission classes, which lie in our code path
that checks whether a class has been loaded.
One possible fix is to ensure these classes are not in the path of code
that gets executed when we are trying to check for a class. This can be
done by removing the call to getAccessControlContextForClassLoading. The
javadocs for ClassLoader.findLoadedClass do not mention any
permissions required to call the method nor do they mention that the
method can throw a SecurityException. The native code that implements
findLoadedClass does not have any security checks either. The
doProvileged block is probably not needed here and removing it breaks
the circularity.
|
| |
|
| |
|
|
|
|
| |
outside jar
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* netx/net/sourceforge/jnlp/NullJnlpFileException.java: new class to
distinguish plain NPE from null jnlp file.
* netx/net/sourceforge/jnlp/SecurityDesc.java: (getSandBoxPermissions)
added throw of NullJnlpFileException in case of null jnlp file.
* netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java: (findClass)
added Override annotation, add catch of NullJnlpFileException and
re-throw of CNF exception.
* tests/netx/unit/net/sourceforge/jnlp/runtime/CodeBaseClassLoaderTest.java:
(testResourceLoadSuccessCaching) (testResourceLoadFailureCaching)
(testParentClassLoaderIsAskedForClasses) - internal JNLPFile's
(getSecurity) null in SecurityDesc constructorrepalced by this.
(testNullFileSecurityDesc) new test to ensure NPE in null JNLPFile case.
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
certificate warning.
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
| |
icedtea-web now skips over any jars that are corrupt or not actually jars.
This is how the proprietary plugin treats this situation.
|
|
|
|
| |
extensions
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The bug manifests when the following sequence of steps happen:
1. An applet with both a codebase and a jar (archive) is loaded
2. A class Foo is loaded using the codebase classloader
3. The Foo class tries to load a class Bar that is specified in the jar
archive. The Bar class is not found.
The following applet reproduces the problem:
http://javadjvu.foxtrottechnologies.com/cgi-bin/djvuapplet.pl/examples/deer.djvu?zoom=page
The fix addresses the problem by ensuring that the codebase classloader
asks the classloader that knows about the jar archive to resolve
classes too.
|
|
|
|
|
| |
Previously folders in the archive tag were treated as jars.
They are now correctly treated as resource folders.
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
hosting server
|
| |
|
| |
|
|
|
|
| |
New rethrow of exceptions and following condition make more accurate
|
|
|
|
| |
were sufficient and clearer.
|
|
|
|
| |
PBadNonrelativeUrl
|
|
|
|
| |
JNLPClassLoader and CertificateUtils
|
|
|
|
|
|
|
| |
Any exception from this method is consumed somewhere. I have cough exception,
reprint it in debug mode and re-throw (to be lost). Main condition in this
method had several possible NullPointer exceptions. Separated and thrown before
this condition.
|
| |
|
| |
|
| |
|
|
|
|
| |
reported cases of == being used to compare String's. Some usage cases were valid (eg, .equals eventually called, magic String value). I noted one such usage case. The others were changed to .equals calls.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
2012-04-19 Omair Majid <[email protected]>
* NEWS: Update with fix.
* netx/net/sourceforge/jnlp/runtime/JNLPRuntime.java: Remove windowIcon.
(initialize): Do not call loadWindowIcon.
(getWindowIcon): Remove.
(setWindowIcon): Remove.
(loadWindowIcon): Remove.
* netx/net/sourceforge/jnlp/runtime/JNLPSecurityManager.java
(checkTopLevelWindow): Do not set the icon for all top level windows. Use
the default java icon instead.
* netx/net/sourceforge/jnlp/util/ImageResources.java: New file. Provides
access to icons.
* netx/net/sourceforge/jnlp/JNLPSplashScreen.java (JNLPSplashScreen),
* netx/net/sourceforge/jnlp/cache/DefaultDownloadIndicator.java
(getListener),
* netx/net/sourceforge/jnlp/controlpanel/AdvancedProxySettingsDialog.java
(AdvancedProxySettingsDialog),
* netx/net/sourceforge/jnlp/controlpanel/CacheViewer.java (CacheViewer),
* netx/net/sourceforge/jnlp/controlpanel/ControlPanel.java (ControlPanel),
* netx/net/sourceforge/jnlp/security/SecurityDialog.java (SecurityDialog),
* netx/net/sourceforge/jnlp/security/viewer/CertificateViewer.java
(CertificateViewer),
* netx/net/sourceforge/jnlp/util/BasicExceptionDialog.java (show),
* plugin/icedteanp/java/sun/applet/JavaConsole.java (initialize):
Explicitly load icons.
* tests/netx/unit/net/sourceforge/jnlp/util/ImageResourcesTest.java: Test
for ImageResources class.
|