United StatesChange Country, Oracle Worldwide Web Sites Communities I am a... I want to...
Bug ID: 6600622 Bundle security checking disabled
6600622 : Bundle security checking disabled

Details
Type:
Bug
Submit Date:
2007-09-04
Status:
Closed
Updated Date:
2010-09-08
Project Name:
JDK
Resolved Date:
2008-02-12
Component:
deploy
OS:
generic
Sub-Component:
deployment_toolkit
CPU:
generic
Priority:
P2
Resolution:
Fixed
Affected Versions:
6u5
Fixed Versions:
6u10

Related Reports

Sub Tasks

Description
A side effect of the merge of the bundle checking code with the new sun.jkernel.Bundle class disabled checking, because the sense of the securityEnabled field initialization is backwards. All of the actual security code in method download(boolean) had been tested before the merge and was cut/pasted into the new Bundle class without modification. However final tests were all run with good bundles and so this error wasn't discovered until investigation of 6595104 started.

Comments
EVALUATION

Needs fixing!
2007-09-04 
SUGGESTED FIX

In j2se/src/share/classes/sun/jkernel/Bundle.java

  private static boolean securityEnabled = "false".equals(

should be:

  private static boolean securityEnabled = ! "false".equals(
2007-09-04


Hardware and Software, Engineered to Work Together