A Bug in AccessControlContext.equals() and hashCode()? (original) (raw)

Xiaomin Ding dingding303 at gmail.com
Thu Jun 26 04:02:24 UTC 2014


On 6/16/2014 10:40 PM, David M. Lloyd wrote: On 06/16/2014 09:19 AM, Frank Ding wrote:

Hi Jeff, Thanks for your reply. One further question is that you confirmed that two AccessControlContext objects considered equal via method equals() should return same results for AccessControlContext.checkPermission() but test shows that 2 AccessControlContext objects are equal regardless of isLimited, limitedContext, parent, permissions, or privilegedContext. Does it make sense and apply to Java 8 AccessControlContext with JEP140? Is it not true that a limited privileged context simply adds a protection domain that restricts permissions to the limited set? This seems to be the "obvious" implementation of the feature. If so, then equals() should have taken it into account as a matter of course. -- - DML Hi Jeff, Could you pls let us know your insight?

Regards, Frank



More information about the security-dev mailing list