640a2afda3
Co-authored-by: Lance Andersen <lancea@openjdk.org> Co-authored-by: Weijun Wang <weijun@openjdk.org> Reviewed-by: dholmes, alanb, dfuchs, mchung, mullan, prr
110 lines
3.6 KiB
Java
110 lines
3.6 KiB
Java
/*
|
|
* Copyright (c) 2005, Oracle and/or its affiliates. All rights reserved.
|
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
*
|
|
* This code is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License version 2 only, as
|
|
* published by the Free Software Foundation.
|
|
*
|
|
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* version 2 for more details (a copy is included in the LICENSE file that
|
|
* accompanied this code).
|
|
*
|
|
* You should have received a copy of the GNU General Public License version
|
|
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*
|
|
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
* or visit www.oracle.com if you need additional information or have any
|
|
* questions.
|
|
*/
|
|
|
|
/*
|
|
* @test
|
|
* @bug 6256734
|
|
* @summary ProtectionDomain could optimize implies by first checking for
|
|
* AllPermission in internal collection
|
|
* @run main/othervm -Djava.security.manager=allow AllPerm
|
|
*/
|
|
|
|
import java.io.*;
|
|
import java.net.*;
|
|
import java.security.*;
|
|
import java.lang.reflect.*;
|
|
|
|
public class AllPerm {
|
|
|
|
private static final Class[] ARGS = new Class[] { };
|
|
private static ProtectionDomain allPermClassDomain;
|
|
|
|
public static void main(String[]args) throws Exception {
|
|
|
|
// create custom class loader that assigns AllPermission to
|
|
// classes it loads
|
|
|
|
File file = new File(System.getProperty("test.src"), "AllPerm.jar");
|
|
URL[] urls = new URL[] { file.toURL() };
|
|
ClassLoader parent = Thread.currentThread().getContextClassLoader();
|
|
AllPermLoader loader = new AllPermLoader(urls, parent);
|
|
|
|
// load a class from AllPerm.jar using custom loader
|
|
|
|
Object o = loader.loadClass("AllPermClass").newInstance();
|
|
Method doCheck = o.getClass().getMethod("doCheck", ARGS);
|
|
allPermClassDomain = o.getClass().getProtectionDomain();
|
|
|
|
// set a custom Policy and set the SecurityManager
|
|
|
|
Policy.setPolicy(new AllPermPolicy());
|
|
System.setSecurityManager(new SecurityManager());
|
|
|
|
// invoke method on loaded class, which will perform a
|
|
// security-sensitive operation. custom policy will check
|
|
// to see if it is called (it should not be called)
|
|
|
|
doCheck.invoke(o, ARGS);
|
|
}
|
|
|
|
/**
|
|
* this class loader assigns AllPermission to classes that it loads
|
|
*/
|
|
private static class AllPermLoader extends URLClassLoader {
|
|
|
|
public AllPermLoader(URL[] urls, ClassLoader parent) {
|
|
super(urls, parent);
|
|
}
|
|
|
|
protected PermissionCollection getPermissions(CodeSource codesource) {
|
|
Permissions perms = new Permissions();
|
|
perms.add(new AllPermission());
|
|
return perms;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* this policy should not be called if domain is allPermClassDomain
|
|
*/
|
|
private static class AllPermPolicy extends Policy {
|
|
public boolean implies(ProtectionDomain domain, Permission permission) {
|
|
if (domain == allPermClassDomain) {
|
|
throw new SecurityException
|
|
("Unexpected call into AllPermPolicy");
|
|
}
|
|
return true;
|
|
}
|
|
}
|
|
}
|
|
|
|
/**
|
|
* here is the source code for AllPermClass inside AllPerm.jar
|
|
*/
|
|
/*
|
|
public class AllPermClass {
|
|
public void doCheck() {
|
|
System.getProperty("user.name");
|
|
}
|
|
}
|
|
*/
|