115 lines
4.9 KiB
Java
115 lines
4.9 KiB
Java
/*
|
|
* Copyright (c) 2015, Oracle and/or its affiliates. All rights reserved.
|
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
*
|
|
* This code is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License version 2 only, as
|
|
* published by the Free Software Foundation.
|
|
*
|
|
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* version 2 for more details (a copy is included in the LICENSE file that
|
|
* accompanied this code).
|
|
*
|
|
* You should have received a copy of the GNU General Public License version
|
|
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*
|
|
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
* or visit www.oracle.com if you need additional information or have any
|
|
* questions.
|
|
*/
|
|
|
|
import java.io.IOException;
|
|
import java.net.URL;
|
|
import java.security.CodeSource;
|
|
import java.security.Permission;
|
|
import java.security.Policy;
|
|
import java.security.ProtectionDomain;
|
|
import java.security.SecureClassLoader;
|
|
import java.security.cert.Certificate;
|
|
import java.util.ArrayList;
|
|
import java.util.Arrays;
|
|
import java.util.Base64;
|
|
import java.util.Collections;
|
|
import java.util.List;
|
|
import java.util.PropertyPermission;
|
|
|
|
/*
|
|
* @test
|
|
* @bug 6826789
|
|
* @summary Make sure equivalent ProtectionDomains are granted the same
|
|
* permissions when the CodeSource URLs are different but resolve
|
|
* to the same ip address after name service resolution.
|
|
* @run main/othervm/java.security.policy=DefineClass.policy DefineClass
|
|
*/
|
|
|
|
public class DefineClass {
|
|
|
|
// permissions that are expected to be granted by the policy file
|
|
private final static Permission[] GRANTED_PERMS = new Permission[] {
|
|
new PropertyPermission("user.home", "read"),
|
|
new PropertyPermission("user.name", "read")
|
|
};
|
|
|
|
// Base64 encoded bytes of a simple class: "public class Foo {}"
|
|
private final static String FOO_CLASS =
|
|
"yv66vgAAADQADQoAAwAKBwALBwAMAQAGPGluaXQ+AQADKClWAQAEQ29kZQEA" +
|
|
"D0xpbmVOdW1iZXJUYWJsZQEAClNvdXJjZUZpbGUBAAhGb28uamF2YQwABAAF" +
|
|
"AQADRm9vAQAQamF2YS9sYW5nL09iamVjdAAhAAIAAwAAAAAAAQABAAQABQAB" +
|
|
"AAYAAAAdAAEAAQAAAAUqtwABsQAAAAEABwAAAAYAAQAAAAEAAQAIAAAAAgAJ";
|
|
|
|
// Base64 encoded bytes of a simple class: "public class Bar {}"
|
|
private final static String BAR_CLASS =
|
|
"yv66vgAAADQADQoAAwAKBwALBwAMAQAGPGluaXQ+AQADKClWAQAEQ29kZQEA" +
|
|
"D0xpbmVOdW1iZXJUYWJsZQEAClNvdXJjZUZpbGUBAAhCYXIuamF2YQwABAAF" +
|
|
"AQADQmFyAQAQamF2YS9sYW5nL09iamVjdAAhAAIAAwAAAAAAAQABAAQABQAB" +
|
|
"AAYAAAAdAAEAAQAAAAUqtwABsQAAAAEABwAAAAYAAQAAAAEAAQAIAAAAAgAJ";
|
|
|
|
public static void main(String[] args) throws Exception {
|
|
|
|
MySecureClassLoader scl = new MySecureClassLoader();
|
|
Policy p = Policy.getPolicy();
|
|
ArrayList<Permission> perms1 = getPermissions(scl, p,
|
|
"http://localhost/",
|
|
"Foo", FOO_CLASS);
|
|
checkPerms(perms1, GRANTED_PERMS);
|
|
ArrayList<Permission> perms2 = getPermissions(scl, p,
|
|
"http://127.0.0.1/",
|
|
"Bar", BAR_CLASS);
|
|
checkPerms(perms2, GRANTED_PERMS);
|
|
assert(perms1.equals(perms2));
|
|
}
|
|
|
|
// returns the permissions granted to the codebase URL
|
|
private static ArrayList<Permission> getPermissions(MySecureClassLoader scl,
|
|
Policy p, String url,
|
|
String className,
|
|
String classBytes)
|
|
throws IOException {
|
|
CodeSource cs = new CodeSource(new URL(url), (Certificate[])null);
|
|
Base64.Decoder bd = Base64.getDecoder();
|
|
byte[] bytes = bd.decode(classBytes);
|
|
Class<?> c = scl.defineMyClass(className, bytes, cs);
|
|
ProtectionDomain pd = c.getProtectionDomain();
|
|
return Collections.list(p.getPermissions(pd).elements());
|
|
}
|
|
|
|
private static void checkPerms(List<Permission> perms,
|
|
Permission... grantedPerms)
|
|
throws Exception
|
|
{
|
|
if (!perms.containsAll(Arrays.asList(grantedPerms))) {
|
|
throw new Exception("Granted permissions not correct");
|
|
}
|
|
}
|
|
|
|
// A SecureClassLoader that allows the test to define its own classes
|
|
private static class MySecureClassLoader extends SecureClassLoader {
|
|
Class<?> defineMyClass(String name, byte[] b, CodeSource cs) {
|
|
return super.defineClass(name, b, 0, b.length, cs);
|
|
}
|
|
}
|
|
}
|