|
If you were logged in you would be able to see more operations.
|
|
|
| Bug behavior facts: |
Security
|
| Resolution Date: |
30/Sep/05 02:26 AM
|
|
In addiing test cases to lang/dcl.test for signed jar files stored in the database I found that if a jar is installed with a tampered class the resulting SecurityException shuts Derby down. Most likely the same would be true for an invalid class hacked into the jar.
|
|
Description
|
In addiing test cases to lang/dcl.test for signed jar files stored in the database I found that if a jar is installed with a tampered class the resulting SecurityException shuts Derby down. Most likely the same would be true for an invalid class hacked into the jar. |
Show » |
made changes - 05/Aug/05 09:31 AM
| Field |
Original Value |
New Value |
|
Fix Version/s
|
|
10.2.0.0
[ 11187
]
|
made changes - 05/Aug/05 09:33 AM
|
Status
|
Open
[ 1
]
|
Resolved
[ 5
]
|
|
Resolution
|
|
Fixed
[ 1
]
|
made changes - 20/Sep/05 06:55 AM
|
Fix Version/s
|
|
10.1.2.0
[ 12310270
]
|
made changes - 30/Sep/05 02:26 AM
|
Resolution
|
Fixed
[ 1
]
|
|
|
Status
|
Resolved
[ 5
]
|
Reopened
[ 4
]
|
made changes - 30/Sep/05 02:26 AM
|
Fix Version/s
|
|
10.1.1.1
[ 12310332
]
|
made changes - 30/Sep/05 02:26 AM
|
Status
|
Reopened
[ 4
]
|
Closed
[ 6
]
|
|
Resolution
|
|
Fixed
[ 1
]
|
made changes - 30/Jun/09 12:12 AM
|
Derby Categories
|
|
[Security]
|
made changes - 30/Jun/09 12:14 AM
|
Component/s
|
Security
[ 11411
]
|
|
|
Bug
Closed
Minor
SecurityException or LinkageException thrown during loading a class from a database jar incorrectly shuts the engine down.
classes (e.g. procedures, functions) and report as a ClassNotFoundException with the text of
the underlying exception. Enhance the test lang/dcl.jar to have a signed jar file as a database
jar, a hacked version of the jar file and a jar file with an invalid class (for a LinkageError).