[DERBY-4287] call to System.getProperty in BCClass.java is not wrapped in a priv block so may fail when running under SecurityManager

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 10.1.3.1, 10.2.2.0, 10.3.3.0, 10.4.2.0, 10.5.1.1, 10.6.1.0
• Fix Version/s: 10.1.3.3, 10.2.2.1, 10.3.3.1, 10.4.2.1, 10.5.2.0, 10.6.1.0
• Component/s: Services
• Issue & fix info: Newcomer
• Assignee: Katherine Marsden
• Reporter: Katherine Marsden
• Created: 23/Jun/09 17:52
• Updated: 12/Jan/11 22:24
• Resolved: 26/Jun/09 16:18

Description

I noticed in org.apache.derby.impl.services.bytecode.BCClass.java we have this code:

String systemHome = System.getProperty(Property.SYSTEM_HOME_PROPERTY,".");
writeClassFile(systemHome,false,null);

which will fail when run under security manager because we have no privilege block.