[DERBY-6654] Require that generated code live in the org.apache.derby.exe package.

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 10.11.1.1
• Fix Version/s: 10.12.1.1
• Component/s: Services
• Labels: derby_backport_reject_10_11
• Assignee: Richard N. Hillegas
• Reporter: Richard N. Hillegas
• Created: 09/Jul/14 17:27
• Updated: 01/Oct/14 17:41
• Resolved: 24/Sep/14 15:21

Description

We require that generated code must implement Activation. This helps prevent applications from using Derby's class loaders to load arbitrary classes. We should also require that generated code live in the org.apache.derby.exe package. This will prevent applications from loading highly privileged code using Derby class loaders.