JDK-8136844 : Change JavawsLauncher.app to use NSTask or execv
  • Type: Bug
  • Component: deploy
  • Sub-Component: webstart
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • OS: os_x
  • Submitted: 2015-09-21
  • Updated: 2016-10-18
  • Resolved: 2015-10-02
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 8 JDK 9
8u102Fixed 9 b89Fixed
Related Reports
Relates :  
JDK-8055464 - Add a URL scheme handler to reliably launch .jnlp files - java part
Description
Chris Ries requested changing the call to system to execv, but NSTask is just as good.

In AppDelegate.m change the call to system to either NSTask or execv. URLs could have spaces which would be a potential vulnerability. Here is an example of NSTask:

    NSTask *task = [[NSTask alloc] init];
    task.launchPath = @"/Library/Internet\\ Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/bin/javaws";
    task.arguments = @[url];
    [task launch];