JDK-8234267 : DelegationPermission implementation doesn't completely follow the updated specification
- Type: Bug
- Component: security-libs
- Sub-Component: javax.security
- Affected Version: 14
- Priority: P2
- Status: Closed
- Resolution: Fixed
- Submitted: 2019-11-15
- Updated: 2020-02-12
- Resolved: 2019-12-05
The Version table provides details related to the release that this issue/RFE will be addressed.
Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.
To download the current JDK release, click here.
Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.
To download the current JDK release, click here.
| JDK 14 |
|---|
14 b27Fixed  |
Related Reports
|
Relates :
|
Description
JDK-8232155 added the following statement to DelegationPermission(String) constructor spec:
+ * @throws IllegalArgumentException if {@code principals} is empty,
+ * or does not contain a pair of principals, or is improperly quoted
However this is not followed by OpenJDK14 implementation as
new DelegationPermission("\"ab\" \"cd")
is still possible to instantiate without IAE thrown
The same happens for
""ab"" "cd"
"ab" "cd"""
Comments
|