JDK-8177844 : Ensure non-upgradeable modules cannot be upgraded even with --patch-module
  • Type: Bug
  • Component: core-libs
  • Sub-Component: java.lang.module
  • Affected Version: 9
  • Priority: P2
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2017-03-30
  • Updated: 2017-04-08
  • Resolved: 2017-04-08
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 9
9-repo-jigsawFixed
Related Reports
Relates :  
JDK-8177845 - Need a mechanism to load Graal
Description
���patch-module is intended to allow replacing or adding content of the given module.  The implementation disables the hash checking on the patched module and it's not intended to make a non-upgradeable module be upgradeable.  It's a hole in the current implementation that using --patch-module effectively disables the hash checking and the non-upgradeable module can be loaded successfully from --upgrade-module-path.
Comments
The fix has been reviewed [1] and pushed to jake for the next jake->jdk9/dev integration: http://hg.openjdk.java.net/jigsaw/jake/jdk/rev/b2160414fe8c [1] http://mail.openjdk.java.net/pipermail/jigsaw-dev/2017-April/012109.html
08-04-2017
JDK 9 Fix Request This bug should be fixed that a non-upgradeable module should not be upgradeable.
08-04-2017