This Bugzilla instance is a read-only archive of historic NetBeans bug reports. To report a bug in NetBeans please follow the project's instructions for reporting issues.

Bug 69647

Summary: Module class loaders should refuse access to nonpublic packages in CP modules
Product: platform Reporter: Jesse Glick <jglick>
Component: Module SystemAssignee: Jesse Glick <jglick>
Status: RESOLVED WONTFIX    
Severity: blocker CC: jtulach
Priority: P4    
Version: 5.x   
Hardware: All   
OS: All   
Issue Type: DEFECT Exception Reporter:

Description Jesse Glick 2005-11-30 17:29:47 UTC
E.g. AWTBridge should never be made accessible to random modules.
Comment 1 Jesse Glick 2008-11-24 15:55:24 UTC
E.g.

public class Installer extends ModuleInstall {
    @Override
    public void restored() {
        try {
            System.err.println("Can load: " + Class.forName("org.netbeans.modules.openide.util.AWTBridge"));
        } catch (ClassNotFoundException x) {
            x.printStackTrace();
        }
    }
}

should fail.

Not clear how to fix easily. StandardModule.OneModuleClassLoader.shouldDelegateResource would need to identify the owner
of a package in the startup class loader, which is not so easy, and might have performance implications.
Comment 2 Quality Engineering 2009-11-02 10:59:17 UTC
NetBeans.org Migration: changing resolution from LATER to WONTFIX