This Bugzilla instance is a read-only archive of historic NetBeans bug reports. To report a bug in NetBeans please follow the project's instructions for reporting issues.

Bug 69647 - Module class loaders should refuse access to nonpublic packages in CP modules
Summary: Module class loaders should refuse access to nonpublic packages in CP modules
Status: RESOLVED WONTFIX
Alias: None
Product: platform
Classification: Unclassified
Component: Module System (show other bugs)
Version: 5.x
Hardware: All All
: P4 blocker (vote)
Assignee: Jesse Glick
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-11-30 17:29 UTC by Jesse Glick
Modified: 2009-11-02 10:59 UTC (History)
1 user (show)

See Also:
Issue Type: DEFECT
Exception Reporter:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jesse Glick 2005-11-30 17:29:47 UTC
E.g. AWTBridge should never be made accessible to random modules.
Comment 1 Jesse Glick 2008-11-24 15:55:24 UTC
E.g.

public class Installer extends ModuleInstall {
    @Override
    public void restored() {
        try {
            System.err.println("Can load: " + Class.forName("org.netbeans.modules.openide.util.AWTBridge"));
        } catch (ClassNotFoundException x) {
            x.printStackTrace();
        }
    }
}

should fail.

Not clear how to fix easily. StandardModule.OneModuleClassLoader.shouldDelegateResource would need to identify the owner
of a package in the startup class loader, which is not so easy, and might have performance implications.
Comment 2 Quality Engineering 2009-11-02 10:59:17 UTC
NetBeans.org Migration: changing resolution from LATER to WONTFIX