RFR (M): 7198429: need checked categorization of caller-sensitive methods in the JDK
mandy.chung at oracle.com
Thu Mar 21 18:11:11 UTC 2013
On 3/20/2013 2:33 AM, Peter Levart wrote:
> If I understand correctly, sun.reflect.Reflection.getCallerClass(int)
> will not be usable by non-system code any more. I know it's not a
> public API, but it's useful in some situations (not security-related)
> and there's no public API for that functionality.
Do you have any example of existing use of Reflection.getCallerClass to
find immediate caller class? or does it need to walk the stack? That'd
> Is there a reason to not "unofficially" support also classes with @CS
> annotated methods and which are not loaded by bootstrap or extension
> class-loader ?
We expect that most of the caller-sensitive cases are in the JDK and
should be rare for non-system libraries to have caller-sensitive code.
It'd be good to understand the use cases and the requirements to
determine the appropriate support for it.
> Regards, Peter
> On 03/15/2013 04:31 AM, Christian Thalinger wrote:
>> [This is the HotSpot part of JEP 176]
>> 7198429: need checked categorization of caller-sensitive methods in
>> the JDK
>> More information in JEP 176:
More information about the core-libs-dev