[rfc][icedtea-web] set location for jnlpHreffed jnlp file correctly (rh1072013)

Andrew Azores aazores at redhat.com
Sat Mar 8 03:58:20 UTC 2014

No, I don't think there's any way to make applets able to call System.exit() with the custom policies. Not with the way JNLPSecurityManager is currently written. I can't think of a valid reason an applet would need to be able to kill the JVM though... so I don't think it's worth modifying the security manager to allow this.

Patch itself looks good to me.


Andrew A

----- Original Message -----
From: "Jiri Vanek" <jvanek at redhat.com>
To: "IcedTea Distro List" <distro-pkg-dev at openjdk.java.net>
Sent: Friday, March 7, 2014 7:40:28 AM
Subject: [rfc][icedtea-web] set location for jnlpHreffed jnlp file correctly	(rh1072013)

When plugin is using jnlpHref to start, the location of jnlp file is not stored properly.  When one 
wonts to use it, he got NPE. Proably only usecase when this is visible is signature by jnlp (then 
tmplate have nothing to match)

However  I have not made the http://www.arcadeflex.com/releases/v0.36.4/launch.php?id=134 run :(

Now it is dying with itself :

Exception in thread "Thread-8" java.security.AccessControlException: Applets may not call System.exit()
	at net.sourceforge.jnlp.runtime.JNLPSecurityManager.checkExit(JNLPSecurityManager.java:391)
	at javax.swing.JFrame.setDefaultCloseOperation(JFrame.java:388)
	at arcadeflex.UrlDownloadProgress.initComponents(UrlDownloadProgress.java:46)
	at arcadeflex.UrlDownloadProgress.<init>(UrlDownloadProgress.java:28)
	at arcadeflex.osdepend.main(osdepend.java:75)
	at arcadeflex.MainApplet$1.run(MainApplet.java:78)
	at java.lang.Thread.run(Thread.java:744)

Andrew, can your policy enhancement grant exit System.exit? Just worthy to try :)


ps: reproducers for this are missing.

More information about the distro-pkg-dev mailing list