[rfc][icedtea-web] set location for jnlpHreffed jnlp file correctly (rh1072013)

Jiri Vanek jvanek at redhat.com
Mon Mar 10 14:08:35 UTC 2014

On 03/08/2014 04:58 AM, Andrew Azores wrote:
> No, I don't think there's any way to make applets able to call System.exit() with the custom policies. Not with the way JNLPSecurityManager is currently written. I can't think of a valid reason an applet would need to be able to kill the JVM though... so I don't think it's worth modifying the security manager to allow this.
Well. I was thinking moreover if it is usable as workaround before upstream removes the call.

But this lead me to idea - why is system.exit not checked against policies as all other stuff?
But I can probably answer - because there is no such policy?

> Patch itself looks good to me.

Thanx, pushed.
> Thanks,
> Andrew A
> ----- Original Message -----
> From: "Jiri Vanek"<jvanek at redhat.com>
> To: "IcedTea Distro List"<distro-pkg-dev at openjdk.java.net>
> Sent: Friday, March 7, 2014 7:40:28 AM
> Subject: [rfc][icedtea-web] set location for jnlpHreffed jnlp file correctly	(rh1072013)
> When plugin is using jnlpHref to start, the location of jnlp file is not stored properly.  When one
> wonts to use it, he got NPE. Proably only usecase when this is visible is signature by jnlp (then
> tmplate have nothing to match)
> However  I have not made the http://www.arcadeflex.com/releases/v0.36.4/launch.php?id=134 run :(
> Now it is dying with itself :
> Exception in thread "Thread-8" java.security.AccessControlException: Applets may not call System.exit()
> 	at net.sourceforge.jnlp.runtime.JNLPSecurityManager.checkExit(JNLPSecurityManager.java:391)
> 	at javax.swing.JFrame.setDefaultCloseOperation(JFrame.java:388)
> 	at arcadeflex.UrlDownloadProgress.initComponents(UrlDownloadProgress.java:46)
> 	at arcadeflex.UrlDownloadProgress.<init>(UrlDownloadProgress.java:28)
> 	at arcadeflex.osdepend.main(osdepend.java:75)
> 	at arcadeflex.MainApplet$1.run(MainApplet.java:78)
> 	at java.lang.Thread.run(Thread.java:744)
> Andrew, can your policy enhancement grant exit System.exit? Just worthy to try :)
> J.
> ps: reproducers for this are missing.

More information about the distro-pkg-dev mailing list