Class loaders, etc
gback at cs.utah.edu
Sun Aug 23 18:08:51 PDT 1998
> In particular, does kaffe support the new 1.2 security checking model?
> - Does kaffe differentiate between (and support simultaneous instances
> of) two classes loaded via different class loader instances?
Yes. Except for the security part, class loaders work just fine.
> - Does kaffe maintain a set of constraints to prevent the security
> exploit described in the paper?
No. Kaffe's classloader mechanism is broken in the same way other 1.1
> Also, what's the state of byte-code verification in kaffe.. and is
> anyone actively working on this?
I do not know, but I agree it needs to be done. Before fixing class loaders,
I think the first step will be to implement elementary security checks, such
as honoring private and protected.
More information about the kaffe