Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8136844

Change JavawsLauncher.app to use NSTask or execv

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: P3
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 9
    • Component/s: deploy
    • Subcomponent:
    • Resolved In Build:
      b89
    • OS:
      os_x

      Backports

        Description

        Chris Ries requested changing the call to system to execv, but NSTask is just as good.

        In AppDelegate.m change the call to system to either NSTask or execv. URLs could have spaces which would be a potential vulnerability. Here is an example of NSTask:

            NSTask *task = [[NSTask alloc] init];
            task.launchPath = @"/Library/Internet\\ Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/bin/javaws";
            task.arguments = @[url];
            [task launch];

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  cbensen Chris Bensen (Inactive)
                  Reporter:
                  cbensen Chris Bensen (Inactive)
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  2 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: