{"id":1935,"date":"2013-06-19T09:37:24","date_gmt":"2013-06-19T07:37:24","guid":{"rendered":"http:\/\/www.tutego.de\/blog\/javainsel\/?p=1935"},"modified":"2013-06-19T09:37:24","modified_gmt":"2013-06-19T07:37:24","slug":"java-se-7-update-25","status":"publish","type":"post","link":"https:\/\/www.tutego.de\/blog\/javainsel\/2013\/06\/java-se-7-update-25\/","title":{"rendered":"Java SE 7 Update 25"},"content":{"rendered":"

https:\/\/blogs.oracle.com\/java\/entry\/java_se_7_update_25<\/a>. Mit den \u00fcblichen Security-Udates und sonst noch ein paar \u00c4nderungen: http:\/\/www.oracle.com\/technetwork\/java\/javase\/7u25-relnotes-1955741.html<\/a>. Nicht uninteressant finde ich folgendes, was die Kompatibilit\u00e4t von existierenden Anwendungen beeinflussen k\u00f6nnte:<\/p>\n

\n
Changes to Runtime.exec<\/a><\/h5>\n

On the Windows platform, the decoding of command strings specified tojava.lang.ProcessBuilder<\/code> and the exec<\/code> methods defined by java.lang.Runtime<\/code>, has been made stricter since JDK 7u21. This may cause problems for applications that are using one or more of these methods with commands that contain spaces in the program name, or are invoking these methods with commands that are not quoted correctly. For more information see JDK 7u21 Release Notes<\/a>.<\/p>\n

In JDK 7u25, the system property jdk.lang.Process.allowAmbigousCommands<\/code> can be used to relax the checking process and may be used as a workaround for some applications that are impacted by the stricter validation. The workaround is only effective for applications that are run without a security manager. To use this workaround, either the command line should be updated to include -Djdk.lang.Process.allowAmbigousCommands=true<\/code> or the java application should set the system property jdk.lang.Process.allowAmbigousCommands<\/code> to true.<\/p>\n

Quoting and escaping commands on Windows platform is complicated. The following examples may be useful to developers if they are impacted by the stricter validation.<\/p>\n

Example 1: The application needs to be launched with C:\\Program Files\\foo.exe<\/code>.<\/p>\n

Here are 3 possible ways:<\/p>\n

Process p = new ProcessBuilder("c:\\\\Program File\\\\foo.exe").start();<\/code>
Process p = Runtime.getRuntime().exec(new String[] { "c:\\\\Program File\\\\foo.exe" });<\/code>
Process p = Runtime.getRuntime().exec("\\"c:\\\\Program File\\\\foo.exe\\"");<\/code><\/p>\n

Where it is not possible to change the application to use one of the above approaches, then the system property jdk.lang.Process.allowAmbigousCommands<\/code> may be used as a workaround.<\/p>\n

Example 2: The application needs to launch "dir > dir.out"<\/code>.
This case requires launching cmd.exe<\/code>, and also it needs the output to be redirected to a file. The best approach is to use the ProcessBuilder<\/code> as shown in the following example:<\/p>\n

Process p = new ProcessBuilder("cmd", "\/C", "dir").redirectOutput(new File("dir.out")).start();<\/code><\/p>\n

Where it not possible to change code to use ProcessBuilder<\/code> or redirectOutput<\/code>, then the following approaches can also be used:<\/p>\n

Process p = new ProcessBuilder("cmd", "\/C", "dir > dir.out").start();<\/code>
Process p = Runtime.getRuntime().exec("cmd \/C \\"dir > dir.out\\"");<\/code><\/p>\n

Example 3: The application wants to launch a command with parameters that require special quoting; for example "log.bat \\">error<\\""<\/code>.
Here are 3 possible ways to do this:<\/p>\n

Process p = new ProcessBuilder("cmd", "\/C", "log.bat", ">error<").start();<\/code>
Process p = Runtime.getRuntime().exec(new String[] { "cmd", "\/C", "log.bat", ">error<" })<\/code>
Process p = Runtime.getRuntime().exec("cmd \/C log.bat \\">error<\\"");<\/code><\/p>\n<\/blockquote>\n","protected":false},"excerpt":{"rendered":"

https:\/\/blogs.oracle.com\/java\/entry\/java_se_7_update_25. Mit den \u00fcblichen Security-Udates und sonst noch ein paar \u00c4nderungen: http:\/\/www.oracle.com\/technetwork\/java\/javase\/7u25-relnotes-1955741.html. Nicht uninteressant finde ich folgendes, was die Kompatibilit\u00e4t von existierenden Anwendungen beeinflussen k\u00f6nnte: Changes to Runtime.exec On the Windows platform, the decoding of command strings specified tojava.lang.ProcessBuilder and the exec methods defined by java.lang.Runtime, has been made stricter since JDK 7u21. This may […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_links_to":"","_links_to_target":""},"categories":[1],"tags":[],"class_list":["post-1935","post","type-post","status-publish","format-standard","hentry","category-allgemein"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.tutego.de\/blog\/javainsel\/wp-json\/wp\/v2\/posts\/1935","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tutego.de\/blog\/javainsel\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tutego.de\/blog\/javainsel\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tutego.de\/blog\/javainsel\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tutego.de\/blog\/javainsel\/wp-json\/wp\/v2\/comments?post=1935"}],"version-history":[{"count":0,"href":"https:\/\/www.tutego.de\/blog\/javainsel\/wp-json\/wp\/v2\/posts\/1935\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.tutego.de\/blog\/javainsel\/wp-json\/wp\/v2\/media?parent=1935"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tutego.de\/blog\/javainsel\/wp-json\/wp\/v2\/categories?post=1935"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tutego.de\/blog\/javainsel\/wp-json\/wp\/v2\/tags?post=1935"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}