[bug-classpath] [Bug classpath/23130] New: The supplementing classes for CORBA value type are not downloaded from URL in the CORBA message

[audriusa at bluewin dot ch]

Missing feature: An instance of the CORBA value type consists of both data and
code. When passing or returning such object during remote invocation, the data
are included into the message itself. The code (.class files) are referred by
the URL that is also included in the CORBA message, separately for each such
object. If the required classes are not available locally, they should be
downloaded from the given URL. The current CORBA implementation reads the data
part only, expecting that both server and client have the local copies of the
value type classes. It does not attempt to download any classes from the
provided URLs. 
Reason for keeping unimplemented: Like the code for a java applet, the code for
value type is downloaded from remote, sender-defined location. Such classes must
be run as an untrusted code. Some popular Free virtual machines still cannot run
such code reliably. To avoid opening security hole, I keep these "CORBA applets"
unimplemented.

-- 
           Summary: The supplementing classes for CORBA value type are not
                    downloaded from URL in the CORBA message
           Product: classpath
           Version: 0.17
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: classpath
        AssignedTo: unassigned at gcc dot gnu dot org
        ReportedBy: audriusa at bluewin dot ch
                CC: bug-classpath at gnu dot org


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=23130