[Bug classpath/25469] New: ServerSocket security checks incorrect

[tromey at gcc dot gnu dot org]

Right now ServerSocket.accept does this:

    SecurityManager sm = System.getSecurityManager();
    if (sm != null)
      sm.checkAccept(impl.getInetAddress().getHostAddress(),
                     impl.getLocalPort());

This is wrong.  The check must use the remote host and port,
not the local one (which is not even set yet, at least in
classpath).

Instead the check should occur in implAccept or in the native
code.


-- 
           Summary: ServerSocket security checks incorrect
           Product: classpath
           Version: 0.20
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: classpath
        AssignedTo: unassigned at gcc dot gnu dot org
        ReportedBy: tromey at gcc dot gnu dot org
OtherBugsDependingO 13603
             nThis:


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=25469