openjdk team mailing list archive

[Alan Tam <Tam@xxxxxxxxxxx>]

FYI, this bug (in version 6b11-2ubuntu2.1) is pushed into hardy-
security, hence causing a security regression.

-- 
javascript script support through rhino should not be on bootclasspath
https://bugs.launchpad.net/bugs/255149
You received this bug notification because you are a member of OpenJDK,
which is subscribed to openjdk-6 in ubuntu.

Status in OpenJDK: Confirmed
Status in “openjdk-6” source package in Ubuntu: Confirmed

Bug description:
I'm trying to run a custom rhino to build Dojo, but OpenJDK keeps ignoring the rhino in the jar file I provide and keeps loading rhino from the system libs:

$ java -verbose:class -jar ../shrinksafe/custom_rhino.jar
...
[Opened /usr/lib/jvm/java-6-openjdk/jre/lib/rhino.jar]
[Loaded org.mozilla.javascript.tools.shell.Main from /usr/lib/jvm/java-6-openjdk/jre/lib/rhino.jar]
[Loaded org.mozilla.javascript.ContextFactory from /usr/lib/jvm/java-6-openjdk/jre/lib/rhino.jar]
[Loaded org.mozilla.javascript.tools.shell.ShellContextFactory from /usr/lib/jvm/java-6-openjdk/jre/lib/rhino.jar]
...

If I specify a classpath, it still loads from the system rhino library:

$ java -classpath ../shrinksafe/ -verbose:class -jar ../shrinksafe/custom_rhino.jar
...
[Opened /usr/lib/jvm/java-6-openjdk/jre/lib/rhino.jar]
[Loaded org.mozilla.javascript.tools.shell.Main from /usr/lib/jvm/java-6-openjdk/jre/lib/rhino.jar]
[Loaded org.mozilla.javascript.ContextFactory from /usr/lib/jvm/java-6-openjdk/jre/lib/rhino.jar]
[Loaded org.mozilla.javascript.tools.shell.ShellContextFactory from /usr/lib/jvm/java-6-openjdk/jre/lib/rhino.jar]
...

If I change over to using sun's JRE, it works fine:

$ sudo update-java-alternatives --set java-6-sun
$ java -verbose:class -jar ../shrinksafe/custom_rhino.jar
...
[Loaded org.mozilla.javascript.tools.shell.Main from file:/home/bryan/bzr/dojo/util/shrinksafe/custom_rhino.jar]
[Loaded org.mozilla.javascript.RhinoException from file:/home/bryan/bzr/dojo/util/shrinksafe/custom_rhino.jar]
[Loaded org.mozilla.javascript.EvaluatorException from file:/home/bryan/bzr/dojo/util/shrinksafe/custom_rhino.jar]
...