From 6325a345014f6fce359637aab3ce6c6a969cf655 Mon Sep 17 00:00:00 2001 From: Jiri Vanek Date: Wed, 17 Apr 2013 14:30:05 +0200 Subject: Fixed CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path. --- netx/net/sourceforge/jnlp/NetxPanel.java | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'netx/net/sourceforge/jnlp/NetxPanel.java') diff --git a/netx/net/sourceforge/jnlp/NetxPanel.java b/netx/net/sourceforge/jnlp/NetxPanel.java index 8a51566..e9647c8 100644 --- a/netx/net/sourceforge/jnlp/NetxPanel.java +++ b/netx/net/sourceforge/jnlp/NetxPanel.java @@ -72,7 +72,7 @@ public class NetxPanel extends AppletViewerPanel implements SplashController { this.parameters = params; - String uniqueKey = params.getUniqueKey(); + String uniqueKey = params.getUniqueKey(getCodeBase()); synchronized(TGMapMutex) { if (!uKeyToTG.containsKey(uniqueKey)) { ThreadGroup tg = new ThreadGroup(Launcher.mainGroup, this.documentURL.toString()); @@ -199,7 +199,7 @@ public class NetxPanel extends AppletViewerPanel implements SplashController { public ThreadGroup getThreadGroup() { synchronized(TGMapMutex) { - return uKeyToTG.get(parameters.getUniqueKey()); + return uKeyToTG.get(parameters.getUniqueKey(getCodeBase())); } } @@ -209,7 +209,7 @@ public class NetxPanel extends AppletViewerPanel implements SplashController { } // only create a new context if one hasn't already been created for the // applets with this unique key. - if (null == appContextCreated.putIfAbsent(parameters.getUniqueKey(), Boolean.TRUE)) { + if (null == appContextCreated.putIfAbsent(parameters.getUniqueKey(getCodeBase()), Boolean.TRUE)) { SunToolkit.createNewAppContext(); } } -- cgit v1.2.3