gentoo-mirror/gentoo
1
0
Fork 0
mirror of https://github.com/gentoo-mirror/gentoo.git synced 2026-11-05 05:17:04 -08:00
Code Issues Projects Releases Wiki Activity

dev-java/mojarra: Version bump. Fixes security bug 501280.

Browse Source 
Package-Manager: portage-2.2.18
Signed-off-by: Patrice Clement <monsieurp@gentoo.org>
This commit is contained in:
Patrice Clement
2015-09-03 16:00:54 +00:00
parent 7d20c1e914
commit da8f2314bd
3 changed files with 72 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dev-java/mojarra/files/mojarra-2.2.12-Util.java.patch
+25
View File
@@ -0,0 +1,25 @@
--- src/com/sun/faces/util/Util.java.orig 2015-09-03 14:43:30.953486000 +0000
+++ src/com/sun/faces/util/Util.java 2015-09-03 14:43:57.692486000 +0000
@@ -354,13 +354,15 @@
// as the same adapter in a standalone program works as one might expect.
// So, for now, if the classname starts with '[', then use Class.forName()
// to avoid CR 643419 and for all other cases, use ClassLoader.loadClass().
- if (loader.getClass() == com.sun.faces.scripting.groovy.GroovyHelperImpl.MojarraGroovyClassLoader.class) {
- if (name.charAt(0) == '[') {
- return Class.forName(name, true, loader);
- } else {
- return loader.loadClass(name);
- }
- }
+ //
+ // Disable Groovy support.
+ // if (loader.getClass() == com.sun.faces.scripting.groovy.GroovyHelperImpl.MojarraGroovyClassLoader.class) {
+ // if (name.charAt(0) == '[') {
+ // return Class.forName(name, true, loader);
+ // } else {
+ // return loader.loadClass(name);
+ // }
+ // }
return Class.forName(name, true, loader);
}