unsafe.js revision 2:da1e581c933b 
1/*
2 * Copyright (c) 2010, 2012, Oracle and/or its affiliates. All rights reserved.
3 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
4 *
5 * This code is free software; you can redistribute it and/or modify it
6 * under the terms of the GNU General Public License version 2 only, as
7 * published by the Free Software Foundation.
8 *
9 * This code is distributed in the hope that it will be useful, but WITHOUT
10 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
11 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
12 * version 2 for more details (a copy is included in the LICENSE file that
13 * accompanied this code).
14 *
15 * You should have received a copy of the GNU General Public License version
16 * 2 along with this work; if not, write to the Free Software Foundation,
17 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
18 *
19 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
20 * or visit www.oracle.com if you need additional information or have any
21 * questions.
22 */
23
24/**
25 * Try to access sensitive class like Unsafe.
26 *
27 * @test
28 * @security
29 * @run
30 */
31
32function check(e) {
33   if (e instanceof java.lang.SecurityException) {
34       print(e);
35   } else {
36       fail("expected SecurityException, got " + e);
37   }
38}
39
40try {
41    var unsafe = java.lang.Class.forName("sun.misc.Unsafe");
42    fail("No SecurityException for Class.forName sun.misc.Unsafe");
43} catch (e) {
44    check(e);
45}
46
47try {
48    var unsafe = Java.type("sun.misc.Unsafe");
49    fail("No SecurityException for Java.type sun.misc.Unsafe");
50} catch (e) {
51    check(e);
52}
53
54try {
55    var unsafe = Packages.sun.misc.Unsafe;
56    fail("No SecurityException for Packages.sun.misc.Unsafe");
57} catch (e) {
58    check(e);
59}
60
61try {
62    var cl = Packages.jdk.nashorn.internal.runtime.Context.class;
63    var unsafe = cl.getClassLoader().loadClass("sun.misc.Unsafe");
64} catch (e) {
65    check(e);
66}
67