Use the GetTempPath2 APIs instead of the GetTempPath APIs in native code across 
the OpenJDK repository to retrieve the temporary directory path, as 
GetTempPath2 provides enhanced security. While GetTempPath may still function 
without errors, using GetTempPath2 reduces the risk of potential exploits for 
users.


The code to dynamically load GetTempPath2 is duplicated due to the following 
reasons.  I would appreciate any suggestions to remove the duplication where 
possible:

1. The changes span across four different folders—java.base, jdk.package, 
jdk.attach, and hotspot—with no shared code between them.
2. Some parts of the code use version A, while others use version W (ANSI vs. 
Unicode).
3. Some parts of the code are written in C others in C++.

-------------

Commit messages:
 - fix spaces
 - Use GetTempPath2 API instead of GetTempPath

Changes: https://git.openjdk.org/jdk/pull/20600/files
  Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=20600&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8337408
  Stats: 78 lines in 4 files changed: 70 ins; 0 del; 8 mod
  Patch: https://git.openjdk.org/jdk/pull/20600.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/20600/head:pull/20600

PR: https://git.openjdk.org/jdk/pull/20600

Reply via email to