On Thu, 15 Aug 2024 16:23:18 GMT, Dhamoder Nalla <dhana...@openjdk.org> wrote:

> Use the GetTempPath2 APIs instead of the GetTempPath APIs in native code 
> across the OpenJDK repository to retrieve the temporary directory path, as 
> GetTempPath2 provides enhanced security. While GetTempPath may still function 
> without errors, using GetTempPath2 reduces the risk of potential exploits for 
> users.
> 
> 
> The code to dynamically load GetTempPath2 is duplicated due to the following 
> reasons.  I would appreciate any suggestions to remove the duplication where 
> possible:
> 
> 1. The changes span across four different folders—java.base, jdk.package, 
> jdk.attach, and hotspot—with no shared code between them.
> 2. Some parts of the code use version A, while others use version W (ANSI vs. 
> Unicode).
> 3. Some parts of the code are written in C others in C++.

This pull request has been closed without being integrated.

-------------

PR: https://git.openjdk.org/jdk/pull/20600

Reply via email to