[Truffle] Use a doPriviliged block for reflection access.

jruby · Oct 6, 2015 · c0be331 · eregon · Oct 7, 2015 · eregon
1 parent 6d1f7b5
commit c0be331
Showing 1 changed file with 18 additions and 3 deletions.
diff --git a/truffle/src/main/java/org/jruby/truffle/nodes/ext/ZlibNodes.java b/truffle/src/main/java/org/jruby/truffle/nodes/ext/ZlibNodes.java
@@ -28,6 +28,8 @@
 import java.lang.invoke.MethodHandle;
 import java.lang.invoke.MethodHandles;
 import java.lang.reflect.Field;
+import java.security.AccessController;
+import java.security.PrivilegedAction;
 import java.util.zip.CRC32;
 import java.util.zip.DataFormatException;
 import java.util.zip.Deflater;
@@ -159,11 +161,24 @@ public abstract static class Adler32Node extends CoreMethodArrayArgumentsNode {
 
         static {
             try {
-                final Field f = Adler32.class.getDeclaredField("adler");
-                f.setAccessible(true);
+                final Field f = AccessController.doPrivileged(new PrivilegedAction<Field>() {
+                    @Override
+                    public Field run() {
+                        final Field f;
+
+                        try {
+                            f = Adler32.class.getDeclaredField("adler");
+                            f.setAccessible(true);
+
+                            return f;
+                        } catch (NoSuchFieldException e) {
+                            throw new RuntimeException(e);
+                        }
+                    }
+                });
 
                 ADLER_PRIVATE_FIELD = MethodHandles.lookup().unreflectSetter(f);
-            } catch (IllegalAccessException | NoSuchFieldException e) {
+            } catch (IllegalAccessException e) {
                 throw new RuntimeException(e);
             }
         }