Fri, 24 Sep 2010 22:42:14 -0700
6891766: Vulnerabilities in use of reflection in CORBA
Reviewed-by: hawtin
1 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
2 <html>
3 <head>
4 <!--
6 Copyright (c) 2000, 2006, Oracle and/or its affiliates. All rights reserved.
7 DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
9 This code is free software; you can redistribute it and/or modify it
10 under the terms of the GNU General Public License version 2 only, as
11 published by the Free Software Foundation. Oracle designates this
12 particular file as subject to the "Classpath" exception as provided
13 by Oracle in the LICENSE file that accompanied this code.
15 This code is distributed in the hope that it will be useful, but WITHOUT
16 ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
17 FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
18 version 2 for more details (a copy is included in the LICENSE file that
19 accompanied this code).
21 You should have received a copy of the GNU General Public License version
22 2 along with this work; if not, write to the Free Software Foundation,
23 Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
25 Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
26 or visit www.oracle.com if you need additional information or have any
27 questions.
29 -->
31 </head>
32 <body bgcolor="white">
34 Provides a mechanism to register ORB hooks through which ORB services
35 can intercept the normal flow of execution of the ORB.
37 <h2>Interceptor Types</h2>
38 There are currently three types of interceptors that can be registered:
39 <ul>
40 <li>{@link org.omg.PortableInterceptor.IORInterceptor IORInterceptor} -
41 Used to establish tagged components in the profiles within an IOR.</li>
42 <li>{@link org.omg.PortableInterceptor.ClientRequestInterceptor
43 ClientRequestInterceptor} -
44 Intercepts the flow of a request/reply sequence through the ORB on
45 the <i>client</i> side.</li>
46 <li>{@link org.omg.PortableInterceptor.ServerRequestInterceptor
47 ServerRequestInterceptor} -
48 Intercepts the flow of a request/reply sequence through the ORB on
49 the <i>server</i> side.</li>
50 </ul>
51 See the javadocs for class <code>
52 {@link org.omg.PortableInterceptor.ORBInitializer ORBInitializer}</code>
53 for how to go about registering interceptors.
55 <a name="unimpl"></a>
56 <h2>Known limitations / unimplemented methods in package
57 <code>org.omg.PortableInterceptor</code></h2>
59 <code>
60 <ul>
61 <li>
62 <b>RequestInfo</b>
63 <ul>
64 <li><b>sync_scope()</b>: Always returns SYNC_WITH_TRANSPORT</li>
65 <li><b>arguments()</b>: Only supported for DII/DSI calls</li>
66 <li><b>exceptions()</b>: Only supported for DII calls on client side.
67 Not supported on server-side.</li>
68 <li><b>contexts()</b>: Only supported for DII calls on client side.
69 Not supported on server-side since our ORB does not send contexts.
70 </li>
71 <li><b>operation_context()</b>: Only supported for DII calls
72 on client side. Not supported on server-side since ORB
73 does not send contexts.</li>
74 <li><b>result()</b>: Only supported for DII/DSI calls</li>
75 </ul>
76 </li>
77 <li>
78 <b>ClientRequestInfo</b>
79 <ul>
80 <li><b>received_exception_id()</b>: Always returns null in the
81 DII case</li>
82 <li><b>get_request_policy(int type)</b>: Not implemented.</li>
83 </ul>
84 </li>
85 <li>
86 <b>ServerRequestInfo</b>
87 <ul>
88 <li><b>sending_exception()</b>: Does not support user exceptions on
89 the server side in non-DSI case.</li>
90 </ul>
91 </li>
92 </ul>
93 </code>
95 <h2>Package Specification</h2>
96 <P>For a precise list of supported sections of official OMG specifications with which
97 the Java[tm] Platform, Standard Edition 6 complies, see <A
98 HREF="../CORBA/doc-files/compliance.html">Official Specifications for CORBA
99 support in Java SE 6</A>.
101 @since 1.4
102 <br>
103 @serial exclude
104 </body>
105 </html>