I noticed that the applet JARs in jmol and jspecview contain classes in
the sun.applet package. How is this supposed to work, considering that
sun.* packages are restricted? Do you think this is just accidental
bundling?
I haven't investigated the build process in detail, but there is a
dependency on icedtea-web, and the class files are mostly identical to
those in some icedtea-web version, except for jmol-14.0.11-1.fc21.noarch
and jspecview-2-7.1464svn.fc21.noarch, which differ in the
sun.applet.PluginAppletViewer class (so we currently do not provide
matching source code, I think).
(I found this while checking for references to sun.misc.Ref, which will
be removed in OpenJDK 9. Coincidentally, icedtea-web has already been
fixed.)
--
Florian Weimer / Red Hat Product Security Team
--
java-devel mailing list
java-devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/java-devel
