From 85a24d4abdc2ea83979e2dbb4f69917a2c824360 Mon Sep 17 00:00:00 2001 From: Sergey Malenkov Date: Fri, 4 Oct 2013 19:23:02 +0400 Subject: [PATCH] 8025448: Enhance listening events Reviewed-by: art, skoivu --- .../share/classes/javax/swing/event/EventListenerList.java | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/jdk/src/share/classes/javax/swing/event/EventListenerList.java b/jdk/src/share/classes/javax/swing/event/EventListenerList.java index 237bf2067b2..28b0f313b90 100644 --- a/jdk/src/share/classes/javax/swing/event/EventListenerList.java +++ b/jdk/src/share/classes/javax/swing/event/EventListenerList.java @@ -27,6 +27,7 @@ package javax.swing.event; import java.io.*; import java.util.*; import java.lang.reflect.Array; +import sun.reflect.misc.ReflectUtil; /** * A class that holds a list of EventListeners. A single instance @@ -271,7 +272,9 @@ public class EventListenerList implements Serializable { while (null != (listenerTypeOrNull = s.readObject())) { ClassLoader cl = Thread.currentThread().getContextClassLoader(); EventListener l = (EventListener)s.readObject(); - add((Class)Class.forName((String)listenerTypeOrNull, true, cl), l); + String name = (String) listenerTypeOrNull; + ReflectUtil.checkPackageAccess(name); + add((Class)Class.forName(name, true, cl), l); } }