Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Important Fix println bug, where the OutputTester is causing a violation via FileRead #29

Closed
sarpsahinalp opened this issue Sep 23, 2024 · 0 comments · Fixed by #34
Closed
Assignees

Comments

@sarpsahinalp
Copy link
Collaborator

sarpsahinalp commented Sep 23, 2024

Problem:
We have to be able identify in the callstack which allowed classes are actually calling the methods that are security related
BootstrapMethodError: java.lang.SecurityException: Ares Security Error (Reason: Student-Code; Stage: Execution):de.tum.cit.ase.FileSystemAccessDemo.accessFileSystemViaFilesExecute(FileSystemAccessDemo.java:36) tried to illegally read from /home/sarps/.m2/repository/de/tum/cit/ase/ares/2.0.0-SNAPSHOT/ares-2.0.0-SNAPSHOT.jar via java.io.RandomAccessFile.readFully([B,int,int)but was blocked by Ares.

  • Fix runtime exception instead of SecurityException

  • Fix tests that include false positives due to RuntimeExceptions that are catched

@sarpsahinalp sarpsahinalp self-assigned this Oct 7, 2024
@sarpsahinalp sarpsahinalp linked a pull request Oct 14, 2024 that will close this issue
5 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant