Skip to content

Conversation

@rjernst
Copy link
Member

@rjernst rjernst commented May 9, 2025

Backports the following commits to 9.0:

Entitlements do a stack walk to find the calling class. When method
refences are used in a lambda, the frame ends up hidden in the stack
walk. In the case of using a method reference with
AccessController.doPrivileged, the call looks like it is the jdk itself,
so the call is trivially allowed. This commit adds hidden frames to the
stack walk so that the lambda frame created for the method reference is
included. Several internal packages are then necessary to filter out of
the stack.
@rjernst rjernst added :Core/Infra/Entitlements Entitlements infrastructure >bug auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) backport Team:Core/Infra Meta label for core/infra team labels May 9, 2025
@elasticsearchmachine elasticsearchmachine merged commit 1b919e9 into elastic:9.0 May 9, 2025
16 checks passed
@rjernst rjernst deleted the backport/9.0/pr-127877 branch May 9, 2025 01:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) backport >bug :Core/Infra/Entitlements Entitlements infrastructure Team:Core/Infra Meta label for core/infra team v9.0.2

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants