Skip to content

[8.18] Check hidden frames in entitlements (#127877)#127946

Merged
elasticsearchmachine merged 2 commits intoelastic:8.18from
rjernst:backport/8.18/pr-127877
May 9, 2025
Merged

[8.18] Check hidden frames in entitlements (#127877)#127946
elasticsearchmachine merged 2 commits intoelastic:8.18from
rjernst:backport/8.18/pr-127877

Conversation

@rjernst
Copy link
Member

@rjernst rjernst commented May 9, 2025

Backports the following commits to 8.18:

Entitlements do a stack walk to find the calling class. When method
refences are used in a lambda, the frame ends up hidden in the stack
walk. In the case of using a method reference with
AccessController.doPrivileged, the call looks like it is the jdk itself,
so the call is trivially allowed. This commit adds hidden frames to the
stack walk so that the lambda frame created for the method reference is
included. Several internal packages are then necessary to filter out of
the stack.
@rjernst rjernst added :Core/Infra/Entitlements Entitlements infrastructure >bug auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) backport Team:Core/Infra Meta label for core/infra team labels May 9, 2025
@rjernst
Copy link
Member Author

rjernst commented May 9, 2025

@elasticmachine update branch

@elasticsearchmachine elasticsearchmachine merged commit a624517 into elastic:8.18 May 9, 2025
15 checks passed
@rjernst rjernst deleted the backport/8.18/pr-127877 branch May 9, 2025 18:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) backport >bug :Core/Infra/Entitlements Entitlements infrastructure Team:Core/Infra Meta label for core/infra team v8.18.2

3 participants