Uploaded image for project: 'Java Driver'
  1. Java Driver
  2. JAVA-518

Remove Calls to exec() Due to Security Concerns

    • Type: Icon: Improvement Improvement
    • Resolution: Done
    • Priority: Icon: Major - P3 Major - P3
    • 2.8.0
    • Affects Version/s: 2.7.2
    • Component/s: None
    • None
    • Environment:
      Java driver 2.7.2 - non-env specific
    • Minor Change

      The following lines call Runtime.getRuntime().exec():

      ./src/main/com/mongodb/io/StreamUtil.java:44:        Process p = Runtime.getRuntime().exec( command );
      ./src/main/com/mongodb/util/TestCase.java:251:        Process p = Runtime.getRuntime().exec( "find " + dir );
      

      This is causing an issue with a security audit. Can they be removed or moved to the test source directory?

            Assignee:
            jeff.yemin@mongodb.com Jeffrey Yemin
            Reporter:
            martin.hermes@sap.com Martin Hermes
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: