Remove Calls to exec() Due to Security Concerns

XMLWordPrintableJSON

    • Type: Improvement
    • Resolution: Done
    • Priority: Major - P3
    • 2.8.0
    • Affects Version/s: 2.7.2
    • Component/s: None
    • None
    • Environment:
      Java driver 2.7.2 - non-env specific
    • None
    • Minor Change
    • None
    • None
    • None
    • None
    • None
    • None

      The following lines call Runtime.getRuntime().exec():

      ./src/main/com/mongodb/io/StreamUtil.java:44:        Process p = Runtime.getRuntime().exec( command );
      ./src/main/com/mongodb/util/TestCase.java:251:        Process p = Runtime.getRuntime().exec( "find " + dir );
      

      This is causing an issue with a security audit. Can they be removed or moved to the test source directory?

            Assignee:
            Jeffrey Yemin
            Reporter:
            Martin Hermes
            None
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: