Bug#717064: libcortado-java: Missing an example to show how to workaroundsecurity issues

jmg jeanmichel.123 at free.fr
Tue Jul 16 12:45:18 UTC 2013


Package: libcortado-java
Version: 0.6.0-1
Severity: normal

Dear Maintainer,
*** Please consider answering these questions, where appropriate ***

   * What led up to the situation?

I would like to understand why sound does not work in freecol.
Bug#717048
As freecol uses cortado, I was wondering if sound works in cortado.


   * What exactly did you do (or not do) that was effective (or
     ineffective)?

I opened the ogg file in iceweasel, and it works.

I tried to make an applet work with iceweasel, this requires activating java which is not activated usually for security purpose.
But the applet does not work in iceweasel.

Then, I copied the cortado jar to a directory and I tried to launch cortado with applet viewer.

 appletviewer  -J-classpath -J/tmp/jar/:$CLASSPATH /tmp/html.html 

   * What was the outcome of this action?

This produces an exception message but does not work as expected.

[INFO] init()
java.security.AccessControlException: access denied (java.lang.RuntimePermission modifyThreadGroup)
        at java.security.AccessControlContext.checkPermission(AccessControlContext.java:393)
        at java.security.AccessController.checkPermission(AccessController.java:558)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
        at sun.applet.AppletSecurity.checkAccess(AppletSecurity.java:252)
        at java.lang.ThreadGroup.checkAccess(ThreadGroup.java:315)
        at java.lang.Thread.init(Thread.java:353)
        at java.lang.Thread.<init>(Thread.java:479)
        at com.fluendo.jst.Pipeline$BusThread.<init>(Unknown Source)
        at com.fluendo.jst.Pipeline.<init>(Unknown Source)
        at com.fluendo.player.CortadoPipeline.<init>(Unknown Source)
        at com.fluendo.player.Cortado.init(Unknown Source)
        at sun.applet.AppletPanel.run(AppletPanel.java:437)
        at java.lang.Thread.run(Thread.java:679)

   * What outcome did you expect instead?

I was assuming the software would output a sound to the hardware.

For me an example should be provided with the library to know which way to use to test the library.

*** End of the template - remove these lines ***


-- System Information:
Debian Release: 7.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

-- no debconf information



More information about the pkg-java-maintainers mailing list