[fedora-java] jmol and jspecview oddity

[Florian Weimer]

On 04/09/2014 10:38 AM, Jiri Vanek wrote:
> On 04/08/2014 10:10 PM, Florian Weimer wrote:
>> I noticed that the applet JARs in jmol and jspecview contain classes
>> in the sun.applet package.  How
>> is this supposed to work, considering that sun.* packages are
>> restricted?  Do you think this is just
>> accidental bundling?
>>
>> I haven't investigated the build process in detail, but there is a
>> dependency on icedtea-web, and
>> the class files are mostly identical to those in some icedtea-web
>> version, except for
>> jmol-14.0.11-1.fc21.noarch and jspecview-2-7.1464svn.fc21.noarch,
>> which differ in the
>> sun.applet.PluginAppletViewer class (so we currently do not provide
>> matching source code, I think).
>>
>> (I found this while checking for references to sun.misc.Ref, which
>> will be removed in OpenJDK 9.
>> Coincidentally, icedtea-web has already been fixed.)
>>
> Och,. this scares me!
>
> Maybe better is to ask jmoll developers - as we have been cooperating
> with them long ago when itw was started to be developed....

The upstream spec file was last changed in 2003, so it seems it's a 
Fedora packaging issue.

Susi, could you please comment?

-- 
Florian Weimer / Red Hat Product Security Team