Issue 3720: Java 2 Security issue

Signed-off-by: Will <dazeydev.3@gmail.com>
antlr · Jun 25, 2022 · 9d344f1 · 9d344f1
1 parent 419ab11
commit 9d344f1
Showing 1 changed file with 10 additions and 5 deletions.
diff --git a/runtime/Java/src/org/antlr/v4/runtime/atn/ParserATNSimulator.java b/runtime/Java/src/org/antlr/v4/runtime/atn/ParserATNSimulator.java
@@ -24,6 +24,9 @@
 import org.antlr.v4.runtime.misc.IntervalSet;
 import org.antlr.v4.runtime.misc.Pair;
 
+import java.security.AccessController;
+import java.security.PrivilegedAction;
+
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.BitSet;
@@ -2184,11 +2187,13 @@ public Parser getParser() {
 
 	public static String getSafeEnv(String envName) {
 		try {
-			return System.getenv(envName);
-		}
-		catch(SecurityException e) {
-			// use the default value
-		}
+			return AccessController.doPrivileged(new PrivilegedAction<String>() {
+				@Override
+				public String run() {
+					return System.getenv(envName);
+				}
+			});
+		} catch (SecurityException e) { }
 		return null;
 	}
 }