[slf4j-dev] [Bug 181] SLF4JLogFactory#getInstance(String) should not use "this" lock

[bugzilla-daemon at pixie.qos.ch]

http://bugzilla.slf4j.org/show_bug.cgi?id=181


Ceki Gulcu <listid at qos.ch> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED




--- Comment #1 from Ceki Gulcu <listid at qos.ch>  2010-04-30 15:10:46 ---
A *malicious* attacker will find other ways of mounting denial of service
attacks. For example, if loggerMap is used as the lock, then the attacker an
still access logger map via reflection. Anyway, using loggerMap to synchronize
access on loggerMap makes sense so I changed the code.


-- 
Configure bugmail: http://bugzilla.slf4j.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.