Add support for illegal native access modes

This commit is contained in:
Erik C. Thauvin 2025-03-21 11:29:44 -07:00
parent 779e6d4b79
commit 5ca06f4d81
Signed by: erik
GPG key ID: 776702A6A2DA330E
2 changed files with 56 additions and 4 deletions

View file

@ -31,18 +31,19 @@ import java.util.List;
*/ */
@SuppressWarnings("PMD.LooseCoupling") @SuppressWarnings("PMD.LooseCoupling")
public class JvmOptions extends ArrayList<String> { public class JvmOptions extends ArrayList<String> {
@Serial
private static final long serialVersionUID = 1L;
/** /**
* Keyword to enable native access for all code on the class path. * Keyword to enable native access for all code on the class path.
*/ */
public final static String ALL_UNNAMED = "ALL-UNNAMED"; public final static String ALL_UNNAMED = "ALL-UNNAMED";
@Serial
private static final long serialVersionUID = 1L;
/** /**
* Modules that are permitted to perform restricted native operations. * Modules that are permitted to perform restricted native operations.
* The module name can also be {@link #ALL_UNNAMED}. * The module name can also be {@link #ALL_UNNAMED}.
* *
* @param modules the module names
* @return this list of options * @return this list of options
*/ */
public JvmOptions enableNativeAccess(String... modules) { public JvmOptions enableNativeAccess(String... modules) {
@ -53,10 +54,37 @@ public class JvmOptions extends ArrayList<String> {
* Modules that are permitted to perform restricted native operations. * Modules that are permitted to perform restricted native operations.
* The module name can also be {@link #ALL_UNNAMED}. * The module name can also be {@link #ALL_UNNAMED}.
* *
* @param modules the module names
* @return this list of options * @return this list of options
*/ */
public JvmOptions enableNativeAccess(Collection<String> modules) { public JvmOptions enableNativeAccess(Collection<String> modules) {
add("--enable-native-access=" + StringUtils.join(modules, ",")); add("--enable-native-access=" + StringUtils.join(modules, ","));
return this; return this;
} }
/**
* Controls what action the Java runtime takes when native access is not enabled for a module.
*
* @param access the access mode
* @return this list of options
*/
public JvmOptions illegalNativeAccess(NativeAccess access) {
add("--illegal-native-access=" + access.mode);
return this;
}
/**
* Illegal native access modes.
*/
public enum NativeAccess {
ALLOW("allow"),
DENY("deny"),
WARN("warn");
public final String mode;
NativeAccess(String mode) {
this.mode = mode;
}
}
} }

View file

@ -27,7 +27,8 @@ class JvmOptionsTest {
@Test @Test
void testCompileOptions() { void testCompileOptions() {
var compileOptions = new CompileOptions().jvmOptions(new JvmOptions().enableNativeAccess(JvmOptions.ALL_UNNAMED)); var compileOptions = new CompileOptions().jvmOptions(new JvmOptions().enableNativeAccess(JvmOptions.ALL_UNNAMED));
assertThat(compileOptions.jvmOptions()).as(JvmOptions.ALL_UNNAMED).containsExactly("--enable-native-access=ALL-UNNAMED"); assertThat(compileOptions.jvmOptions()).as(JvmOptions.ALL_UNNAMED)
.containsExactly("--enable-native-access=ALL-UNNAMED");
assertThat(compileOptions.args()).as("args()").containsExactly("-J--enable-native-access=ALL-UNNAMED"); assertThat(compileOptions.args()).as("args()").containsExactly("-J--enable-native-access=ALL-UNNAMED");
compileOptions = new CompileOptions().jvmOptions(new JvmOptions().enableNativeAccess("m1", "m2")); compileOptions = new CompileOptions().jvmOptions(new JvmOptions().enableNativeAccess("m1", "m2"));
@ -40,10 +41,25 @@ class JvmOptionsTest {
var options = new JvmOptions().enableNativeAccess(JvmOptions.ALL_UNNAMED); var options = new JvmOptions().enableNativeAccess(JvmOptions.ALL_UNNAMED);
assertThat(options).as(JvmOptions.ALL_UNNAMED).containsExactly("--enable-native-access=ALL-UNNAMED"); assertThat(options).as(JvmOptions.ALL_UNNAMED).containsExactly("--enable-native-access=ALL-UNNAMED");
options = new JvmOptions().enableNativeAccess("m1");
assertThat(options).as("m1").containsExactly("--enable-native-access=m1");
options = new JvmOptions().enableNativeAccess("m1", "m2"); options = new JvmOptions().enableNativeAccess("m1", "m2");
assertThat(options).as("m1,m2").containsExactly("--enable-native-access=m1,m2"); assertThat(options).as("m1,m2").containsExactly("--enable-native-access=m1,m2");
} }
@Test
void testIllegalNativeAccess() {
var options = new JvmOptions().illegalNativeAccess(JvmOptions.NativeAccess.ALLOW);
assertThat(options).as("ALLOW").containsExactly("--illegal-native-access=allow");
options = new JvmOptions().illegalNativeAccess(JvmOptions.NativeAccess.DENY);
assertThat(options).as("DENY").containsExactly("--illegal-native-access=deny");
options = new JvmOptions().illegalNativeAccess(JvmOptions.NativeAccess.WARN);
assertThat(options).as("WARN").containsExactly("--illegal-native-access=warn");
}
@Test @Test
void testJvmOptions() { void testJvmOptions() {
var compileOptions = new CompileOptions().jvmOptions("option1", "option2"); var compileOptions = new CompileOptions().jvmOptions("option1", "option2");
@ -59,5 +75,13 @@ class JvmOptionsTest {
.containsExactly("option1", "option2", "--enable-native-access=ALL-UNNAMED"); .containsExactly("option1", "option2", "--enable-native-access=ALL-UNNAMED");
assertThat(compileOptions.args()).as("args(option1,option2,ALL_UNNAMED)") assertThat(compileOptions.args()).as("args(option1,option2,ALL_UNNAMED)")
.containsExactly("-Joption1", "-Joption2", "-J--enable-native-access=ALL-UNNAMED"); .containsExactly("-Joption1", "-Joption2", "-J--enable-native-access=ALL-UNNAMED");
compileOptions = compileOptions.jvmOptions(new JvmOptions().illegalNativeAccess(JvmOptions.NativeAccess.ALLOW));
assertThat(compileOptions.jvmOptions()).as("allow")
.containsExactly("option1", "option2", "--enable-native-access=ALL-UNNAMED",
"--illegal-native-access=allow");
assertThat(compileOptions.args()).as("args(option1,option2,ALL_UNNAMED,allow)")
.containsExactly("-Joption1", "-Joption2", "-J--enable-native-access=ALL-UNNAMED",
"-J--illegal-native-access=allow");
} }
} }