jenkinsci / groovy-sandbox

(Deprecated) Compile-time transformer to run Groovy code in a restrictive sandbox
MIT License
123 stars 60 forks source link

[JENKINS-70080] Do not generate invalid bytecode for field assignments that use compound operators #103

Closed dwnusbaum closed 1 year ago

dwnusbaum commented 1 year ago

See JENKINS-70080.

The SECURITY-2824 fix (520243213bcd8c81322e8e683daa8d555bb4f484) inadvertently caused sandbox-transformed field assignments that use compound operators to generate invalid bytecode.