Re: Revisiting "lost codebases"
"Christopher G. Stach II" <[email protected]>
| Newsgroups | gmane.comp.java.sun.jini |
|---|---|
| Message-ID | <[email protected]> |
cowwoc wrote: > Not a bad idea. The only catch I see is that a node has no way of > verifying the validity of a hash without the source-code. Meaning, if A > sends B a copy of class Foo with version 123, B cannot verify that the > hash is correct. Practically speaking, however, if you trust B enough to > accept a class file from him then you probably trust his hash (is that > true?). > > I'm not familiar with any (simple) tools for building an AST from the > source-code. ASM (http://asm.objectweb.org/) builds an AST from a class > file. Any ideas? > > Thanks, > Gili > I think that one would trust the hash as much as the code itself, as long as they are provided by the same peer and authenticated. The first two AST generators for Java that come to mind are Eclipse's and PMD. -- Christopher G. Stach II -------------------------------------------------------------------------- Getting Started: http://www.jini.org/wiki/Category:Getting_Started Community Web Site: http://jini.org jini-users Archive: http://archives.java.sun.com/archives/jini-users.html Unsubscribing: email "signoff JINI-USERS" to [email protected]