> This is just out of curiosity having read up a bit on the upcoming new
> type verifier for Java Mustang.
It's an improved version of what already happens on Java ME/J2ME.
> Basically some of the verification will be done at compile time and the
> information saved in the class file. Thus, when the program is run,
[quoted text clipped - 4 lines]
> what prevents someone from 'adjusting' the verification information
> saved in the class file to bypass some of java security features?
It does check that the stack map/table agrees with the code. This is
much faster than inferring what it should be, apparently. For instance,
I don't believe it has to track backward jumps or deal figure out
situations involving multiple routes to an instruction.
> Don't worry, I trust the JVM guys to have taken care of this :) I'm
> just wondering how it works.
You can check it yourself. There is an exceptionally modest reward if
you find a hole.
If I wanted to know how thoroughly something has been checked for holes,
I'd put some in deliberately and see if they get spotted. So there might
well be some fame there for the taking. Or not.
Tom Hawtin

Signature
Unemployed English Java programmer
http://jroller.com/page/tackline/