ProcessBuilder vs Runtime.exec()

Question

Which one is better? By better I mean which one has better security, etc. (not ease of use).

What do you mean with 'has better security'? – user unknown May 04 '11 at 16:44 — user unknown, May 04 '11 at 16:44

score 32 · Answer 1 · answered May 04 '11 at 16:43

32

Ease of use is the only real difference between those two.

Note that ease of use can lead to security by helping to avoid mis-use.

At least on OpenJDK 6 Runtime.exec() is implemented using ProcessBuilder:

public Process exec(String[] cmdarray, String[] envp, File dir)
    throws IOException {
    return new ProcessBuilder(cmdarray)
        .environment(envp)
        .directory(dir)
        .start();
}

answered May 04 '11 at 16:43

Joachim Sauer

302,674
57
556
614

Except that `Runtime.exec` has overloads that take `command` as a single `String` and tokenize it, but in `ProcessBuilder` a single `String` is handled as a vararg `String[1]` -- see http://stackoverflow.com/questions/6856028/difference-between-processbuilder-and-runtime-exec – dave_thompson_085 May 18 '17 at 21:08

ProcessBuilder vs Runtime.exec()

1 Answers1

Linked