Uploaded image for project: 'EJB 3.0'
  1. EJB 3.0
  2. EJBTHREE-1586 ClassHelper missing privileged blocks
  3. EJBTHREE-1618

Insecure access to getClassLoader in SerializableMethod

    XMLWordPrintable

Details

    • Sub-task
    • Resolution: Done
    • Major
    • 1.0.0-Beta11
    • None
    • common
    • None

    Description

      Caused by: java.security.AccessControlException: access denied (java.lang.RuntimePermission getClassLoader)
      at java.security.AccessControlContext.checkPermission(AccessControlContext.java:264)
      at java.security.AccessController.checkPermission(AccessController.java:427)
      at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
      at java.lang.Thread.getContextClassLoader(Thread.java:1276)
      at org.jboss.ejb3.common.lang.SerializableMethod.toMethod(SerializableMethod.java:219)

      Attachments

        Activity

          People

            arubinge@redhat.com Andrew Rubinger (Inactive)
            arubinge@redhat.com Andrew Rubinger (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: