<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0">
<base href="https://hibernate.atlassian.net">
<title>Message Title</title>
</head>
<body class="jira" style="color: #333333; font-family: Arial, sans-serif; font-size: 14px; line-height: 1.429">
<table id="background-table" cellpadding="0" cellspacing="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0; background-color: #f5f5f5; border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0" bgcolor="#f5f5f5">
<!-- header here -->
<tbody>
<tr>
<td id="header-pattern-container" style="padding: 0; border-collapse: collapse; padding: 10px 20px">
<table id="header-pattern" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0">
<tbody>
<tr>
<td id="header-avatar-image-container" valign="top" style="padding: 0; border-collapse: collapse; vertical-align: top; width: 32px; padding-right: 8px" width="32"> <img id="header-avatar-image" class="image_fix" src="https://avatar-cdn.atlassian.com/1181e7742d3b26b368cf0011eba1b898?s=48&d=https%3A%2F%2Fsecure.gravatar.com%2Favatar%2F1181e7742d3b26b368cf0011eba1b898%3Fd%3Dmm%26s%3D48%26noRedirect%3Dtrue" height="32" width="32" border="0" style="border-radius: 3px; vertical-align: top"> </td>
<td id="header-text-container" valign="middle" style="padding: 0; border-collapse: collapse; vertical-align: middle; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px"> <a class="user-hover" rel="tobias.lanz" style="color:#6c797f;; color: #3b73af; text-decoration: none" id="email_tobias.lanz" href="https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A43edbfc5-44d3-481d-9581-8fc52fa66a2b"> Tobias Lanz </a> <strong>updated</strong> an issue </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="email-content-container" style="padding: 0; border-collapse: collapse; padding: 0 20px">
<table id="email-content-table" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0; border-spacing: 0; border-collapse: separate">
<tbody>
<tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<td class="email-content-rounded-top mobile-expand" style="padding: 0; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 15px; background-color: #ffffff; border-left: 1px solid #cccccc; border-top: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom: 0; border-top-right-radius: 5px; border-top-left-radius: 5px; height: 10px; line-height: 10px; padding: 0 15px 0 16px; mso-line-height-rule: exactly" height="10" bgcolor="#ffffff"> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table class="page-title-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0">
<tbody>
<tr>
<td class="page-title-pattern-first-line " style="padding: 0; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; padding-top: 10px"> <a href="https://hibernate.atlassian.net/browse/HHH?atlOrigin=eyJpIjoiZjQ1ZDA4N2RhNDRmNDViYTkzNDAxMmYxOTJmNjJlMTIiLCJwIjoiaiJ9" style="color: #3b73af; text-decoration: none">Hibernate ORM</a> / <a href="https://hibernate.atlassian.net/browse/HHH-13277?atlOrigin=eyJpIjoiZjQ1ZDA4N2RhNDRmNDViYTkzNDAxMmYxOTJmNjJlMTIiLCJwIjoiaiJ9" style="color: #3b73af; text-decoration: none"><img src="cid:jira-generated-image-avatar-1b39a10a-2539-4f05-bfee-b57ef6e9b3f9" height="16" width="16" border="0" align="absmiddle" alt="Bug" style="vertical-align: text-bottom"></a> <a href="https://hibernate.atlassian.net/browse/HHH-13277?atlOrigin=eyJpIjoiZjQ1ZDA4N2RhNDRmNDViYTkzNDAxMmYxOTJmNjJlMTIiLCJwIjoiaiJ9" style="color: #3b73af; text-decoration: none">HHH-13277</a> </td>
</tr>
<tr>
<td style="vertical-align: top;; padding: 0; border-collapse: collapse; padding-right: 5px; font-size: 20px; line-height: 30px; mso-line-height-rule: exactly" class="page-title-pattern-header-container"> <span class="page-title-pattern-header" style="font-family: Arial, sans-serif; padding: 0; font-size: 20px; line-height: 30px; mso-text-raise: 2px; mso-line-height-rule: exactly; vertical-align: middle"> <a href="https://hibernate.atlassian.net/browse/HHH-13277?atlOrigin=eyJpIjoiZjQ1ZDA4N2RhNDRmNDViYTkzNDAxMmYxOTJmNjJlMTIiLCJwIjoiaiJ9" style="color: #3b73af; text-decoration: none">HibernateMethodLookupDispatcher - Issue with Security Manager</a> </span> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand wrapper-special-margin" style="padding: 0; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; padding-top: 10px; padding-bottom: 5px" bgcolor="#ffffff">
<table class="keyvalue-table" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0">
<tbody>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Change By:</th>
<td style="padding: 0; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <a class="user-hover" rel="tobias.lanz" style="color:#6c797f;; color: #3b73af; text-decoration: none" id="email_tobias.lanz" href="https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A43edbfc5-44d3-481d-9581-8fc52fa66a2b"> Tobias Lanz </a> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand issue-description-container" style="padding: 0; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; padding-top: 5px; padding-bottom: 10px" bgcolor="#ffffff">
<table class="text-paragraph-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 2px">
<tbody>
<tr>
<td class="text-paragraph-pattern-container mobile-resize-text " style="padding: 0; border-collapse: collapse; padding: 0 0 10px"> <span class="diffcontext">I guess i found a little bug which was introduced by the usage of byte buddy as a byte code enhancer.<br>The issue can be fixed quite simply, but it's very crutial since hibernate does not work if a security manager is in place.<br><br>let me try to explain my discovery:<br><br>Within the class HibernateMethodLookupDispatcher is a static property authorizedClasses.<br>This is nice, since i see that all my Byte Buddy Enhanced Beans are in there.<br><br>{{ch.carnet.bo.xxx$HibernateProxy$KMjF1hvl}}<br>{{ch.carnet.bo.yyy$HibernateProxy$N7p0Y4Ea}}<br>{{ch.carnet.bo.zzz$HibernateProxy$f9HFlBtl}}<br>... (a lot more)<br><br></span> <span class="diffremovedchars" style="background-color: #ffe7e7; text-decoration:line-through;">But. There's one crutial class missing:<br>org.hibernate.bytecode.internal.bytebuddy.HibernateMethodLookupDispatcher<br><br></span> <span class="diffcontext">Later while processing, my debugger hit's the line 74:<br>{code:java}<br> if ( !authorizedClasses.contains( callerClass.getName() ) ) {<br> throw new SecurityException( "Unauthorized call by class " + callerClass );<br> }<br>{code}<br><br>with that line all my beans can no longer be processed.<br>this is resulting in a missleading Error:<br><br>{{ERROR org.hibernate.proxy.pojo.bytebuddy.ByteBuddyProxyFactory - HHH000142: Bytecode enhancement failed: ch.carnet.bo.xxx}}<br><br>Since i do not know hibernate to the very last detail, i'm not sure if<br></span> <span class="diffremovedchars" style="background-color: #ffe7e7; text-decoration:line-through;">#- this</span> <span class="diffaddedchars" style="background-color:#ddfade;">1. the stacketrace index</span> <span class="diffcontext"> call</span> <span class="diffremovedchars" style="background-color: #ffe7e7; text-decoration:line-through;"> by</span> <span class="diffaddedchars" style="background-color:#ddfade;"> from the line 178 is not always the same. <br><br><br>{code:java}<br>private static class SecurityActions extends SecurityManager {<br> private Class<?> getCallerClass() {<br> return getClassContext()[7];<br> }<br>}<br>{code}<br><br>So my basic question here is now: <br>*Can you imagine a case where the effective calling Class is not on Position 8?*<br><br>in my case, the proxy was at position 8:<br><br>* 0 class</span> <span class="diffcontext"> org.hibernate.bytecode.internal.bytebuddy.HibernateMethodLookupDispatcher</span> <span class="diffremovedchars" style="background-color: #ffe7e7; text-decoration:line-through;"> is correct-</span> <span class="diffaddedchars" style="background-color:#ddfade;">$SecurityActions</span> <span class="diffcontext"><br></span> <span class="diffremovedchars" style="background-color: #ffe7e7; text-decoration:line-through;"># or the call should not come from the</span> <span class="diffaddedchars" style="background-color:#ddfade;">* 1</span> <span class="diffcontext"> class</span> <span class="diffaddedchars" style="background-color:#ddfade;"> org.hibernate.bytecode.internal.bytebuddy.</span> <span class="diffcontext"> HibernateMethodLookupDispatcher</span> <span class="diffremovedchars" style="background-color: #ffe7e7; text-decoration:line-through;"> itself</span> <span class="diffaddedchars" style="background-color:#ddfade;">$SecurityActions</span> <span class="diffcontext"><br></span> <span class="diffaddedchars" style="background-color:#ddfade;">* 2 class org.hibernate.bytecode.internal.bytebuddy.HibernateMethodLookupDispatcher$5</span> <span class="diffcontext"><br></span> <span class="diffremovedchars" style="background-color: #ffe7e7; text-decoration:line-through;">But assuming the call is made correctly by</span> <span class="diffaddedchars" style="background-color:#ddfade;">* 3 class org.hibernate.bytecode.internal.bytebuddy.</span> <span class="diffcontext"> HibernateMethodLookupDispatcher</span> <span class="diffremovedchars" style="background-color: #ffe7e7; text-decoration:line-through;">, i tested one simple thing</span> <span class="diffaddedchars" style="background-color:#ddfade;">$5<br>* 4 class java</span> <span class="diffcontext">.</span> <span class="diffaddedchars" style="background-color:#ddfade;">security.AccessController</span> <span class="diffcontext"><br></span> <span class="diffremovedchars" style="background-color: #ffe7e7; text-decoration:line-through;">using my debuger in dev i added the</span> <span class="diffaddedchars" style="background-color:#ddfade;">* 5</span> <span class="diffcontext"> class</span> <span class="diffaddedchars" style="background-color:#ddfade;"> org.hibernate.bytecode.internal.bytebuddy.</span> <span class="diffcontext"> HibernateMethodLookupDispatcher</span> <span class="diffremovedchars" style="background-color: #ffe7e7; text-decoration:line-through;"> to the authorizedClasses before line 73 was hit</span> <span class="diffaddedchars" style="background-color:#ddfade;"><br>* 6 class org</span> <span class="diffcontext">.</span> <span class="diffaddedchars" style="background-color:#ddfade;">hibernate.bytecode.internal.bytebuddy.HibernateMethodLookupDispatcher</span> <span class="diffcontext"><br></span> <span class="diffaddedchars" style="background-color:#ddfade;">* 7 class org.hibernate.bytecode.internal.bytebuddy.HibernateMethodLookupDispatcher</span> <span class="diffcontext"><br></span> <span class="diffremovedchars" style="background-color: #ffe7e7; text-decoration:line-through;">After i did that, everything worked perfectly</span> <span class="diffaddedchars" style="background-color:#ddfade;">* 8 class ch</span> <span class="diffcontext">.</span> <span class="diffremovedchars" style="background-color: #ffe7e7; text-decoration:line-through;"> My beans are Processed, even though a Security Manager was active</span> <span class="diffaddedchars" style="background-color:#ddfade;">carnet</span> <span class="diffcontext">.</span> <span class="diffaddedchars" style="background-color:#ddfade;">cfms.q2o.bo.Q2OCostCategoryValues$HibernateProxy$vzJDtOEj</span> <span class="diffcontext"><br></span> <span class="diffremovedchars" style="background-color: #ffe7e7; text-decoration:line-through;"><br>So my basic question here is: <br>-</span> <span class="diffcontext">*</span> <span class="diffremovedchars" style="background-color: #ffe7e7; text-decoration:line-through;">can you add HibernateMethodLookupDispatcher to authorizedClasses, so that the</span> <span class="diffaddedchars" style="background-color:#ddfade;"> 9</span> <span class="diffcontext"> class</span> <span class="diffaddedchars" style="background-color:#ddfade;"> java.lang.reflect.Constructor<br><br>I will check if the stacktrace</span> <span class="diffcontext"> is</span> <span class="diffremovedchars" style="background-color: #ffe7e7; text-decoration:line-through;"> allowed to call my bean methods</span> <span class="diffaddedchars" style="background-color:#ddfade;"> different sometimes and if so</span> <span class="diffcontext">,</span> <span class="diffremovedchars" style="background-color: #ffe7e7; text-decoration:line-through;"> since that</span> <span class="diffaddedchars" style="background-color:#ddfade;"> why this would be the case.<br>Otherwise it</span> <span class="diffcontext">'s</span> <span class="diffremovedchars" style="background-color: #ffe7e7; text-decoration:line-through;"> the main intention behind HibernateMethodLookupDispatcher after all</span> <span class="diffaddedchars" style="background-color:#ddfade;"> maybe just a small bug</span> <span class="diffcontext">,</span> <span class="diffremovedchars" style="background-color: #ffe7e7; text-decoration:line-through;"> isn't it? =)*-</span> <span class="diffaddedchars" style="background-color:#ddfade;"> since one did not think about the class java.security.AccessController on position 4 or something else.</span> <span class="diffcontext"><br><br>Best Regards, Synto</span> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff"> <script type="application/ld+json">
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"description": "View Issue",
"potentialAction": {
"@type": "ViewAction",
"target": "https://hibernate.atlassian.net/browse/HHH-13277?inbox=true&",
"name": "View Issue"
},
"publisher": {
"@type": "Organization",
"name": "Atlassian",
"url": "https://www.atlassian.com"
}
}
</script>
<table id="actions-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px">
<tbody>
<tr>
<td id="actions-pattern-container" valign="middle" style="padding: 0; border-collapse: collapse; padding: 10px 0 10px 24px; vertical-align: middle; padding-left: 0">
<table align="left" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0">
<tbody>
<tr>
<td class="actions-pattern-action-icon-container" style="padding: 0; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 0; vertical-align: middle"> <a href="https://hibernate.atlassian.net/browse/HHH-13277#add-comment?atlOrigin=eyJpIjoiZjQ1ZDA4N2RhNDRmNDViYTkzNDAxMmYxOTJmNjJlMTIiLCJwIjoiaiJ9" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none"> <img class="actions-pattern-action-icon-image" src="cid:jira-generated-image-static-comment-icon-933abb3c-4c39-4987-bdaa-bb392956e452" alt="Add Comment" title="Add Comment" height="16" width="16" border="0" style="vertical-align: middle"> </a> </td>
<td class="actions-pattern-action-text-container" style="padding: 0; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 4px; padding-left: 5px"> <a href="https://hibernate.atlassian.net/browse/HHH-13277#add-comment?atlOrigin=eyJpIjoiZjQ1ZDA4N2RhNDRmNDViYTkzNDAxMmYxOTJmNjJlMTIiLCJwIjoiaiJ9" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none">Add Comment</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<tr>
<td class="email-content-rounded-bottom mobile-expand" style="padding: 0; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 5px; line-height: 5px; background-color: #ffffff; border-top: 0; border-left: 1px solid #cccccc; border-bottom: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom-right-radius: 5px; border-bottom-left-radius: 5px; mso-line-height-rule: exactly" height="5" bgcolor="#ffffff"> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="footer-pattern" style="padding: 0; border-collapse: collapse; padding: 12px 20px">
<table id="footer-pattern-container" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0">
<tbody>
<tr>
<td id="footer-pattern-mobile-separated-links" class="mobile-resize-text" width="100%" colspan="2" style="padding: 0; border-collapse: collapse; color: #999999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px"> Get Jira notifications on your phone! Download the Jira Cloud app for <a href="https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail" style="color: #3b73af; text-decoration: none">Android</a> or <a href="https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8" style="color: #3b73af; text-decoration: none">iOS</a>
<hr> </td>
</tr>
<tr>
<td id="footer-pattern-text" class="mobile-resize-text" width="100%" style="padding: 0; border-collapse: collapse; color: #999999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px"> This message was sent by Atlassian Jira <span id="footer-build-information">(v1001.0.0-SNAPSHOT#100098-<span title="5f4503acac4f3c8fe4f082b003a8f267b82f7f7d" data-commit-id="5f4503acac4f3c8fe4f082b003a8f267b82f7f7d}">sha1:5f4503a</span>)</span> </td>
<td id="footer-pattern-logo-desktop-container" valign="top" style="padding: 0; border-collapse: collapse; padding-left: 20px; vertical-align: top">
<table style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0">
<tbody>
<tr>
<td id="footer-pattern-logo-desktop-padding" style="padding: 0; border-collapse: collapse; padding-top: 3px; opacity: 0.150"> <img id="footer-pattern-logo-desktop" src="cid:jira-generated-image-static-footer-desktop-logo-aaea680c-1f06-4d74-a8f9-dfa548844c8a" alt="Atlassian logo" title="Atlassian logo" width="192" height="24" class="image_fix"> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table>
<img border="0" width="1" height="1" alt="" src="http://atlassian.et.e.sparkpost.com/q/tfYjI2uVhEh1sfLJEhtrgg~~/AAAAAQA~/RgReT-dMPlcLYXRsYXNzaWFudXNCCgAAzLNuXFN4qvtSIGhpYmVybmF0ZS1pc3N1ZXNAbGlzdHMuamJvc3Mub3JnWAQAAAAE">
</body>
</html>