[Hibernate-JIRA] Created: (HV-552) Need additional AccessController.doPrivileged() for invoking equals() on an instance of Annotation.
9:35 a.m.
Need additional AccessController.doPrivileged() for invoking equals() on an instance of
Annotation.
---------------------------------------------------------------------------------------------------
Key: HV-552
URL: http://opensource.atlassian.com/projects/hibernate/browse/HV-552
Project: Hibernate Validator
Issue Type: Bug
Components: engine
Affects Versions: 4.2.0.Final
Environment: AIX
Reporter: Ed Burns
Priority: Trivial
I have a simple servlet that calls some BV apis, like this:
List<String> listOfString = new ArrayList<String>();
listOfString.add("one");
listOfString.add("two");
listOfString.add("three");
Set<ConstraintViolation<Person>> violations =
beanValidator.validateValue(Person.class, "listOfString",
listOfString);
However, when the validateValue() call is made a
java.security.AccessControlException exception is thrown.
The code throwing the exception is
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289).
The code looks innocent enough:
@Override
public boolean equals(Object o) {
if ( this == o ) {
return true;
}
if ( o == null || getClass() != o.getClass() ) {
return false;
}
ConstraintDescriptorImpl<?> that = (ConstraintDescriptorImpl<?>) o;
if ( annotation != null ? !annotation.equals( that.annotation ) : that.annotation !=
null ) {
return false;
}
return true;
}
The exception is thrown on the invocation of annotation.equals(), as
shown in this stack trace:
[#|2011-09-12T12:47:22.022-0700|WARNING|glassfish3.1.2|javax.enterprise.system.container.web.com.sun.enterprise.web|_ThreadID=8;_ThreadName=Thread-11;|StandardWrapperValve[SimpleBVServlet]:
PWC1406: Servlet.service() for servlet SimpleBVServlet threw exception
java.security.AccessControlException: Access denied (java.lang.reflect.ReflectPermission
suppressAccessChecks)
at java.security.AccessController.checkPermission(AccessController.java:108)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:544)
at java.lang.reflect.AccessibleObject.setAccessible(AccessibleObject.java:118)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.compare(AnnotationHelper.java:186)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.invoke(AnnotationHelper.java:111)
at $Proxy15.equals(Unknown Source)
at
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289)
at org.hibernate.validator.metadata.MetaConstraint.equals(MetaConstraint.java:106)
at java.util.ArrayList.contains(ArrayList.java:305)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForDefaultGroup(ValidatorImpl.java:821)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForCurrentGroup(ValidatorImpl.java:742)
at
org.hibernate.validator.engine.ValidatorImpl.validateValueInContext(ValidatorImpl.java:699)
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
9:37 a.m.
New subject: [Hibernate-JIRA] Updated: (HV-552) Need additional AccessController.doPrivileged() for invoking equals() on an instance of Annotation.
[
http://opensource.atlassian.com/projects/hibernate/browse/HV-552?page=com...
]
Ed Burns updated HV-552:
------------------------
Attachment: i_hv_522.patch
Proposed fix.
Need additional AccessController.doPrivileged() for invoking equals()
on an instance of Annotation.
---------------------------------------------------------------------------------------------------
Key: HV-552
URL: http://opensource.atlassian.com/projects/hibernate/browse/HV-552
Project: Hibernate Validator
Issue Type: Bug
Components: engine
Affects Versions: 4.2.0.Final
Environment: AIX
Reporter: Ed Burns
Priority: Trivial
Attachments: i_hv_522.patch
I have a simple servlet that calls some BV apis, like this:
List<String> listOfString = new ArrayList<String>();
listOfString.add("one");
listOfString.add("two");
listOfString.add("three");
Set<ConstraintViolation<Person>> violations =
beanValidator.validateValue(Person.class, "listOfString",
listOfString);
However, when the validateValue() call is made a
java.security.AccessControlException exception is thrown.
The code throwing the exception is
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289).
The code looks innocent enough:
@Override
public boolean equals(Object o) {
if ( this == o ) {
return true;
}
if ( o == null || getClass() != o.getClass() ) {
return false;
}
ConstraintDescriptorImpl<?> that = (ConstraintDescriptorImpl<?>) o;
if ( annotation != null ? !annotation.equals( that.annotation ) : that.annotation !=
null ) {
return false;
}
return true;
}
The exception is thrown on the invocation of annotation.equals(), as
shown in this stack trace:
[#|2011-09-12T12:47:22.022-0700|WARNING|glassfish3.1.2|javax.enterprise.system.container.web.com.sun.enterprise.web|_ThreadID=8;_ThreadName=Thread-11;|StandardWrapperValve[SimpleBVServlet]:
PWC1406: Servlet.service() for servlet SimpleBVServlet threw exception
java.security.AccessControlException: Access denied (java.lang.reflect.ReflectPermission
suppressAccessChecks)
at java.security.AccessController.checkPermission(AccessController.java:108)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:544)
at java.lang.reflect.AccessibleObject.setAccessible(AccessibleObject.java:118)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.compare(AnnotationHelper.java:186)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.invoke(AnnotationHelper.java:111)
at $Proxy15.equals(Unknown Source)
at
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289)
at org.hibernate.validator.metadata.MetaConstraint.equals(MetaConstraint.java:106)
at java.util.ArrayList.contains(ArrayList.java:305)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForDefaultGroup(ValidatorImpl.java:821)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForCurrentGroup(ValidatorImpl.java:742)
at
org.hibernate.validator.engine.ValidatorImpl.validateValueInContext(ValidatorImpl.java:699)
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
9:39 a.m.
New subject: [Hibernate-JIRA] Commented: (HV-552) Need additional AccessController.doPrivileged() for invoking equals() on an instance of Annotation.
[
http://opensource.atlassian.com/projects/hibernate/browse/HV-552?page=com...
]
Ed Burns commented on HV-552:
-----------------------------
This issue is being tracked in <http://java.net/jira/browse/GLASSFISH-17288>;.
Need additional AccessController.doPrivileged() for invoking equals()
on an instance of Annotation.
---------------------------------------------------------------------------------------------------
Key: HV-552
URL: http://opensource.atlassian.com/projects/hibernate/browse/HV-552
Project: Hibernate Validator
Issue Type: Bug
Components: engine
Affects Versions: 4.2.0.Final
Environment: AIX
Reporter: Ed Burns
Priority: Trivial
Attachments: i_hv_522.patch
I have a simple servlet that calls some BV apis, like this:
List<String> listOfString = new ArrayList<String>();
listOfString.add("one");
listOfString.add("two");
listOfString.add("three");
Set<ConstraintViolation<Person>> violations =
beanValidator.validateValue(Person.class, "listOfString",
listOfString);
However, when the validateValue() call is made a
java.security.AccessControlException exception is thrown.
The code throwing the exception is
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289).
The code looks innocent enough:
@Override
public boolean equals(Object o) {
if ( this == o ) {
return true;
}
if ( o == null || getClass() != o.getClass() ) {
return false;
}
ConstraintDescriptorImpl<?> that = (ConstraintDescriptorImpl<?>) o;
if ( annotation != null ? !annotation.equals( that.annotation ) : that.annotation !=
null ) {
return false;
}
return true;
}
The exception is thrown on the invocation of annotation.equals(), as
shown in this stack trace:
[#|2011-09-12T12:47:22.022-0700|WARNING|glassfish3.1.2|javax.enterprise.system.container.web.com.sun.enterprise.web|_ThreadID=8;_ThreadName=Thread-11;|StandardWrapperValve[SimpleBVServlet]:
PWC1406: Servlet.service() for servlet SimpleBVServlet threw exception
java.security.AccessControlException: Access denied (java.lang.reflect.ReflectPermission
suppressAccessChecks)
at java.security.AccessController.checkPermission(AccessController.java:108)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:544)
at java.lang.reflect.AccessibleObject.setAccessible(AccessibleObject.java:118)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.compare(AnnotationHelper.java:186)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.invoke(AnnotationHelper.java:111)
at $Proxy15.equals(Unknown Source)
at
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289)
at org.hibernate.validator.metadata.MetaConstraint.equals(MetaConstraint.java:106)
at java.util.ArrayList.contains(ArrayList.java:305)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForDefaultGroup(ValidatorImpl.java:821)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForCurrentGroup(ValidatorImpl.java:742)
at
org.hibernate.validator.engine.ValidatorImpl.validateValueInContext(ValidatorImpl.java:699)
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:44 a.m.
New subject: [Hibernate-JIRA] Assigned: (HV-552) Need additional AccessController.doPrivileged() for invoking equals() on an instance of Annotation.
[
http://opensource.atlassian.com/projects/hibernate/browse/HV-552?page=com...
]
Hardy Ferentschik reassigned HV-552:
------------------------------------
Assignee: Hardy Ferentschik
Need additional AccessController.doPrivileged() for invoking equals()
on an instance of Annotation.
---------------------------------------------------------------------------------------------------
Key: HV-552
URL: http://opensource.atlassian.com/projects/hibernate/browse/HV-552
Project: Hibernate Validator
Issue Type: Bug
Components: engine
Affects Versions: 4.2.0.Final
Environment: AIX
Reporter: Ed Burns
Assignee: Hardy Ferentschik
Priority: Trivial
Attachments: i_hv_522.patch
I have a simple servlet that calls some BV apis, like this:
List<String> listOfString = new ArrayList<String>();
listOfString.add("one");
listOfString.add("two");
listOfString.add("three");
Set<ConstraintViolation<Person>> violations =
beanValidator.validateValue(Person.class, "listOfString",
listOfString);
However, when the validateValue() call is made a
java.security.AccessControlException exception is thrown.
The code throwing the exception is
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289).
The code looks innocent enough:
@Override
public boolean equals(Object o) {
if ( this == o ) {
return true;
}
if ( o == null || getClass() != o.getClass() ) {
return false;
}
ConstraintDescriptorImpl<?> that = (ConstraintDescriptorImpl<?>) o;
if ( annotation != null ? !annotation.equals( that.annotation ) : that.annotation !=
null ) {
return false;
}
return true;
}
The exception is thrown on the invocation of annotation.equals(), as
shown in this stack trace:
[#|2011-09-12T12:47:22.022-0700|WARNING|glassfish3.1.2|javax.enterprise.system.container.web.com.sun.enterprise.web|_ThreadID=8;_ThreadName=Thread-11;|StandardWrapperValve[SimpleBVServlet]:
PWC1406: Servlet.service() for servlet SimpleBVServlet threw exception
java.security.AccessControlException: Access denied (java.lang.reflect.ReflectPermission
suppressAccessChecks)
at java.security.AccessController.checkPermission(AccessController.java:108)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:544)
at java.lang.reflect.AccessibleObject.setAccessible(AccessibleObject.java:118)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.compare(AnnotationHelper.java:186)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.invoke(AnnotationHelper.java:111)
at $Proxy15.equals(Unknown Source)
at
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289)
at org.hibernate.validator.metadata.MetaConstraint.equals(MetaConstraint.java:106)
at java.util.ArrayList.contains(ArrayList.java:305)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForDefaultGroup(ValidatorImpl.java:821)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForCurrentGroup(ValidatorImpl.java:742)
at
org.hibernate.validator.engine.ValidatorImpl.validateValueInContext(ValidatorImpl.java:699)
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:48 a.m.
New subject: [Hibernate-JIRA] Updated: (HV-552) Need additional AccessController.doPrivileged() for invoking equals() on an instance of Annotation.
[
http://opensource.atlassian.com/projects/hibernate/browse/HV-552?page=com...
]
Hardy Ferentschik updated HV-552:
---------------------------------
Description:
I have a simple servlet that calls some BV apis, like this:
{code}
List<String> listOfString = new ArrayList<String>();
listOfString.add("one");
listOfString.add("two");
listOfString.add("three");
Set<ConstraintViolation<Person>> violations =
beanValidator.validateValue(Person.class, "listOfString",
listOfString);
{code}
However, when the _validateValue()_ call is made a _java.security.AccessControlException_
exception is thrown.
The code throwing the exception is
{code}
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289).
{code}
The code looks innocent enough:
{code}
@Override
public boolean equals(Object o) {
if ( this == o ) {
return true;
}
if ( o == null || getClass() != o.getClass() ) {
return false;
}
ConstraintDescriptorImpl<?> that = (ConstraintDescriptorImpl<?>) o;
if ( annotation != null ? !annotation.equals( that.annotation ) : that.annotation !=
null ) {
return false;
}
return true;
}
{code}
The exception is thrown on the invocation of _annotation.equals()_, as
shown in this stack trace:
{noformat}
[#|2011-09-12T12:47:22.022-0700|WARNING|glassfish3.1.2|javax.enterprise.system.container.web.com.sun.enterprise.web|_ThreadID=8;_ThreadName=Thread-11;|StandardWrapperValve[SimpleBVServlet]:
PWC1406: Servlet.service() for servlet SimpleBVServlet threw exception
java.security.AccessControlException: Access denied (java.lang.reflect.ReflectPermission
suppressAccessChecks)
at java.security.AccessController.checkPermission(AccessController.java:108)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:544)
at java.lang.reflect.AccessibleObject.setAccessible(AccessibleObject.java:118)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.compare(AnnotationHelper.java:186)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.invoke(AnnotationHelper.java:111)
at $Proxy15.equals(Unknown Source)
at
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289)
at org.hibernate.validator.metadata.MetaConstraint.equals(MetaConstraint.java:106)
at java.util.ArrayList.contains(ArrayList.java:305)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForDefaultGroup(ValidatorImpl.java:821)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForCurrentGroup(ValidatorImpl.java:742)
at
org.hibernate.validator.engine.ValidatorImpl.validateValueInContext(ValidatorImpl.java:699)
{noformat}
was:
I have a simple servlet that calls some BV apis, like this:
List<String> listOfString = new ArrayList<String>();
listOfString.add("one");
listOfString.add("two");
listOfString.add("three");
Set<ConstraintViolation<Person>> violations =
beanValidator.validateValue(Person.class, "listOfString",
listOfString);
However, when the validateValue() call is made a
java.security.AccessControlException exception is thrown.
The code throwing the exception is
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289).
The code looks innocent enough:
@Override
public boolean equals(Object o) {
if ( this == o ) {
return true;
}
if ( o == null || getClass() != o.getClass() ) {
return false;
}
ConstraintDescriptorImpl<?> that = (ConstraintDescriptorImpl<?>) o;
if ( annotation != null ? !annotation.equals( that.annotation ) : that.annotation !=
null ) {
return false;
}
return true;
}
The exception is thrown on the invocation of annotation.equals(), as
shown in this stack trace:
[#|2011-09-12T12:47:22.022-0700|WARNING|glassfish3.1.2|javax.enterprise.system.container.web.com.sun.enterprise.web|_ThreadID=8;_ThreadName=Thread-11;|StandardWrapperValve[SimpleBVServlet]:
PWC1406: Servlet.service() for servlet SimpleBVServlet threw exception
java.security.AccessControlException: Access denied (java.lang.reflect.ReflectPermission
suppressAccessChecks)
at java.security.AccessController.checkPermission(AccessController.java:108)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:544)
at java.lang.reflect.AccessibleObject.setAccessible(AccessibleObject.java:118)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.compare(AnnotationHelper.java:186)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.invoke(AnnotationHelper.java:111)
at $Proxy15.equals(Unknown Source)
at
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289)
at org.hibernate.validator.metadata.MetaConstraint.equals(MetaConstraint.java:106)
at java.util.ArrayList.contains(ArrayList.java:305)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForDefaultGroup(ValidatorImpl.java:821)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForCurrentGroup(ValidatorImpl.java:742)
at
org.hibernate.validator.engine.ValidatorImpl.validateValueInContext(ValidatorImpl.java:699)
Fix Version/s: 4.3.0.next
Need additional AccessController.doPrivileged() for invoking equals()
on an instance of Annotation.
---------------------------------------------------------------------------------------------------
Key: HV-552
URL: http://opensource.atlassian.com/projects/hibernate/browse/HV-552
Project: Hibernate Validator
Issue Type: Bug
Components: engine
Affects Versions: 4.2.0.Final
Environment: AIX
Reporter: Ed Burns
Assignee: Hardy Ferentschik
Priority: Trivial
Fix For: 4.3.0.next
Attachments: i_hv_522.patch
I have a simple servlet that calls some BV apis, like this:
{code}
List<String> listOfString = new ArrayList<String>();
listOfString.add("one");
listOfString.add("two");
listOfString.add("three");
Set<ConstraintViolation<Person>> violations =
beanValidator.validateValue(Person.class, "listOfString",
listOfString);
{code}
However, when the _validateValue()_ call is made a _java.security.AccessControlException_
exception is thrown.
The code throwing the exception is
{code}
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289).
{code}
The code looks innocent enough:
{code}
@Override
public boolean equals(Object o) {
if ( this == o ) {
return true;
}
if ( o == null || getClass() != o.getClass() ) {
return false;
}
ConstraintDescriptorImpl<?> that = (ConstraintDescriptorImpl<?>) o;
if ( annotation != null ? !annotation.equals( that.annotation ) : that.annotation !=
null ) {
return false;
}
return true;
}
{code}
The exception is thrown on the invocation of _annotation.equals()_, as
shown in this stack trace:
{noformat}
[#|2011-09-12T12:47:22.022-0700|WARNING|glassfish3.1.2|javax.enterprise.system.container.web.com.sun.enterprise.web|_ThreadID=8;_ThreadName=Thread-11;|StandardWrapperValve[SimpleBVServlet]:
PWC1406: Servlet.service() for servlet SimpleBVServlet threw exception
java.security.AccessControlException: Access denied (java.lang.reflect.ReflectPermission
suppressAccessChecks)
at java.security.AccessController.checkPermission(AccessController.java:108)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:544)
at java.lang.reflect.AccessibleObject.setAccessible(AccessibleObject.java:118)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.compare(AnnotationHelper.java:186)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.invoke(AnnotationHelper.java:111)
at $Proxy15.equals(Unknown Source)
at
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289)
at org.hibernate.validator.metadata.MetaConstraint.equals(MetaConstraint.java:106)
at java.util.ArrayList.contains(ArrayList.java:305)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForDefaultGroup(ValidatorImpl.java:821)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForCurrentGroup(ValidatorImpl.java:742)
at
org.hibernate.validator.engine.ValidatorImpl.validateValueInContext(ValidatorImpl.java:699)
{noformat}
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:53 a.m.
New subject: [Hibernate-JIRA] Commented: (HV-552) Need additional AccessController.doPrivileged() for invoking equals() on an instance of Annotation.
[
http://opensource.atlassian.com/projects/hibernate/browse/HV-552?page=com...
]
Hardy Ferentschik commented on HV-552:
--------------------------------------
Hi Ed,
here are my initial thoughts on this. I don't think that calling _equals_ on an object
should ever throw an _AccessControlException_. Neither the javadocs of
[Object#equals|http://docs.oracle.com/javase/6/docs/api/java/lang/Object.h...]
nor [this|http://java.sun.com/developer/onlineTraining/Programming/JDCBook/app...]
permissions list indicates that _equals_ can throw a security exception (which imo is
correct).
Looking at the stack strace I can see:
{noformat}
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.compare(AnnotationHelper.java:186)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.invoke(AnnotationHelper.java:111)
at $Proxy15.equals(Unknown Source)
{noformat}
This seems to imply that internally there is some proxying going on which probably via
reflection calls _equals_. This means that there is a bug in _AnnotationHelper_ and not in
HV. Is that the IBM JVM?
Need additional AccessController.doPrivileged() for invoking equals()
on an instance of Annotation.
---------------------------------------------------------------------------------------------------
Key: HV-552
URL: http://opensource.atlassian.com/projects/hibernate/browse/HV-552
Project: Hibernate Validator
Issue Type: Bug
Components: engine
Affects Versions: 4.2.0.Final
Environment: AIX
Reporter: Ed Burns
Assignee: Hardy Ferentschik
Priority: Trivial
Fix For: 4.3.0.next
Attachments: i_hv_522.patch
I have a simple servlet that calls some BV apis, like this:
{code}
List<String> listOfString = new ArrayList<String>();
listOfString.add("one");
listOfString.add("two");
listOfString.add("three");
Set<ConstraintViolation<Person>> violations =
beanValidator.validateValue(Person.class, "listOfString",
listOfString);
{code}
However, when the _validateValue()_ call is made a _java.security.AccessControlException_
exception is thrown.
The code throwing the exception is
{code}
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289).
{code}
The code looks innocent enough:
{code}
@Override
public boolean equals(Object o) {
if ( this == o ) {
return true;
}
if ( o == null || getClass() != o.getClass() ) {
return false;
}
ConstraintDescriptorImpl<?> that = (ConstraintDescriptorImpl<?>) o;
if ( annotation != null ? !annotation.equals( that.annotation ) : that.annotation !=
null ) {
return false;
}
return true;
}
{code}
The exception is thrown on the invocation of _annotation.equals()_, as
shown in this stack trace:
{noformat}
[#|2011-09-12T12:47:22.022-0700|WARNING|glassfish3.1.2|javax.enterprise.system.container.web.com.sun.enterprise.web|_ThreadID=8;_ThreadName=Thread-11;|StandardWrapperValve[SimpleBVServlet]:
PWC1406: Servlet.service() for servlet SimpleBVServlet threw exception
java.security.AccessControlException: Access denied (java.lang.reflect.ReflectPermission
suppressAccessChecks)
at java.security.AccessController.checkPermission(AccessController.java:108)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:544)
at java.lang.reflect.AccessibleObject.setAccessible(AccessibleObject.java:118)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.compare(AnnotationHelper.java:186)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.invoke(AnnotationHelper.java:111)
at $Proxy15.equals(Unknown Source)
at
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289)
at org.hibernate.validator.metadata.MetaConstraint.equals(MetaConstraint.java:106)
at java.util.ArrayList.contains(ArrayList.java:305)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForDefaultGroup(ValidatorImpl.java:821)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForCurrentGroup(ValidatorImpl.java:742)
at
org.hibernate.validator.engine.ValidatorImpl.validateValueInContext(ValidatorImpl.java:699)
{noformat}
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:59 a.m.
New subject: [Hibernate-JIRA] Commented: (HV-552) Need additional AccessController.doPrivileged() for invoking equals() on an instance of Annotation.
[
http://opensource.atlassian.com/projects/hibernate/browse/HV-552?page=com...
]
Hardy Ferentschik commented on HV-552:
--------------------------------------
Seems you also came to the conclusion that this a JVM bug -
[GLASSFISH-17288|http://java.net/jira/browse/GLASSFISH-17288]
Need additional AccessController.doPrivileged() for invoking equals()
on an instance of Annotation.
---------------------------------------------------------------------------------------------------
Key: HV-552
URL: http://opensource.atlassian.com/projects/hibernate/browse/HV-552
Project: Hibernate Validator
Issue Type: Bug
Components: engine
Affects Versions: 4.2.0.Final
Environment: AIX
Reporter: Ed Burns
Assignee: Hardy Ferentschik
Priority: Trivial
Attachments: i_hv_522.patch
I have a simple servlet that calls some BV apis, like this:
{code}
List<String> listOfString = new ArrayList<String>();
listOfString.add("one");
listOfString.add("two");
listOfString.add("three");
Set<ConstraintViolation<Person>> violations =
beanValidator.validateValue(Person.class, "listOfString",
listOfString);
{code}
However, when the _validateValue()_ call is made a _java.security.AccessControlException_
exception is thrown.
The code throwing the exception is
{code}
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289).
{code}
The code looks innocent enough:
{code}
@Override
public boolean equals(Object o) {
if ( this == o ) {
return true;
}
if ( o == null || getClass() != o.getClass() ) {
return false;
}
ConstraintDescriptorImpl<?> that = (ConstraintDescriptorImpl<?>) o;
if ( annotation != null ? !annotation.equals( that.annotation ) : that.annotation !=
null ) {
return false;
}
return true;
}
{code}
The exception is thrown on the invocation of _annotation.equals()_, as
shown in this stack trace:
{noformat}
[#|2011-09-12T12:47:22.022-0700|WARNING|glassfish3.1.2|javax.enterprise.system.container.web.com.sun.enterprise.web|_ThreadID=8;_ThreadName=Thread-11;|StandardWrapperValve[SimpleBVServlet]:
PWC1406: Servlet.service() for servlet SimpleBVServlet threw exception
java.security.AccessControlException: Access denied (java.lang.reflect.ReflectPermission
suppressAccessChecks)
at java.security.AccessController.checkPermission(AccessController.java:108)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:544)
at java.lang.reflect.AccessibleObject.setAccessible(AccessibleObject.java:118)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.compare(AnnotationHelper.java:186)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.invoke(AnnotationHelper.java:111)
at $Proxy15.equals(Unknown Source)
at
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289)
at org.hibernate.validator.metadata.MetaConstraint.equals(MetaConstraint.java:106)
at java.util.ArrayList.contains(ArrayList.java:305)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForDefaultGroup(ValidatorImpl.java:821)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForCurrentGroup(ValidatorImpl.java:742)
at
org.hibernate.validator.engine.ValidatorImpl.validateValueInContext(ValidatorImpl.java:699)
{noformat}
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:59 a.m.
New subject: [Hibernate-JIRA] Updated: (HV-552) Need additional AccessController.doPrivileged() for invoking equals() on an instance of Annotation.
[
http://opensource.atlassian.com/projects/hibernate/browse/HV-552?page=com...
]
Hardy Ferentschik updated HV-552:
---------------------------------
Fix Version/s: (was: 4.3.0.next)
Need additional AccessController.doPrivileged() for invoking equals()
on an instance of Annotation.
---------------------------------------------------------------------------------------------------
Key: HV-552
URL: http://opensource.atlassian.com/projects/hibernate/browse/HV-552
Project: Hibernate Validator
Issue Type: Bug
Components: engine
Affects Versions: 4.2.0.Final
Environment: AIX
Reporter: Ed Burns
Assignee: Hardy Ferentschik
Priority: Trivial
Attachments: i_hv_522.patch
I have a simple servlet that calls some BV apis, like this:
{code}
List<String> listOfString = new ArrayList<String>();
listOfString.add("one");
listOfString.add("two");
listOfString.add("three");
Set<ConstraintViolation<Person>> violations =
beanValidator.validateValue(Person.class, "listOfString",
listOfString);
{code}
However, when the _validateValue()_ call is made a _java.security.AccessControlException_
exception is thrown.
The code throwing the exception is
{code}
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289).
{code}
The code looks innocent enough:
{code}
@Override
public boolean equals(Object o) {
if ( this == o ) {
return true;
}
if ( o == null || getClass() != o.getClass() ) {
return false;
}
ConstraintDescriptorImpl<?> that = (ConstraintDescriptorImpl<?>) o;
if ( annotation != null ? !annotation.equals( that.annotation ) : that.annotation !=
null ) {
return false;
}
return true;
}
{code}
The exception is thrown on the invocation of _annotation.equals()_, as
shown in this stack trace:
{noformat}
[#|2011-09-12T12:47:22.022-0700|WARNING|glassfish3.1.2|javax.enterprise.system.container.web.com.sun.enterprise.web|_ThreadID=8;_ThreadName=Thread-11;|StandardWrapperValve[SimpleBVServlet]:
PWC1406: Servlet.service() for servlet SimpleBVServlet threw exception
java.security.AccessControlException: Access denied (java.lang.reflect.ReflectPermission
suppressAccessChecks)
at java.security.AccessController.checkPermission(AccessController.java:108)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:544)
at java.lang.reflect.AccessibleObject.setAccessible(AccessibleObject.java:118)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.compare(AnnotationHelper.java:186)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.invoke(AnnotationHelper.java:111)
at $Proxy15.equals(Unknown Source)
at
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289)
at org.hibernate.validator.metadata.MetaConstraint.equals(MetaConstraint.java:106)
at java.util.ArrayList.contains(ArrayList.java:305)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForDefaultGroup(ValidatorImpl.java:821)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForCurrentGroup(ValidatorImpl.java:742)
at
org.hibernate.validator.engine.ValidatorImpl.validateValueInContext(ValidatorImpl.java:699)
{noformat}
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:59 a.m.
New subject: [Hibernate-JIRA] Resolved: (HV-552) Need additional AccessController.doPrivileged() for invoking equals() on an instance of Annotation.
[
http://opensource.atlassian.com/projects/hibernate/browse/HV-552?page=com...
]
Hardy Ferentschik resolved HV-552.
----------------------------------
Resolution: Rejected
Need additional AccessController.doPrivileged() for invoking equals()
on an instance of Annotation.
---------------------------------------------------------------------------------------------------
Key: HV-552
URL: http://opensource.atlassian.com/projects/hibernate/browse/HV-552
Project: Hibernate Validator
Issue Type: Bug
Components: engine
Affects Versions: 4.2.0.Final
Environment: AIX
Reporter: Ed Burns
Assignee: Hardy Ferentschik
Priority: Trivial
Attachments: i_hv_522.patch
I have a simple servlet that calls some BV apis, like this:
{code}
List<String> listOfString = new ArrayList<String>();
listOfString.add("one");
listOfString.add("two");
listOfString.add("three");
Set<ConstraintViolation<Person>> violations =
beanValidator.validateValue(Person.class, "listOfString",
listOfString);
{code}
However, when the _validateValue()_ call is made a _java.security.AccessControlException_
exception is thrown.
The code throwing the exception is
{code}
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289).
{code}
The code looks innocent enough:
{code}
@Override
public boolean equals(Object o) {
if ( this == o ) {
return true;
}
if ( o == null || getClass() != o.getClass() ) {
return false;
}
ConstraintDescriptorImpl<?> that = (ConstraintDescriptorImpl<?>) o;
if ( annotation != null ? !annotation.equals( that.annotation ) : that.annotation !=
null ) {
return false;
}
return true;
}
{code}
The exception is thrown on the invocation of _annotation.equals()_, as
shown in this stack trace:
{noformat}
[#|2011-09-12T12:47:22.022-0700|WARNING|glassfish3.1.2|javax.enterprise.system.container.web.com.sun.enterprise.web|_ThreadID=8;_ThreadName=Thread-11;|StandardWrapperValve[SimpleBVServlet]:
PWC1406: Servlet.service() for servlet SimpleBVServlet threw exception
java.security.AccessControlException: Access denied (java.lang.reflect.ReflectPermission
suppressAccessChecks)
at java.security.AccessController.checkPermission(AccessController.java:108)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:544)
at java.lang.reflect.AccessibleObject.setAccessible(AccessibleObject.java:118)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.compare(AnnotationHelper.java:186)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.invoke(AnnotationHelper.java:111)
at $Proxy15.equals(Unknown Source)
at
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289)
at org.hibernate.validator.metadata.MetaConstraint.equals(MetaConstraint.java:106)
at java.util.ArrayList.contains(ArrayList.java:305)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForDefaultGroup(ValidatorImpl.java:821)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForCurrentGroup(ValidatorImpl.java:742)
at
org.hibernate.validator.engine.ValidatorImpl.validateValueInContext(ValidatorImpl.java:699)
{noformat}
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
10:08 a.m.
New subject: [Hibernate-JIRA] Commented: (HV-552) Need additional AccessController.doPrivileged() for invoking equals() on an instance of Annotation.
[
http://opensource.atlassian.com/projects/hibernate/browse/HV-552?page=com...
]
Ed Burns commented on HV-552:
-----------------------------
While this may be a bug in the IBM JDK, I kindly request that you apply the doPrivileged()
as indicated in the patch. I assert that the downside to doing this is smaller than the
upside for our IBM users who, as we all know, are very beholden to the lengthy release
cycle of IBM software and seem often to have great difficulty in upgrading any part of
their stack. If we can give them a working fix that is not a workaround, I think we
should. What is the nature of the opposition to my proposed fix? Performance? If so, I
don't think one additional doPrivileged() block will make any difference.
Need additional AccessController.doPrivileged() for invoking equals()
on an instance of Annotation.
---------------------------------------------------------------------------------------------------
Key: HV-552
URL: http://opensource.atlassian.com/projects/hibernate/browse/HV-552
Project: Hibernate Validator
Issue Type: Bug
Components: engine
Affects Versions: 4.2.0.Final
Environment: AIX
Reporter: Ed Burns
Assignee: Hardy Ferentschik
Priority: Trivial
Attachments: i_hv_522.patch
I have a simple servlet that calls some BV apis, like this:
{code}
List<String> listOfString = new ArrayList<String>();
listOfString.add("one");
listOfString.add("two");
listOfString.add("three");
Set<ConstraintViolation<Person>> violations =
beanValidator.validateValue(Person.class, "listOfString",
listOfString);
{code}
However, when the _validateValue()_ call is made a _java.security.AccessControlException_
exception is thrown.
The code throwing the exception is
{code}
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289).
{code}
The code looks innocent enough:
{code}
@Override
public boolean equals(Object o) {
if ( this == o ) {
return true;
}
if ( o == null || getClass() != o.getClass() ) {
return false;
}
ConstraintDescriptorImpl<?> that = (ConstraintDescriptorImpl<?>) o;
if ( annotation != null ? !annotation.equals( that.annotation ) : that.annotation !=
null ) {
return false;
}
return true;
}
{code}
The exception is thrown on the invocation of _annotation.equals()_, as
shown in this stack trace:
{noformat}
[#|2011-09-12T12:47:22.022-0700|WARNING|glassfish3.1.2|javax.enterprise.system.container.web.com.sun.enterprise.web|_ThreadID=8;_ThreadName=Thread-11;|StandardWrapperValve[SimpleBVServlet]:
PWC1406: Servlet.service() for servlet SimpleBVServlet threw exception
java.security.AccessControlException: Access denied (java.lang.reflect.ReflectPermission
suppressAccessChecks)
at java.security.AccessController.checkPermission(AccessController.java:108)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:544)
at java.lang.reflect.AccessibleObject.setAccessible(AccessibleObject.java:118)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.compare(AnnotationHelper.java:186)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.invoke(AnnotationHelper.java:111)
at $Proxy15.equals(Unknown Source)
at
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289)
at org.hibernate.validator.metadata.MetaConstraint.equals(MetaConstraint.java:106)
at java.util.ArrayList.contains(ArrayList.java:305)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForDefaultGroup(ValidatorImpl.java:821)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForCurrentGroup(ValidatorImpl.java:742)
at
org.hibernate.validator.engine.ValidatorImpl.validateValueInContext(ValidatorImpl.java:699)
{noformat}
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
10:18 a.m.
New subject: [Hibernate-JIRA] Commented: (HV-552) Need additional AccessController.doPrivileged() for invoking equals() on an instance of Annotation.
[
http://opensource.atlassian.com/projects/hibernate/browse/HV-552?page=com...
]
Hardy Ferentschik commented on HV-552:
--------------------------------------
Well, it IS a bug in the IBM JVM and there is the aspect of performance. I would assume
that the majority of users are NOT using the IBM VM, why should they be affected? Even
more though, there is the aspect of correctness, _equals_ is not a method which does need
security permissions.
It is a IBM VM bug and there exists a workaround for using a policy file. If you are
running on a JVM with the described problem you should upgrade your JVM or use the
workaround.
Need additional AccessController.doPrivileged() for invoking equals()
on an instance of Annotation.
---------------------------------------------------------------------------------------------------
Key: HV-552
URL: http://opensource.atlassian.com/projects/hibernate/browse/HV-552
Project: Hibernate Validator
Issue Type: Bug
Components: engine
Affects Versions: 4.2.0.Final
Environment: AIX
Reporter: Ed Burns
Assignee: Hardy Ferentschik
Priority: Trivial
Attachments: i_hv_522.patch
I have a simple servlet that calls some BV apis, like this:
{code}
List<String> listOfString = new ArrayList<String>();
listOfString.add("one");
listOfString.add("two");
listOfString.add("three");
Set<ConstraintViolation<Person>> violations =
beanValidator.validateValue(Person.class, "listOfString",
listOfString);
{code}
However, when the _validateValue()_ call is made a _java.security.AccessControlException_
exception is thrown.
The code throwing the exception is
{code}
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289).
{code}
The code looks innocent enough:
{code}
@Override
public boolean equals(Object o) {
if ( this == o ) {
return true;
}
if ( o == null || getClass() != o.getClass() ) {
return false;
}
ConstraintDescriptorImpl<?> that = (ConstraintDescriptorImpl<?>) o;
if ( annotation != null ? !annotation.equals( that.annotation ) : that.annotation !=
null ) {
return false;
}
return true;
}
{code}
The exception is thrown on the invocation of _annotation.equals()_, as
shown in this stack trace:
{noformat}
[#|2011-09-12T12:47:22.022-0700|WARNING|glassfish3.1.2|javax.enterprise.system.container.web.com.sun.enterprise.web|_ThreadID=8;_ThreadName=Thread-11;|StandardWrapperValve[SimpleBVServlet]:
PWC1406: Servlet.service() for servlet SimpleBVServlet threw exception
java.security.AccessControlException: Access denied (java.lang.reflect.ReflectPermission
suppressAccessChecks)
at java.security.AccessController.checkPermission(AccessController.java:108)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:544)
at java.lang.reflect.AccessibleObject.setAccessible(AccessibleObject.java:118)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.compare(AnnotationHelper.java:186)
at
com.ibm.oti.reflect.AnnotationHelper$AnnotationInvocationHandler.invoke(AnnotationHelper.java:111)
at $Proxy15.equals(Unknown Source)
at
org.hibernate.validator.metadata.ConstraintDescriptorImpl.equals(ConstraintDescriptorImpl.java:289)
at org.hibernate.validator.metadata.MetaConstraint.equals(MetaConstraint.java:106)
at java.util.ArrayList.contains(ArrayList.java:305)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForDefaultGroup(ValidatorImpl.java:821)
at
org.hibernate.validator.engine.ValidatorImpl.validatePropertyForCurrentGroup(ValidatorImpl.java:742)
at
org.hibernate.validator.engine.ValidatorImpl.validateValueInContext(ValidatorImpl.java:699)
{noformat}
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
5203
days inactive
5208
days old
hibernate-issues@lists.jboss.org
10 comments
2 participants
participants (2)
-
Ed Burns (JIRA) -
Hardy Ferentschik (JIRA)