[JBoss JIRA] (ELY-609) Unguarded read in ElytronPolicyConfiguration
by Jan Kalina (JIRA)
[ https://issues.jboss.org/browse/ELY-609?page=com.atlassian.jira.plugin.sy... ]
Jan Kalina updated ELY-609:
---------------------------
Fix Version/s: 1.2.0.Beta11
(was: 1.2.0.Beta12)
> Unguarded read in ElytronPolicyConfiguration
> --------------------------------------------
>
> Key: ELY-609
> URL: https://issues.jboss.org/browse/ELY-609
> Project: WildFly Elytron
> Issue Type: Bug
> Affects Versions: 1.1.0.Beta7
> Reporter: Ondrej Lukas
> Assignee: Jan Kalina
> Labels: static_analysis
> Fix For: 1.2.0.Beta11
>
>
> Access to fields {{uncheckedPermissions}}, {{excludedPermissions}} and {{rolePermissions}} in {{org.wildfly.security.authz.jacc.ElytronPolicyConfiguration}} is holded by lock. However lock is not used in their getter methods. Getters should be also handled by locks to avoid unguarded read of those fields.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 5 months
[JBoss JIRA] (WFLY-9610) Start of a BatchJob is called, but BatchJob is seems no started. Absent entries in DB tables step_execution, job_execution
by Serg Pol (JIRA)
[ https://issues.jboss.org/browse/WFLY-9610?page=com.atlassian.jira.plugin.... ]
Serg Pol commented on WFLY-9610:
--------------------------------
thanks. I can not reproduce this case no in cluster environment. Lokal is everything Ok.
Is it possible to see what has happened in this case - if start of BatchJob was called, but BatchJob wasn't started? It happens sometimes.
May be to switch on some Log?
just Wildfly 9.0.1.Final is used.
> Start of a BatchJob is called, but BatchJob is seems no started. Absent entries in DB tables step_execution, job_execution
> --------------------------------------------------------------------------------------------------------------------------
>
> Key: WFLY-9610
> URL: https://issues.jboss.org/browse/WFLY-9610
> Project: WildFly
> Issue Type: Bug
> Components: Batch
> Affects Versions: 9.0.1.Final
> Environment: Cluster, standalone-full-ha
> Reporter: Serg Pol
> Assignee: Cheng Fang
>
> Start of a BatchJob is called and record/entry is absent sometimes in DB table "step_execution" as well as Endtime and Exitstatus in the table job_execution (there is just info about start of BatchJob).
> There are no any error nessages.
> BatchJob is not started in this case according Log.
> Any idea? Thanks
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 5 months
[JBoss JIRA] (WFLY-9614) Make keystore optional in SSO configuration
by Martin Choma (JIRA)
Martin Choma created WFLY-9614:
----------------------------------
Summary: Make keystore optional in SSO configuration
Key: WFLY-9614
URL: https://issues.jboss.org/browse/WFLY-9614
Project: WildFly
Issue Type: Bug
Components: Security, Web (Undertow)
Affects Versions: 11.0.0.Final
Reporter: Martin Choma
Assignee: Darran Lofthouse
Keystore is required [1], thus signing logout message by default.
Questionable is if security brought by this is worth default command complexity as:
* Integrity of messages could be achieved on node to node communication level
* If message was not signed, attacker needs to know http session id to do a harm. Once attacker knows http session id, he can do a lot more useful attacks then logout user.
Some long communication on topic occured on Wildfly Elytron hipchat room 2017-12-7 - 2017-12-11.
[1] https://docs.jboss.org/author/display/WFLY/Web+Single+Sign-On
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 5 months
[JBoss JIRA] (WFLY-6464) JPA 2.2 Support
by Scott Marlow (JIRA)
[ https://issues.jboss.org/browse/WFLY-6464?page=com.atlassian.jira.plugin.... ]
Scott Marlow updated WFLY-6464:
-------------------------------
Description:
>From JPA 2.2 specification appendix section A.1:
{code}
A.1 Maintenance Release Draft
Created document from Java Persistence 2.1 Final Release specification.
The following annotations have been marked @Repeatable:
AssociationOverride
AttributeOverride
Convert
JoinColumn
MapKeyJoinColumn
NamedEntityGraph
NamedNativeQuery
NamedQuery
NamedStoredProcedureQuery
PersistenceContext
PersistenceUnit
PrimaryKeyJoinColumn
SecondaryTable
SqlResultSetMapping
SequenceGenerator
TableGenerator
Added SequenceGenerators and TableGenerators annotations.
Added support for CDI injection into AttributeConverter classes.
Added support for the mapping of the following java.time types:
java.time.LocalDate
java.time.LocalTime
java.time.LocalDateTime
java.time.OffsetTime
java.time.OffsetDateTime
Added default Stream getResultStream() method to Query interface.
Added default Stream<X> getResultStream() method to TypedQuery interface.
Replaced reference to JAR file specification in persistence provider bootstrapping section with more
general reference to Java SE service provider requirements.
Updated persistence.xml and orm.xml schemas to 2.2 versions.
Updated Related Documents.
{code}
> JPA 2.2 Support
> ---------------
>
> Key: WFLY-6464
> URL: https://issues.jboss.org/browse/WFLY-6464
> Project: WildFly
> Issue Type: Sub-task
> Components: JPA / Hibernate
> Reporter: David Lloyd
> Assignee: Scott Marlow
> Fix For: 12.0.0.Alpha1
>
>
> From JPA 2.2 specification appendix section A.1:
> {code}
> A.1 Maintenance Release Draft
> Created document from Java Persistence 2.1 Final Release specification.
> The following annotations have been marked @Repeatable:
> AssociationOverride
> AttributeOverride
> Convert
> JoinColumn
> MapKeyJoinColumn
> NamedEntityGraph
> NamedNativeQuery
> NamedQuery
> NamedStoredProcedureQuery
> PersistenceContext
> PersistenceUnit
> PrimaryKeyJoinColumn
> SecondaryTable
> SqlResultSetMapping
> SequenceGenerator
> TableGenerator
> Added SequenceGenerators and TableGenerators annotations.
> Added support for CDI injection into AttributeConverter classes.
> Added support for the mapping of the following java.time types:
> java.time.LocalDate
> java.time.LocalTime
> java.time.LocalDateTime
> java.time.OffsetTime
> java.time.OffsetDateTime
> Added default Stream getResultStream() method to Query interface.
> Added default Stream<X> getResultStream() method to TypedQuery interface.
> Replaced reference to JAR file specification in persistence provider bootstrapping section with more
> general reference to Java SE service provider requirements.
> Updated persistence.xml and orm.xml schemas to 2.2 versions.
> Updated Related Documents.
> {code}
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 5 months
[JBoss JIRA] (JASSIST-257) java.lang.UnsupportedClassVersionError: javassist/ClassPool : Unsupported major.minor version 52.0
by Guillaume Rousseau (JIRA)
[ https://issues.jboss.org/browse/JASSIST-257?page=com.atlassian.jira.plugi... ]
Guillaume Rousseau commented on JASSIST-257:
--------------------------------------------
Hello,
I have the same problem, Tried to recompile with ant but I need to find a version of ant where 1.7 is supported.
C:\Java\javassist-rel_3_21_0_ga>ant7
Exception in thread "main" java.lang.UnsupportedClassVersionError: org/apache/tools/ant/launch/Launcher : Unsupported major.minor version 52.0
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClass(ClassLoader.java:800)
at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142)
at java.net.URLClassLoader.defineClass(URLClassLoader.java:449)
at java.net.URLClassLoader.access$100(URLClassLoader.java:71)
at java.net.URLClassLoader$1.run(URLClassLoader.java:361)
at java.net.URLClassLoader$1.run(URLClassLoader.java:355)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:354)
at java.lang.ClassLoader.loadClass(ClassLoader.java:425)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:308)
at java.lang.ClassLoader.loadClass(ClassLoader.java:358)
at sun.launcher.LauncherHelper.checkAndLoadMain(LauncherHelper.java:482)
Could you please provide us an url where we can find directly a version of javassist that is compatible with previous JDK ?
I would help a lot.
> java.lang.UnsupportedClassVersionError: javassist/ClassPool : Unsupported major.minor version 52.0
> --------------------------------------------------------------------------------------------------
>
> Key: JASSIST-257
> URL: https://issues.jboss.org/browse/JASSIST-257
> Project: Javassist
> Issue Type: Release
> Environment: Linux Tomcat 7 / JDK 1.6.0.41 / RHEL 5
> Javassist version 3.20.0-GA
> Reporter: Simon Franquet
> Assignee: Shigeru Chiba
>
> Sorry, not sure it's the right place to post this, but anyway : during instrumentation, class transformation fails with the this :
> Redefinition class failed !
> java.lang.UnsupportedClassVersionError: javassist/ClassPool : Unsupported major.minor version 52.0
> at java.lang.ClassLoader.defineClass1(Native Method)
> at java.lang.ClassLoader.defineClassCond(ClassLoader.java:631)
> at java.lang.ClassLoader.defineClass(ClassLoader.java:615)
> at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:141)
> at java.net.URLClassLoader.defineClass(URLClassLoader.java:283)
> at java.net.URLClassLoader.access$000(URLClassLoader.java:58)
> at java.net.URLClassLoader$1.run(URLClassLoader.java:197)
> at java.security.AccessController.doPrivileged(Native Method)
> at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
> at java.lang.ClassLoader.loadClass(ClassLoader.java:306)
> at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)
> at java.lang.ClassLoader.loadClass(ClassLoader.java:247)
> at com.meilleuregestion.instrumentation.Transformer.transform(Transformer.java:33)
> at sun.instrument.TransformerManager.transform(TransformerManager.java:169)
> at sun.instrument.InstrumentationImpl.transform(InstrumentationImpl.java:365)
> at java.lang.ClassLoader.defineClass1(Native Method)
> at java.lang.ClassLoader.defineClassCond(ClassLoader.java:631)
> at java.lang.ClassLoader.defineClass(ClassLoader.java:615)
> at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:141)
> at org.apache.catalina.loader.WebappClassLoader.findClassInternal(WebappClassLoader.java:2895)
> at org.apache.catalina.loader.WebappClassLoader.findClass(WebappClassLoader.java:1173)
> at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1681)
> at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1559)
> at org.apache.catalina.util.Introspection.loadClass(Introspection.java:143)
> at org.apache.catalina.startup.WebAnnotationSet.loadApplicationServletAnnotations(WebAnnotationSet.java:135)
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 5 months
[JBoss JIRA] (WFCORE-3456) Reduce unnecessary lambda usage
by David Lloyd (JIRA)
David Lloyd created WFCORE-3456:
-----------------------------------
Summary: Reduce unnecessary lambda usage
Key: WFCORE-3456
URL: https://issues.jboss.org/browse/WFCORE-3456
Project: WildFly Core
Issue Type: Task
Reporter: David Lloyd
Assignee: David Lloyd
Fix For: 4.0.0.Alpha5
Lambdas chew up a lot of resources and we use a lot of them. Eliminate whenever possible.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 5 months