Author: ron.sigal(a)jboss.com
Date: 2008-05-07 19:36:49 -0400 (Wed, 07 May 2008)
New Revision: 4134
Modified:
remoting2/branches/2.x/src/main/org/jboss/remoting/transport/rmi/RMIServerInvoker.java
Log:
JBREM-934: Make sure JBossSerialization i/o goes through SecurityUtility.
Modified:
remoting2/branches/2.x/src/main/org/jboss/remoting/transport/rmi/RMIServerInvoker.java
===================================================================
---
remoting2/branches/2.x/src/main/org/jboss/remoting/transport/rmi/RMIServerInvoker.java 2008-05-07
23:36:30 UTC (rev 4133)
+++
remoting2/branches/2.x/src/main/org/jboss/remoting/transport/rmi/RMIServerInvoker.java 2008-05-07
23:36:49 UTC (rev 4134)
@@ -370,6 +370,7 @@
SerializationManager manager =
SerializationStreamFactory.getManagerInstance(getSerializationType());
ObjectOutputStream oos = manager.createOutput(baos);
oos.writeObject(payload);
+ SecurityUtility.writeObject(oos, payload);
oos.flush();
oos.close();
is = new ByteArrayInputStream(baos.toByteArray());