Author: ron.sigal(a)jboss.com Date: 2008-05-07 19:36:30 -0400 (Wed, 07 May 2008) New Revision: 4133 Modified: remoting2/branches/2.x/src/main/org/jboss/remoting/transport/rmi/RMIClientInvoker.java Log: JBREM-934: Make sure JBossSerialization i/o goes through SecurityUtility. Modified: remoting2/branches/2.x/src/main/org/jboss/remoting/transport/rmi/RMIClientInvoker.java =================================================================== --- remoting2/branches/2.x/src/main/org/jboss/remoting/transport/rmi/RMIClientInvoker.java 2008-05-07 23:34:23 UTC (rev 4132) +++ remoting2/branches/2.x/src/main/org/jboss/remoting/transport/rmi/RMIClientInvoker.java 2008-05-07 23:36:30 UTC (rev 4133) @@ -42,6 +42,7 @@ import org.jboss.remoting.marshal.rmi.RMIUnMarshaller; import org.jboss.remoting.serialization.SerializationManager; import org.jboss.remoting.serialization.SerializationStreamFactory; +import org.jboss.remoting.util.SecurityUtility; import org.jboss.util.threadpool.BasicThreadPool; import org.jboss.util.threadpool.BlockingMode; import org.jboss.util.threadpool.RunnableTaskWrapper; @@ -375,7 +376,7 @@ try { byteOut.close(); - payload = ois.readObject(); + payload = SecurityUtility.readObject(ois); ois.close(); } catch(ClassNotFoundException e)