Author: ron.sigal(a)jboss.com Date: 2008-04-02 00:10:43 -0400 (Wed, 02 Apr 2008) New Revision: 3843 Modified: remoting2/branches/2.x/src/main/org/jboss/remoting/serialization/SerializationManager.java Log: JBREM-934: Put Thread().getContextClassLoader() call in AccessController.doPrivileged() call. Modified: remoting2/branches/2.x/src/main/org/jboss/remoting/serialization/SerializationManager.java =================================================================== --- remoting2/branches/2.x/src/main/org/jboss/remoting/serialization/SerializationManager.java 2008-04-02 04:09:57 UTC (rev 3842) +++ remoting2/branches/2.x/src/main/org/jboss/remoting/serialization/SerializationManager.java 2008-04-02 04:10:43 UTC (rev 3843) @@ -28,6 +28,8 @@ import java.io.ObjectInputStream; import java.io.ObjectOutputStream; import java.io.OutputStream; +import java.security.AccessController; +import java.security.PrivilegedAction; import org.jboss.remoting.Version; @@ -43,7 +45,14 @@ { public ObjectInputStream createRegularInput(InputStream input) throws IOException { - return createInput(input, Thread.currentThread().getContextClassLoader()); + ClassLoader tcl = (ClassLoader) AccessController.doPrivileged( new PrivilegedAction() + { + public Object run() + { + return Thread.currentThread().getContextClassLoader(); + } + }); + return createInput(input, tcl); } public abstract ObjectInputStream createInput(InputStream input, ClassLoader loader) throws IOException;