]
Alessio Soldano updated JBWS-3953:
----------------------------------
Assignee: (was: Alessio Soldano)
Coverity reports possible need to use doPrivileged block for
MapToBeanConverter
-------------------------------------------------------------------------------
Key: JBWS-3953
URL:
https://issues.jboss.org/browse/JBWS-3953
Project: JBoss Web Services
Issue Type: Bug
Reporter: Rostislav Svoboda
Fix For: jbossws-cxf-5.2.0.Final
Coverity reports possible need to use doPrivileged block for
org.jboss.wsf.stack.cxf.client.configuration.MapToBeanConverter
Please investigate if the doPrivileged block is needed or not
{code:java}
99 protected Object newInstance(String className) throws Exception {
CID 17469 (#1 of 1): DP: Use doPrivileged
(FB.DP_CREATE_CLASSLOADER_INSIDE_DO_PRIVILEGED)1. defect:
org.jboss.wsf.stack.cxf.client.configuration.MapToBeanConverter.newInstance(String)
creates a org.jboss.ws.common.utils.DelegateClassLoader classloader, which should be
performed within a doPrivileged block.
100 ClassLoader loader = new
DelegateClassLoader(ClassLoaderProvider.getDefaultProvider()
101 .getServerIntegrationClassLoader(),
SecurityActions.getContextClassLoader());
102 Class<?> clazz = SecurityActions.loadClass(loader, className);
103 return clazz.newInstance();
104 }
{code}