Bartosz Baranowski created JBWS-4008: ---------------------------------------- Summary: Coverity reports possible need to use doPrivileged block for MapToBeanConverter Key: JBWS-4008 URL: https://issues.jboss.org/browse/JBWS-4008 Project: JBoss Web Services Issue Type: Bug Reporter: Bartosz Baranowski Assignee: Jim Ma Fix For: jbossws-cxf-5.1.5.Final Coverity reports possible need to use doPrivileged block for org.jboss.wsf.stack.cxf.client.configuration.MapToBeanConverter Please investigate if the doPrivileged block is needed or not {code:java} 99 protected Object newInstance(String className) throws Exception { CID 17469 (#1 of 1): DP: Use doPrivileged (FB.DP_CREATE_CLASSLOADER_INSIDE_DO_PRIVILEGED)1. defect: org.jboss.wsf.stack.cxf.client.configuration.MapToBeanConverter.newInstance(String) creates a org.jboss.ws.common.utils.DelegateClassLoader classloader, which should be performed within a doPrivileged block. 100 ClassLoader loader = new DelegateClassLoader(ClassLoaderProvider.getDefaultProvider() 101 .getServerIntegrationClassLoader(), SecurityActions.getContextClassLoader()); 102 Class<?> clazz = SecurityActions.loadClass(loader, className); 103 return clazz.newInstance(); 104 } {code} -- This message was sent by Atlassian JIRA (v6.4.11#64026)