[infinispan-issues] [JBoss JIRA] (ISPN-10635) org.infinispan.commons.util.uberjar.ManifestUberJarDuplicatedJarsWarner.getBundleSymbolicNames is missing doPrivileged

[Tristan Tarrant (Jira)]

     [ https://issues.jboss.org/browse/ISPN-10635?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Tristan Tarrant resolved ISPN-10635.
------------------------------------
    Fix Version/s: 10.0.0.Final
       Resolution: Done


We have removed the ManifestUberJarDuplicatedJarsWarner class

> org.infinispan.commons.util.uberjar.ManifestUberJarDuplicatedJarsWarner.getBundleSymbolicNames is missing doPrivileged
> ----------------------------------------------------------------------------------------------------------------------
>
>                 Key: ISPN-10635
>                 URL: https://issues.jboss.org/browse/ISPN-10635
>             Project: Infinispan
>          Issue Type: Bug
>    Affects Versions: 9.4.16.Final, 10.0.0.CR1
>            Reporter: Nathan Rauh
>            Assignee: Tristan Tarrant
>            Priority: Minor
>             Fix For: 10.0.0.Final
>
>
> We were testing the Infinispan JCache implementation with our product and turned on Java 2 security.  It fails with Java 2 security enabled because a doPrivileged is missing from the following stack, so we are unable to grant permissions,
> {{java.security.AccessControlException: Access denied ("java.io.FilePermission" [various-jar-file-names-here] "read")java.base/java.security.AccessController.throwACE(AccessController.java:176)
>  java.base/java.security.AccessController.checkPermissionHelper(AccessController.java:237)
>  java.base/java.security.AccessController.checkPermission(AccessController.java:373)
>  java.base/java.lang.SecurityManager.checkPermission(SecurityManager.java:322)
>  com.ibm.ws.kernel.launch.internal.MissingDoPrivDetectionSecurityManager.checkPermission(MissingDoPrivDetectionSecurityManager.java:45)
>  java.base/java.lang.SecurityManager.checkRead(SecurityManager.java:661)
>  java.base/java.util.zip.ZipFile.<init>(ZipFile.java:235)
>  java.base/java.util.zip.ZipFile.<init>(ZipFile.java:176)
>  java.base/java.util.jar.JarFile.<init>(JarFile.java:346)
>  java.base/sun.net.www.protocol.jar.URLJarFile.<init>(URLJarFile.java:103)
>  java.base/sun.net.www.protocol.jar.URLJarFile.getJarFile(URLJarFile.java:72)
>  java.base/sun.net.www.protocol.jar.JarFileFactory.get(JarFileFactory.java:99)
>  java.base/sun.net.www.protocol.jar.JarURLConnection.connect(JarURLConnection.java:125)
>  java.base/sun.net.www.protocol.jar.JarURLConnection.getInputStream(JarURLConnection.java:155)
>  java.base/java.net.URL.openStream(URL.java:1117)
>  org.infinispan.commons.util.uberjar.ManifestUberJarDuplicatedJarsWarner.getBundleSymbolicNames(ManifestUberJarDuplicatedJarsWarner.java:54)
>  org.infinispan.commons.util.uberjar.ManifestUberJarDuplicatedJarsWarner.isClasspathCorrect(ManifestUberJarDuplicatedJarsWarner.java:39)
>  org.infinispan.commons.util.uberjar.ManifestUberJarDuplicatedJarsWarner.lambda$isClasspathCorrectAsync$3(ManifestUberJarDuplicatedJarsWarner.java:79)
>  org.infinispan.commons.util.uberjar.ManifestUberJarDuplicatedJarsWarner$$Lambda$252.000000004F268420.get(Unknown Source)
> }}



--
This message was sent by Atlassian Jira
(v7.13.8#713008)