[infinispan-issues] [JBoss JIRA] (ISPN-10635) org.infinispan.commons.util.uberjar.ManifestUberJarDuplicatedJarsWarner.getBundleSymbolicNames is missing doPrivileged

[Nathan Rauh (Jira)]

Nathan Rauh created ISPN-10635:
----------------------------------

             Summary: org.infinispan.commons.util.uberjar.ManifestUberJarDuplicatedJarsWarner.getBundleSymbolicNames is missing doPrivileged
                 Key: ISPN-10635
                 URL: https://issues.jboss.org/browse/ISPN-10635
             Project: Infinispan
          Issue Type: Bug
    Affects Versions: 10.0.0.CR1, 9.4.16.Final
            Reporter: Nathan Rauh


We were testing the Infinispan JCache implementation with our product and turned on Java 2 security.  It fails with Java 2 security enabled because a doPrivileged is missing from the following stack, so we are unable to grant permissions,

{{java.security.AccessControlException: Access denied ("java.io.FilePermission" [various-jar-file-names-here] "read")java.base/java.security.AccessController.throwACE(AccessController.java:176)
 java.base/java.security.AccessController.checkPermissionHelper(AccessController.java:237)
 java.base/java.security.AccessController.checkPermission(AccessController.java:373)
 java.base/java.lang.SecurityManager.checkPermission(SecurityManager.java:322)
 com.ibm.ws.kernel.launch.internal.MissingDoPrivDetectionSecurityManager.checkPermission(MissingDoPrivDetectionSecurityManager.java:45)
 java.base/java.lang.SecurityManager.checkRead(SecurityManager.java:661)
 java.base/java.util.zip.ZipFile.<init>(ZipFile.java:235)
 java.base/java.util.zip.ZipFile.<init>(ZipFile.java:176)
 java.base/java.util.jar.JarFile.<init>(JarFile.java:346)
 java.base/sun.net.www.protocol.jar.URLJarFile.<init>(URLJarFile.java:103)
 java.base/sun.net.www.protocol.jar.URLJarFile.getJarFile(URLJarFile.java:72)
 java.base/sun.net.www.protocol.jar.JarFileFactory.get(JarFileFactory.java:99)
 java.base/sun.net.www.protocol.jar.JarURLConnection.connect(JarURLConnection.java:125)
 java.base/sun.net.www.protocol.jar.JarURLConnection.getInputStream(JarURLConnection.java:155)
 java.base/java.net.URL.openStream(URL.java:1117)
 org.infinispan.commons.util.uberjar.ManifestUberJarDuplicatedJarsWarner.getBundleSymbolicNames(ManifestUberJarDuplicatedJarsWarner.java:54)
 org.infinispan.commons.util.uberjar.ManifestUberJarDuplicatedJarsWarner.isClasspathCorrect(ManifestUberJarDuplicatedJarsWarner.java:39)
 org.infinispan.commons.util.uberjar.ManifestUberJarDuplicatedJarsWarner.lambda$isClasspathCorrectAsync$3(ManifestUberJarDuplicatedJarsWarner.java:79)
 org.infinispan.commons.util.uberjar.ManifestUberJarDuplicatedJarsWarner$$Lambda$252.000000004F268420.get(Unknown Source)
}}



--
This message was sent by Atlassian Jira
(v7.13.5#713005)