[jboss-jira] [JBoss JIRA] (AS7-6785) javax.security.auth.login.Configuration#contextClassLoader grabs a random class loader and holds onto it forever

Mon Mar 25 07:56:42 EDT 2013

    [ https://issues.jboss.org/browse/AS7-6785?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12762900#comment-12762900 ] 

Stuart Douglas commented on AS7-6785:
-------------------------------------

Actually it appears I miss-read the profiler, it was not holding onto a deployments class loader, but it is still a bug waiting to happen.

> javax.security.auth.login.Configuration#contextClassLoader grabs a random class loader and holds onto it forever
> ----------------------------------------------------------------------------------------------------------------
>
>                 Key: AS7-6785
>                 URL: https://issues.jboss.org/browse/AS7-6785
>             Project: Application Server 7
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: EAP 6.1.0.Alpha (7.2.0.Final)
>            Reporter: Stuart Douglas
>            Assignee: Anil Saldhana
>
> This class uses the TCCL that is present at class initialization. This could be any class loader, and is often a deployments class loader, which causes a permgen leak.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira