[jboss-jira] [JBoss JIRA] (JBEE-156) Missing privileged action in org.jboss.com.sun.corba.se.impl.util.Utility

[David Lloyd (JIRA)]

David Lloyd created JBEE-156:
--------------------------------

             Summary: Missing privileged action in org.jboss.com.sun.corba.se.impl.util.Utility
                 Key: JBEE-156
                 URL: https://issues.jboss.org/browse/JBEE-156
             Project: JBoss JavaEE Spec APIs
          Issue Type: Bug
          Components: jboss-rmi-api
            Reporter: David Lloyd
            Assignee: Shelly McGowan


org.jboss.com.sun.corba.se.impl.util.Utility#loadStub(org.omg.CORBA.Object, java.lang.Class<?>)

This method has the following method:

{code}
    /*
     * Load an RMI-IIOP Stub. This is used in PortableRemoteObject.narrow.
     */
    public static Object loadStub(org.omg.CORBA.Object narrowFrom, Class<?> narrowTo)
    {
        Object result = null;

        try
        {
            // Get the codebase from the delegate to use when loading the new stub, if possible...
            String codebase = null;
            try
            {
                // We can't assume that narrowFrom is a CORBA_2_3 stub, yet it may have a 2_3 Delegate that provides a
                // codebase. Swallow the ClassCastException otherwise.
                Delegate delegate = StubAdapter.getDelegate(narrowFrom);
                codebase = ((org.omg.CORBA_2_3.portable.Delegate) delegate).get_codebase(narrowFrom);

            }
            catch (ClassCastException e)
            {
                throw wrapper.classCastExceptionInLoadStub(e);
            }

            PresentationManager.StubFactoryFactory sff = org.jboss.com.sun.corba.se.spi.orb.ORB.getStubFactoryFactory();
            PresentationManager.StubFactory sf = sff.createStubFactory(narrowTo.getName(), false, codebase, narrowTo,
                    narrowTo.getClassLoader());
            result = sf.makeStub();
            StubAdapter.setDelegate(result, StubAdapter.getDelegate(narrowFrom));
        }
        catch (Exception err)
        {
            throw wrapper.exceptionInLoadStub(err);
        }

        return result;
    }
{code}

The {{narrowTo.getClassLoader()}} should be made privileged.

Problem found in jboss-rmi-api_1.0_spec-1.0.4.Final; no version seems to exist for this release.



--
This message was sent by Atlassian JIRA
(v6.3.1#6329)