[jbossws-issues] [JBoss JIRA] (JBWS-3953) Coverity reports possible need to use doPrivileged block for MapToBeanConverter

Rostislav Svoboda (JIRA) issues at jboss.org
Mon Oct 5 10:44:00 EDT 2015


Rostislav Svoboda created JBWS-3953:
---------------------------------------

             Summary: Coverity reports possible need to use doPrivileged block for MapToBeanConverter
                 Key: JBWS-3953
                 URL: https://issues.jboss.org/browse/JBWS-3953
             Project: JBoss Web Services
          Issue Type: Bug
            Reporter: Rostislav Svoboda
            Assignee: Alessio Soldano


Coverity reports possible need to use doPrivileged block for org.jboss.wsf.stack.cxf.client.configuration.MapToBeanConverter
Please investigate if the doPrivileged block is needed or not

{code:java}
99   protected Object newInstance(String className) throws Exception {
CID 17469 (#1 of 1): DP: Use doPrivileged (FB.DP_CREATE_CLASSLOADER_INSIDE_DO_PRIVILEGED)1. defect: 
org.jboss.wsf.stack.cxf.client.configuration.MapToBeanConverter.newInstance(String) 
creates a org.jboss.ws.common.utils.DelegateClassLoader classloader, which should be performed within a doPrivileged block.
100      ClassLoader loader = new DelegateClassLoader(ClassLoaderProvider.getDefaultProvider()
101            .getServerIntegrationClassLoader(), SecurityActions.getContextClassLoader());
102      Class<?> clazz = SecurityActions.loadClass(loader, className);
103      return clazz.newInstance();
104   }
{code}



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)


More information about the jbossws-issues mailing list