[jbossws-issues] [JBoss JIRA] (JBWS-3953) Coverity reports possible need to use doPrivileged block for MapToBeanConverter
Alessio Soldano (JIRA)
issues at jboss.org
Fri Apr 15 09:22:00 EDT 2016
[ https://issues.jboss.org/browse/JBWS-3953?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Alessio Soldano updated JBWS-3953:
----------------------------------
Fix Version/s: jbossws-cxf-5.2.0.Final
> Coverity reports possible need to use doPrivileged block for MapToBeanConverter
> -------------------------------------------------------------------------------
>
> Key: JBWS-3953
> URL: https://issues.jboss.org/browse/JBWS-3953
> Project: JBoss Web Services
> Issue Type: Bug
> Reporter: Rostislav Svoboda
> Assignee: Alessio Soldano
> Fix For: jbossws-cxf-5.2.0.Final
>
>
> Coverity reports possible need to use doPrivileged block for org.jboss.wsf.stack.cxf.client.configuration.MapToBeanConverter
> Please investigate if the doPrivileged block is needed or not
> {code:java}
> 99 protected Object newInstance(String className) throws Exception {
> CID 17469 (#1 of 1): DP: Use doPrivileged (FB.DP_CREATE_CLASSLOADER_INSIDE_DO_PRIVILEGED)1. defect:
> org.jboss.wsf.stack.cxf.client.configuration.MapToBeanConverter.newInstance(String)
> creates a org.jboss.ws.common.utils.DelegateClassLoader classloader, which should be performed within a doPrivileged block.
> 100 ClassLoader loader = new DelegateClassLoader(ClassLoaderProvider.getDefaultProvider()
> 101 .getServerIntegrationClassLoader(), SecurityActions.getContextClassLoader());
> 102 Class<?> clazz = SecurityActions.loadClass(loader, className);
> 103 return clazz.newInstance();
> 104 }
> {code}
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
More information about the jbossws-issues
mailing list