[jbossws-issues] [JBoss JIRA] (JBWS-3953) Coverity reports possible need to use doPrivileged block for MapToBeanConverter

[Alessio Soldano (JIRA)]

     [ https://issues.jboss.org/browse/JBWS-3953?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alessio Soldano updated JBWS-3953:
----------------------------------
    Assignee:     (was: Alessio Soldano)


> Coverity reports possible need to use doPrivileged block for MapToBeanConverter
> -------------------------------------------------------------------------------
>
>                 Key: JBWS-3953
>                 URL: https://issues.jboss.org/browse/JBWS-3953
>             Project: JBoss Web Services
>          Issue Type: Bug
>            Reporter: Rostislav Svoboda
>             Fix For: jbossws-cxf-5.2.0.Final
>
>
> Coverity reports possible need to use doPrivileged block for org.jboss.wsf.stack.cxf.client.configuration.MapToBeanConverter
> Please investigate if the doPrivileged block is needed or not
> {code:java}
> 99   protected Object newInstance(String className) throws Exception {
> CID 17469 (#1 of 1): DP: Use doPrivileged (FB.DP_CREATE_CLASSLOADER_INSIDE_DO_PRIVILEGED)1. defect: 
> org.jboss.wsf.stack.cxf.client.configuration.MapToBeanConverter.newInstance(String) 
> creates a org.jboss.ws.common.utils.DelegateClassLoader classloader, which should be performed within a doPrivileged block.
> 100      ClassLoader loader = new DelegateClassLoader(ClassLoaderProvider.getDefaultProvider()
> 101            .getServerIntegrationClassLoader(), SecurityActions.getContextClassLoader());
> 102      Class<?> clazz = SecurityActions.loadClass(loader, className);
> 103      return clazz.newInstance();
> 104   }
> {code}



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)