[jbossws-issues] [JBoss JIRA] (JBWS-4008) Coverity reports possible need to use doPrivileged block for MapToBeanConverter

[Bartosz Baranowski (JIRA)]

Bartosz Baranowski created JBWS-4008:
----------------------------------------

             Summary: Coverity reports possible need to use doPrivileged block for MapToBeanConverter
                 Key: JBWS-4008
                 URL: https://issues.jboss.org/browse/JBWS-4008
             Project: JBoss Web Services
          Issue Type: Bug
            Reporter: Bartosz Baranowski
            Assignee: Jim Ma
             Fix For: jbossws-cxf-5.1.5.Final


Coverity reports possible need to use doPrivileged block for org.jboss.wsf.stack.cxf.client.configuration.MapToBeanConverter
Please investigate if the doPrivileged block is needed or not

{code:java}
99   protected Object newInstance(String className) throws Exception {
CID 17469 (#1 of 1): DP: Use doPrivileged (FB.DP_CREATE_CLASSLOADER_INSIDE_DO_PRIVILEGED)1. defect: 
org.jboss.wsf.stack.cxf.client.configuration.MapToBeanConverter.newInstance(String) 
creates a org.jboss.ws.common.utils.DelegateClassLoader classloader, which should be performed within a doPrivileged block.
100      ClassLoader loader = new DelegateClassLoader(ClassLoaderProvider.getDefaultProvider()
101            .getServerIntegrationClassLoader(), SecurityActions.getContextClassLoader());
102      Class<?> clazz = SecurityActions.loadClass(loader, className);
103      return clazz.newInstance();
104   }
{code}



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)