ROME and AppEngine

[Nick Lothian]

ROME currently won't run on Google AppEngine because of this issue: http://code.google.com/p/googleappengine/issues/detail?id=1367

If anyone has any insight about potential work arounds that would be wonderful. At present the only way I could see to move forward on this would be to patch JDom, but I haven't investigated exactly what would be needed there.

Nick

IMPORTANT: This e-mail, including any attachments, may contain private or confidential information. If you think you may not be the intended recipient, or if you have received this e-mail in error, please contact the sender immediately and delete all copies of this e-mail. If you are not the intended recipient, you must not reproduce any part of this e-mail or disclose its contents to any other party. This email represents the views of the individual sender, which do not necessarily reflect those of Education.au except where the sender expressly states otherwise. It is your responsibility to scan this email and any files transmitted with it for viruses or any other defects. education.au limited will not be liable for any loss, damage or consequence caused directly or indirectly by this email.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@...
For additional commands, e-mail: dev-help@...

[Robert (kebernet) Cooper]

Could you package a sax impl with you app and pass in  
javax.xml.parsers.SAXParserFactory?

--r(k)c


On Apr 29, 2009, at 12:45 AM, Nick Lothian  
<nlothian@...> wrote:

> ROME currently won't run on Google AppEngine because of this issue: http://code.google.com/p/googleappengine/issues/detail?id=1367
>
> If anyone has any insight about potential work arounds that would be  
> wonderful. At present the only way I could see to move forward on  
> this would be to patch JDom, but I haven't investigated exactly what  
> would be needed there.
>
> Nick
>
> IMPORTANT: This e-mail, including any attachments, may contain  
> private or confidential information. If you think you may not be the  
> intended recipient, or if you have received this e-mail in error,  
> please contact the sender immediately and delete all copies of this  
> e-mail. If you are not the intended recipient, you must not  
> reproduce any part of this e-mail or disclose its contents to any  
> other party. This email represents the views of the individual  
> sender, which do not necessarily reflect those of Education.au  
> except where the sender expressly states otherwise. It is your  
> responsibility to scan this email and any files transmitted with it  
> for viruses or any other defects. education.au limited will not be  
> liable for any loss, damage or consequence caused directly or  
> indirectly by this email.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@...
> For additional commands, e-mail: dev-help@...
>

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@...
For additional commands, e-mail: dev-help@...

[Robert (kebernet) Cooper]

Sorry, was sending from the phone. I suspect this may be about reflecting on the core classes in GAE. I would try packaging another SAX parser in the app and setting a system property on the app engine config and see if reflecting it in the local classloader works.

On Wed, Apr 29, 2009 at 12:53 AM, Robert (kebernet) Cooper <kebernet@...> wrote:

Could you package a sax impl with you app and pass in javax.xml.parsers.SAXParserFactory?

--r(k)c

On Apr 29, 2009, at 12:45 AM, Nick Lothian <nlothian@...> wrote:

ROME currently won't run on Google AppEngine because of this issue: http://code.google.com/p/googleappengine/issues/detail?id=1367

If anyone has any insight about potential work arounds that would be wonderful. At present the only way I could see to move forward on this would be to patch JDom, but I haven't investigated exactly what would be needed there.

Nick

IMPORTANT: This e-mail, including any attachments, may contain private or confidential information. If you think you may not be the intended recipient, or if you have received this e-mail in error, please contact the sender immediately and delete all copies of this e-mail. If you are not the intended recipient, you must not reproduce any part of this e-mail or disclose its contents to any other party. This email represents the views of the individual sender, which do not necessarily reflect those of Education.au except where the sender expressly states otherwise. It is your responsibility to scan this email and any files transmitted with it for viruses or any other defects. education.au limited will not be liable for any loss, damage or consequence caused directly or indirectly by this email.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@...
For additional commands, e-mail: dev-help@...

--
:Robert "kebernet" Cooper
::kebernet@...
Alice's cleartext
Charlie is the attacker
Bob signs and encrypts
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x9E8759F8

[Nick Lothian]

I'm not sure if I can see how that would help.

From the comment at http://code.google.com/p/googleappengine/issues/detail?id=1367#c2 it looks like JDom is always going to try and call the static public method "createParser" on JAXPParserFactory via reflection

That functionality (calling public static methods via reflection) appears to be forbidden by the GAE/J security manager.

> -----Original Message-----
> From: Robert (kebernet) Cooper [mailto:kebernet@...]
> Sent: Wednesday, 29 April 2009 2:24 PM
> To: romed
> Cc: dev@...
> Subject: Re: ROME and AppEngine
>
> Could you package a sax impl with you app and pass in
> javax.xml.parsers.SAXParserFactory?
>
> --r(k)c
>
>
> On Apr 29, 2009, at 12:45 AM, Nick Lothian
> <nlothian@...> wrote:
>
> > ROME currently won't run on Google AppEngine because of this issue:
> http://code.google.com/p/googleappengine/issues/detail?id=1367
> >
> > If anyone has any insight about potential work arounds that would be
> > wonderful. At present the only way I could see to move forward on
> > this would be to patch JDom, but I haven't investigated exactly what
> > would be needed there.
> >
> > Nick
> >
> > IMPORTANT: This e-mail, including any attachments, may contain
> > private or confidential information. If you think you may not be the
> > intended recipient, or if you have received this e-mail in error,
> > please contact the sender immediately and delete all copies of this
> > e-mail. If you are not the intended recipient, you must not
> > reproduce any part of this e-mail or disclose its contents to any
> > other party. This email represents the views of the individual
> > sender, which do not necessarily reflect those of Education.au
> > except where the sender expressly states otherwise. It is your
> > responsibility to scan this email and any files transmitted with it
> > for viruses or any other defects. education.au limited will not be
> > liable for any loss, damage or consequence caused directly or
> > indirectly by this email.
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: dev-unsubscribe@...
> > For additional commands, e-mail: dev-help@...
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@...
> For additional commands, e-mail: dev-help@...

IMPORTANT: This e-mail, including any attachments, may contain private or confidential information. If you think you may not be the intended recipient, or if you have received this e-mail in error, please contact the sender immediately and delete all copies of this e-mail. If you are not the intended recipient, you must not reproduce any part of this e-mail or disclose its contents to any other party. This email represents the views of the individual sender, which do not necessarily reflect those of Education.au except where the sender expressly states otherwise. It is your responsibility to scan this email and any files transmitted with it for viruses or any other defects. education.au limited will not be liable for any loss, damage or consequence caused directly or indirectly by this email.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@...
For additional commands, e-mail: dev-help@...

[Robert (kebernet) Cooper]

Right, but I am wondering if it is failing because the reflection is on a JVM core class. I think the fact that it looks like a security exception is a bit of a lie -- you will get that if there is a chained exception. If you look at the top of the exception at the top of the bug report, it looks like the problem is from the factory method of the SAX parser from the default classpath by reflection (hence the top level exception showing it coming from *inside* Xerces. My guess is JDOM is getting a reflect exception thrown up through the regular reflect stuff and it is translating into a security exception, because, well, Google makes everything a security exception if you hit a forbidden class.

I would try either bundling Xerces or trying another SAX implementation underneath JDOM.

On Wed, Apr 29, 2009 at 1:02 AM, Nick Lothian <nlothian@...> wrote:

I'm not sure if I can see how that would help.

From the comment at http://code.google.com/p/googleappengine/issues/detail?id=1367#c2 it looks like JDom is always going to try and call the static public method "createParser" on JAXPParserFactory via reflection

That functionality (calling public static methods via reflection) appears to be forbidden by the GAE/J security manager.

> -----Original Message-----
> From: Robert (kebernet) Cooper [mailto:kebernet@...]
> Sent: Wednesday, 29 April 2009 2:24 PM
> To: romed
> Cc: dev@...
> Subject: Re: ROME and AppEngine
>
> Could you package a sax impl with you app and pass in
> javax.xml.parsers.SAXParserFactory?
>
> --r(k)c
>
>
> On Apr 29, 2009, at 12:45 AM, Nick Lothian
> <nlothian@...> wrote:
>
> > ROME currently won't run on Google AppEngine because of this issue:
> http://code.google.com/p/googleappengine/issues/detail?id=1367
> >
> > If anyone has any insight about potential work arounds that would be
> > wonderful. At present the only way I could see to move forward on
> > this would be to patch JDom, but I haven't investigated exactly what
> > would be needed there.
> >
> > Nick
> >
> > IMPORTANT: This e-mail, including any attachments, may contain
> > private or confidential information. If you think you may not be the
> > intended recipient, or if you have received this e-mail in error,
> > please contact the sender immediately and delete all copies of this
> > e-mail. If you are not the intended recipient, you must not
> > reproduce any part of this e-mail or disclose its contents to any
> > other party. This email represents the views of the individual
> > sender, which do not necessarily reflect those of Education.au
> > except where the sender expressly states otherwise. It is your
> > responsibility to scan this email and any files transmitted with it
> > for viruses or any other defects. education.au limited will not be
> > liable for any loss, damage or consequence caused directly or
> > indirectly by this email.
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: dev-unsubscribe@...
> > For additional commands, e-mail: dev-help@...
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@...
> For additional commands, e-mail: dev-help@...


IMPORTANT: This e-mail, including any attachments, may contain private or confidential information. If you think you may not be the intended recipient, or if you have received this e-mail in error, please contact the sender immediately and delete all copies of this e-mail. If you are not the intended recipient, you must not reproduce any part of this e-mail or disclose its contents to any other party. This email represents the views of the individual sender, which do not necessarily reflect those of Education.au except where the sender expressly states otherwise. It is your responsibility to scan this email and any files transmitted with it for viruses or any other defects. education.au limited will not be liable for any loss, damage or consequence caused directly or indirectly by this email.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@...
For additional commands, e-mail: dev-help@...

--
:Robert "kebernet" Cooper
::kebernet@...
Alice's cleartext
Charlie is the attacker
Bob signs and encrypts
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x9E8759F8

[Nick Lothian]

Some parts of this message have been removed. Learn more about Nabble's security policy.

Looks like you are right – the original issue raiser has just added a comment to say including Xerces in you app makes it work

 

From: Robert "kebernet" Cooper [mailto:kebernet@...]
Sent: Wednesday, 29 April 2009 2:41 PM
To: dev@...
Subject: Re: ROME and AppEngine

 

Right, but I am wondering if it is failing because the reflection is on a JVM core class. I think the fact that it looks like a security exception is a bit of a lie -- you will get that if there is a chained exception. If you look at the top of the exception at the top of the bug report, it looks like the problem is from the factory method of the SAX parser from the default classpath by reflection (hence the top level exception showing it coming from *inside* Xerces. My guess is JDOM is getting a reflect exception thrown up through the regular reflect stuff and it is translating into a security exception, because, well, Google makes everything a security exception if you hit a forbidden class.

 

I would try either bundling Xerces or trying another SAX implementation underneath JDOM.

On Wed, Apr 29, 2009 at 1:02 AM, Nick Lothian <nlothian@...> wrote:

I'm not sure if I can see how that would help.

From the comment at http://code.google.com/p/googleappengine/issues/detail?id=1367#c2 it looks like JDom is always going to try and call the static public method "createParser" on JAXPParserFactory via reflection

That functionality (calling public static methods via reflection) appears to be forbidden by the GAE/J security manager.

> -----Original Message-----
> From: Robert (kebernet) Cooper [mailto:kebernet@...]
> Sent: Wednesday, 29 April 2009 2:24 PM
> To: romed
> Cc: dev@...
> Subject: Re: ROME and AppEngine
>
> Could you package a sax impl with you app and pass in
> javax.xml.parsers.SAXParserFactory?
>
> --r(k)c
>
>
> On Apr 29, 2009, at 12:45 AM, Nick Lothian
> <nlothian@...> wrote:
>
> > ROME currently won't run on Google AppEngine because of this issue:
> http://code.google.com/p/googleappengine/issues/detail?id=1367
> >
> > If anyone has any insight about potential work arounds that would be
> > wonderful. At present the only way I could see to move forward on
> > this would be to patch JDom, but I haven't investigated exactly what
> > would be needed there.
> >
> > Nick
> >
> > IMPORTANT: This e-mail, including any attachments, may contain
> > private or confidential information. If you think you may not be the
> > intended recipient, or if you have received this e-mail in error,
> > please contact the sender immediately and delete all copies of this
> > e-mail. If you are not the intended recipient, you must not
> > reproduce any part of this e-mail or disclose its contents to any
> > other party. This email represents the views of the individual
> > sender, which do not necessarily reflect those of Education.au
> > except where the sender expressly states otherwise. It is your
> > responsibility to scan this email and any files transmitted with it
> > for viruses or any other defects. education.au limited will not be
> > liable for any loss, damage or consequence caused directly or
> > indirectly by this email.
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: dev-unsubscribe@...
> > For additional commands, e-mail: dev-help@...
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@...
> For additional commands, e-mail: dev-help@...


IMPORTANT: This e-mail, including any attachments, may contain private or confidential information. If you think you may not be the intended recipient, or if you have received this e-mail in error, please contact the sender immediately and delete all copies of this e-mail. If you are not the intended recipient, you must not reproduce any part of this e-mail or disclose its contents to any other party. This email represents the views of the individual sender, which do not necessarily reflect those of Education.au except where the sender expressly states otherwise. It is your responsibility to scan this email and any files transmitted with it for viruses or any other defects. education.au limited will not be liable for any loss, damage or consequence caused directly or indirectly by this email.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@...
For additional commands, e-mail: dev-help@...

--
:Robert "kebernet" Cooper
::kebernet@...
Alice's cleartext
Charlie is the attacker
Bob signs and encrypts
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x9E8759F8

---

IMPORTANT: This e-mail, including any attachments, may contain private or confidential information. If you think you may not be the intended recipient, or if you have received this e-mail in error, please contact the sender immediately and delete all copies of this e-mail. If you are not the intended recipient, you must not reproduce any part of this e-mail or disclose its contents to any other party. This email represents the views of the individual sender, which do not necessarily reflect those of Education.au except where the sender expressly states otherwise. It is your responsibility to scan this email and any files transmitted with it for viruses or any other defects. education.au limited will not be liable for any loss, damage or consequence caused directly or indirectly by this email.