svn commit: r831830 - /tomcat/trunk/java/org/apache/catalina/security/SecurityClassLoad.java

[kkolinko]

Author: kkolinko
Date: Mon Nov  2 09:12:10 2009
New Revision: 831830

URL: http://svn.apache.org/viewvc?rev=831830&view=rev
Log:
Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=48097
Make SecurityClassLoad to preload o.a.c.loader.ResourceEntry class

It is port of a patch from tc6.0.
I have not really tested it in trunk, though, because running TC 7 with SecurityManager currently fails because of other issues.

Modified:
    tomcat/trunk/java/org/apache/catalina/security/SecurityClassLoad.java

Modified: tomcat/trunk/java/org/apache/catalina/security/SecurityClassLoad.java
URL: http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/security/SecurityClassLoad.java?rev=831830&r1=831829&r2=831830&view=diff
==============================================================================
--- tomcat/trunk/java/org/apache/catalina/security/SecurityClassLoad.java (original)
+++ tomcat/trunk/java/org/apache/catalina/security/SecurityClassLoad.java Mon Nov  2 09:12:10 2009
@@ -89,6 +89,8 @@
         loader.loadClass
             (basePackage +
              "loader.WebappClassLoader$PrivilegedFindResource");
+        loader.loadClass
+            (basePackage + "loader.ResourceEntry");
     }
     
     



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@...
For additional commands, e-mail: dev-help@...

[Bill Barker]

<kkolinko@...> wrote in message
news:20091102091211.4EC1623888D8@......

> Author: kkolinko
> Date: Mon Nov  2 09:12:10 2009
> New Revision: 831830
>
> URL: http://svn.apache.org/viewvc?rev=831830&view=rev
> Log:
> Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=48097
> Make SecurityClassLoad to preload o.a.c.loader.ResourceEntry class
>
> It is port of a patch from tc6.0.
> I have not really tested it in trunk, though, because running TC 7 with
> SecurityManager currently fails because of other issues.
>
> Modified:
>    tomcat/trunk/java/org/apache/catalina/security/SecurityClassLoad.java
>
> Modified:
> tomcat/trunk/java/org/apache/catalina/security/SecurityClassLoad.java
> URL:
> http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/security/SecurityClassLoad.java?rev=831830&r1=831829&r2=831830&view=diff
> ==============================================================================
> --- tomcat/trunk/java/org/apache/catalina/security/SecurityClassLoad.java
> (original)
> +++ tomcat/trunk/java/org/apache/catalina/security/SecurityClassLoad.java
> Mon Nov  2 09:12:10 2009
> @@ -89,6 +89,8 @@
>         loader.loadClass
>             (basePackage +
>              "loader.WebappClassLoader$PrivilegedFindResource");
> +        loader.loadClass
> +            (basePackage + "loader.ResourceEntry");
>     }

-0: Exposing ResourceEntry is harmless enough, but WebappClassLoader should
really be using it's PrivilegedFindResource class in this case instead.
After all, that is what it is there for.




---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@...
For additional commands, e-mail: dev-help@...