You are viewing a plain text version of this content. The canonical link for it is here.
Posted to log4net-dev@logging.apache.org by "Nicko Cadell (JIRA)" <ji...@apache.org> on 2006/07/10 13:28:29 UTC

[jira] Created: (LOG4NET-79) SecurityException thrown in LogicalThreadContextProperties GetProperties

SecurityException thrown in LogicalThreadContextProperties GetProperties
------------------------------------------------------------------------

         Key: LOG4NET-79
         URL: http://issues.apache.org/jira/browse/LOG4NET-79
     Project: Log4net
        Type: Bug

  Components: Core  
    Versions: 1.2.10    
    Reporter: Nicko Cadell
 Assigned to: Nicko Cadell 
     Fix For: 1.2.11


SecurityException thrown in LogicalThreadContextProperties GetProperties

The LogicalThreadContext stores its properties in the CallContext. The CallContext methods GetData ans SetData have a LinkDemand for the SecurityPermissionFlag.Infrastructure. If the calling code does not have this permission a SecurityException is generated when the LogicalThreadContextProperties.GetProperties method is JITed. The calling code does not have this psermission if it is in the Medium trust zone.

The exception causes the LoggingEvent to fail to compose its properties, and therefore log4net fails to log any events. The exception is eventualy caught and does not leak into the calling application.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira

[jira] Resolved: (LOG4NET-79) SecurityException thrown in LogicalThreadContextProperties GetProperties

Posted by "Nicko Cadell (JIRA)" <ji...@apache.org>.
     [ http://issues.apache.org/jira/browse/LOG4NET-79?page=all ]
     
Nicko Cadell resolved LOG4NET-79:
---------------------------------

    Resolution: Fixed

Updated code to catch exception and disable the LogicalThreadContextProperties

> SecurityException thrown in LogicalThreadContextProperties GetProperties
> ------------------------------------------------------------------------
>
>          Key: LOG4NET-79
>          URL: http://issues.apache.org/jira/browse/LOG4NET-79
>      Project: Log4net
>         Type: Bug

>   Components: Core
>     Versions: 1.2.10
>     Reporter: Nicko Cadell
>     Assignee: Nicko Cadell
>      Fix For: 1.2.11

>
> SecurityException thrown in LogicalThreadContextProperties GetProperties
> The LogicalThreadContext stores its properties in the CallContext. The CallContext methods GetData ans SetData have a LinkDemand for the SecurityPermissionFlag.Infrastructure. If the calling code does not have this permission a SecurityException is generated when the LogicalThreadContextProperties.GetProperties method is JITed. The calling code does not have this psermission if it is in the Medium trust zone.
> The exception causes the LoggingEvent to fail to compose its properties, and therefore log4net fails to log any events. The exception is eventualy caught and does not leak into the calling application.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira