[jira] [Updated] (XALANJ-2436) Xalan must not expose bundled classes (bcel, regexp)

["Jérôme Leroux (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/XALANJ-2436?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jérôme Leroux updated XALANJ-2436:
----------------------------------
    Attachment: XALAN-2436.patch

Attach patch:
- Fix for XALAN-2436: use {{jarjar}} task in the {{build.xml}} instead of {{jar}} task

To make it works, download _Jar Jar Links_ jar in {{tools/}} directory. It can be downloaded here: https://code.google.com/p/jarjar/downloads/detail?name=jarjar-src-1.4.zip&can=2&q=

Some links:
_Jar Jar Links_ project: https://code.google.com/p/jarjar/
_Jar Jar Links_ license: http://www.apache.org/licenses/LICENSE-2.0

> Xalan must not expose bundled classes (bcel, regexp)
> ----------------------------------------------------
>
>                 Key: XALANJ-2436
>                 URL: https://issues.apache.org/jira/browse/XALANJ-2436
>             Project: XalanJ2
>          Issue Type: Bug
>          Components: Xalan
>    Affects Versions: 2.7.1
>         Environment: any
>            Reporter: Holger Hoffstätte
>            Priority: Critical
>         Attachments: XALAN-2436.patch, rewrite-packages.rules
>
>
> I just spent the better part of half a day figuring out what caused the problem outlined in https://sourceforge.net/tracker/?func=detail&atid=614693&aid=1902137&group_id=96405.
> Xalan bundles regexp and bcel, however since one of the recommened ways of installing xalan is via the endorsed mechanism this will wreak serious havoc on any other apps that use bcel. That would be less of a problem is xalan's version were up to date, but as of 2.7.1 it still includes a version from the early stone age (see XALANJ-2423). The solution is easy: when building the aggregate jar, add an ant task to rewrite the bundled packages via jarjar (http://code.google.com/p/jarjar/). This can be trivially added to the build and creates a completely self-contained xalan jar that will not blow up the world when endorsed.
> I will attach a trivial rule file for jarjar that rewrites the embedded packages which should immediately fix any collision problems. For more information about how to use jarjar, see http://code.google.com/p/jarjar/wiki/GettingStarted



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@xalan.apache.org
For additional commands, e-mail: dev-help@xalan.apache.org