[jira] Updated: (DERBY-485) SecurityException or LinkageException thrown during loading a class from a database jar incorrectly shuts the engine down.

["Daniel John Debrunner (JIRA)" <de...@db.apache.org>]

     [ http://issues.apache.org/jira/browse/DERBY-485?page=all ]

Daniel John Debrunner updated DERBY-485:
----------------------------------------

    Fix Version: 10.2.0.0

Revision 230183 Catch SecurityExceptions and LinkageExceptions consistently when loading application
classes (e.g. procedures, functions) and report as a ClassNotFoundException with the text of
the underlying exception. Enhance the test lang/dcl.jar to have a signed jar file as a database
jar, a hacked version of the jar file and a jar file with an invalid class (for a LinkageError).

> SecurityException or LinkageException thrown during loading a class from a database jar incorrectly shuts the engine down.
> --------------------------------------------------------------------------------------------------------------------------
>
>          Key: DERBY-485
>          URL: http://issues.apache.org/jira/browse/DERBY-485
>      Project: Derby
>         Type: Bug
>   Components: SQL, Security
>     Versions: 10.2.0.0, 10.1.1.1
>     Reporter: Daniel John Debrunner
>     Assignee: Daniel John Debrunner
>     Priority: Minor
>      Fix For: 10.2.0.0

>
> In addiing test cases to lang/dcl.test for signed jar files stored in the database I found that if a jar is installed with a tampered class the resulting SecurityException shuts Derby down. Most likely the same would be true for an invalid class hacked into the jar.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira