You are viewing a plain text version of this content. The canonical link for it is here.
Posted to fop-dev@xmlgraphics.apache.org by bu...@apache.org on 2010/12/08 21:48:25 UTC

DO NOT REPLY [Bug 50435] New: access denied (java.util.PropertyPermission org.apache.fop.fo.properties.use-cache read)

https://issues.apache.org/bugzilla/show_bug.cgi?id=50435

           Summary: access denied (java.util.PropertyPermission
                    org.apache.fop.fo.properties.use-cache read)
           Product: Fop
           Version: 1.0
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: blocker
          Priority: P2
         Component: general
        AssignedTo: fop-dev@xmlgraphics.apache.org
        ReportedBy: armin.haaf@mercatis.com


when using fop 1.0 in java webstart (here java 1.6.0_22, under windows and
linux) it is not possible to render anything. We are getting always a
SecurityException (even if <all-permissions/> is activated in the jnlp.

outside of webstart everything works fine



21:35:53,218 DEBUG [org.apache.fop.fo.FOTreeBuilder] Building formatting object
tree
java.lang.ExceptionInInitializerError
    at
org.apache.fop.fo.expr.PropertyParser.parsePrimaryExpr(PropertyParser.java:324)
    at
org.apache.fop.fo.expr.PropertyParser.parseUnaryExpr(PropertyParser.java:214)
    at
org.apache.fop.fo.expr.PropertyParser.parseMultiplicativeExpr(PropertyParser.java:179)
    at
org.apache.fop.fo.expr.PropertyParser.parseAdditiveExpr(PropertyParser.java:153)
    at
org.apache.fop.fo.expr.PropertyParser.parseProperty(PropertyParser.java:127)
    at org.apache.fop.fo.expr.PropertyParser.parse(PropertyParser.java:93)
    at org.apache.fop.fo.properties.PropertyMaker.make(PropertyMaker.java:436)
    at
org.apache.fop.fo.properties.FontSizePropertyMaker.make(FontSizePropertyMaker.java:54)
    at
org.apache.fop.fo.PropertyList.convertAttributeToProperty(PropertyList.java:412)
    at
org.apache.fop.fo.PropertyList.addAttributesToList(PropertyList.java:305)
    at org.apache.fop.fo.FObj.processNode(FObj.java:119)
    at
org.apache.fop.fo.FOTreeBuilder$MainFOHandler.startElement(FOTreeBuilder.java:282)
    at org.apache.fop.fo.FOTreeBuilder.startElement(FOTreeBuilder.java:171)
    at
com.sun.org.apache.xml.internal.serializer.ToXMLSAXHandler.closeStartTag(ToXMLSAXHandler.java:204)
    at
com.sun.org.apache.xml.internal.serializer.ToSAXHandler.flushPending(ToSAXHandler.java:277)
    at
com.sun.org.apache.xml.internal.serializer.ToXMLSAXHandler.startElement(ToXMLSAXHandler.java:646)
    at
com.sun.org.apache.xml.internal.serializer.ToXMLSAXHandler.startElement(ToXMLSAXHandler.java:508)
    at GregorSamsa.template$dot$0()
    at GregorSamsa.applyTemplates()
    at GregorSamsa.applyTemplates()
    at GregorSamsa.transform()
    at
com.sun.org.apache.xalan.internal.xsltc.runtime.AbstractTranslet.transform(AbstractTranslet.java:602)
    at
com.sun.org.apache.xalan.internal.xsltc.trax.TransformerImpl.transform(TransformerImpl.java:709)
    at
com.sun.org.apache.xalan.internal.xsltc.trax.TransformerImpl.transform(TransformerImpl.java:313)
    at 


Caused by: java.security.AccessControlException: access denied
(java.util.PropertyPermission org.apache.fop.fo.properties.use-cache read)
    at
java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
    at
java.security.AccessController.checkPermission(AccessController.java:546)
    at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
    at java.lang.SecurityManager.checkPropertyAccess(SecurityManager.java:1285)
    at java.lang.System.getProperty(System.java:686)
    at
org.apache.fop.fo.properties.PropertyCache.<init>(PropertyCache.java:284)
    at org.apache.fop.fo.properties.FixedLength.<clinit>(FixedLength.java:48)

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Re: DO NOT REPLY [Bug 50435] access denied (java.util.PropertyPermission org.apache.fop.fo.properties.use-cache read)

Posted by Alexios Giotis <al...@gmail.com>.
Thanks Glenn !

On Apr 8, 2012, at 9:51 PM, Glenn Adams wrote:

> ok, good suggestion; i had thought of that also and was waiting to see other feedback; i'll make this mod: default to true and log a message;
> 
> On Sun, Apr 8, 2012 at 8:38 AM, <bu...@apache.org> wrote:
> https://issues.apache.org/bugzilla/show_bug.cgi?id=50435
> 
> --- Comment #5 from Alex Giotis <al...@gmail.com> 2012-04-08 14:38:15 UTC ---
> I think that the commit above introduces an inconsistency related to the
> default values, when FOP is executed in a normal (cache is used, unless a
> system property is set) and in a security constrained environment (cache is
> never used). Assuming that the cache is significantly reducing the memory
> requirements, then it would be difficult to identify why this does not happen
> when executed for example with webstart. When a SecurityException is caught, I
> would set the useCache to true and log an info message.
> 
> --
> Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
> ------- You are receiving this mail because: -------
> You are the assignee for the bug.
> 


Re: DO NOT REPLY [Bug 50435] access denied (java.util.PropertyPermission org.apache.fop.fo.properties.use-cache read)

Posted by Glenn Adams <gl...@skynav.com>.
ok, good suggestion; i had thought of that also and was waiting to see
other feedback; i'll make this mod: default to true and log a message;

On Sun, Apr 8, 2012 at 8:38 AM, <bu...@apache.org> wrote:

> https://issues.apache.org/bugzilla/show_bug.cgi?id=50435
>
> --- Comment #5 from Alex Giotis <al...@gmail.com> 2012-04-08
> 14:38:15 UTC ---
> I think that the commit above introduces an inconsistency related to the
> default values, when FOP is executed in a normal (cache is used, unless a
> system property is set) and in a security constrained environment (cache is
> never used). Assuming that the cache is significantly reducing the memory
> requirements, then it would be difficult to identify why this does not
> happen
> when executed for example with webstart. When a SecurityException is
> caught, I
> would set the useCache to true and log an info message.
>
> --
> Configure bugmail:
> https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
> ------- You are receiving this mail because: -------
> You are the assignee for the bug.
>

DO NOT REPLY [Bug 50435] access denied (java.util.PropertyPermission org.apache.fop.fo.properties.use-cache read)

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=50435

--- Comment #5 from Alex Giotis <al...@gmail.com> 2012-04-08 14:38:15 UTC ---
I think that the commit above introduces an inconsistency related to the
default values, when FOP is executed in a normal (cache is used, unless a
system property is set) and in a security constrained environment (cache is
never used). Assuming that the cache is significantly reducing the memory
requirements, then it would be difficult to identify why this does not happen
when executed for example with webstart. When a SecurityException is caught, I
would set the useCache to true and log an info message.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

DO NOT REPLY [Bug 50435] access denied (java.util.PropertyPermission org.apache.fop.fo.properties.use-cache read)

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=50435

Glenn Adams <gl...@skynav.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED

--- Comment #4 from Glenn Adams <gl...@skynav.com> 2012-04-08 00:10:39 UTC ---
http://svn.apache.org/viewvc?view=revision&revision=1310924

this should prevent a security exception; if property is not accessible, then
cache will not be used

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

DO NOT REPLY [Bug 50435] access denied (java.util.PropertyPermission org.apache.fop.fo.properties.use-cache read)

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=50435

--- Comment #6 from Glenn Adams <gl...@skynav.com> 2012-04-08 19:04:44 UTC ---
(In reply to comment #5)
> I think that the commit above introduces an inconsistency related to the
> default values, when FOP is executed in a normal (cache is used, unless a
> system property is set) and in a security constrained environment (cache is
> never used). Assuming that the cache is significantly reducing the memory
> requirements, then it would be difficult to identify why this does not happen
> when executed for example with webstart. When a SecurityException is caught, I
> would set the useCache to true and log an info message.

changed to 'true' and log (info) in case of access exception: see r1311070

thanks alex!

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

DO NOT REPLY [Bug 50435] access denied (java.util.PropertyPermission org.apache.fop.fo.properties.use-cache read)

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=50435

Glenn Adams <gl...@skynav.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Severity|blocker                     |normal

--- Comment #2 from Glenn Adams <gl...@skynav.com> 2012-03-30 20:36:06 UTC ---
move to normal priority, pending further action

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

DO NOT REPLY [Bug 50435] access denied (java.util.PropertyPermission org.apache.fop.fo.properties.use-cache read)

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=50435

Glenn Adams <gl...@skynav.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Priority|P2                          |P3

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

DO NOT REPLY [Bug 50435] access denied (java.util.PropertyPermission org.apache.fop.fo.properties.use-cache read)

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=50435

--- Comment #1 from armin.haaf@mercatis.com 2010-12-08 15:49:36 EST ---
this problem did not exists in version 0.95

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

DO NOT REPLY [Bug 50435] access denied (java.util.PropertyPermission org.apache.fop.fo.properties.use-cache read)

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=50435

--- Comment #3 from Glenn Adams <gl...@skynav.com> 2012-04-07 01:43:21 UTC ---
resetting P2 open bugs to P3 pending further review

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.