You are viewing a plain text version of this content. The canonical link for it is here.
Posted to axis-cvs@ws.apache.org by di...@apache.org on 2008/04/10 18:13:17 UTC

svn commit: r646860 - /webservices/axis2/trunk/java/modules/metadata/src/org/apache/axis2/jaxws/util/WSDL4JWrapper.java

Author: dims
Date: Thu Apr 10 09:13:06 2008
New Revision: 646860

URL: http://svn.apache.org/viewvc?rev=646860&view=rev
Log:
java2 security fix.

Modified:
    webservices/axis2/trunk/java/modules/metadata/src/org/apache/axis2/jaxws/util/WSDL4JWrapper.java

Modified: webservices/axis2/trunk/java/modules/metadata/src/org/apache/axis2/jaxws/util/WSDL4JWrapper.java
URL: http://svn.apache.org/viewvc/webservices/axis2/trunk/java/modules/metadata/src/org/apache/axis2/jaxws/util/WSDL4JWrapper.java?rev=646860&r1=646859&r2=646860&view=diff
==============================================================================
--- webservices/axis2/trunk/java/modules/metadata/src/org/apache/axis2/jaxws/util/WSDL4JWrapper.java (original)
+++ webservices/axis2/trunk/java/modules/metadata/src/org/apache/axis2/jaxws/util/WSDL4JWrapper.java Thu Apr 10 09:13:06 2008
@@ -370,11 +370,17 @@
 
         for (URL url : urlList) {
             if ("file".equals(url.getProtocol())) {
-                File f = new File(url.getPath());
+                final File f = new File(url.getPath());
                 // If file is not of type directory then its a jar file
                 if (isAFile(f)) { 
                     try {
-                        JarFile jf = new JarFile(f);
+                        JarFile jf = (JarFile) AccessController.doPrivileged(
+                                new PrivilegedExceptionAction() {
+                                    public Object run() throws IOException {
+                                        return new JarFile(f);
+                                    }
+                                }
+                        );
                         Enumeration<JarEntry> entries = jf.entries();
                         // read all entries in jar file and return the first
                         // wsdl file that matches



---------------------------------------------------------------------
To unsubscribe, e-mail: axis-cvs-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-cvs-help@ws.apache.org