You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2013/10/21 18:30:04 UTC

[Bug 55684] New: WebappClassLoader.getThread want an access to root ThreadGroup

https://issues.apache.org/bugzilla/show_bug.cgi?id=55684

            Bug ID: 55684
           Summary: WebappClassLoader.getThread want an access to root
                    ThreadGroup
           Product: Tomcat 7
           Version: 7.0.42
          Hardware: PC
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Catalina
          Assignee: dev@tomcat.apache.org
          Reporter: gael.lalire@laposte.net

Tomcat may not have all permissions granted.
The method WebappClassLoader.getThread try to access the root ThreadGroup in
order to list all threads.
You should either manage SecurityException or avoid to access the parent
ThreadGroup of the thread which start Tomcat.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 55684] WebappClassLoader.getThread want an access to root ThreadGroup

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=55684

--- Comment #4 from Gael Lalire <ga...@laposte.net> ---
A clean solution could be to have the possibility to set the root thread group
in  WebappClassLoader.
So WebappClassLoader.getThread() can avoid to loop inside parent thread group
while not null.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 55684] WebappClassLoader.getThread want an access to root ThreadGroup

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=55684

Mark Thomas <ma...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #5 from Mark Thomas <ma...@apache.org> ---
Fixed in trunk for 8.0.0-RC6 and 7.0.x for 7.0.48.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 55684] WebappClassLoader.getThread want an access to root ThreadGroup

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=55684

Gael Lalire <ga...@laposte.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEEDINFO                    |NEW

--- Comment #3 from Gael Lalire <ga...@laposte.net> ---
Hello,

I run tomcat and other applications under the same JVM.
Each application has a thread group and cannot access to thread group of other
application.
This is enforce by a modified SecurityManager.

I know I can authorize Tomcat to access all thread group (I do it in fact)
however I would like to remove this permission.

Stacktrace just show my SecurityManager throwing a SecurityException to
ThreadGroup.getParent().
Javadoc of ThreadGroup.getParent() indicates that a SecurityException can be
thrown.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 55684] WebappClassLoader.getThread want an access to root ThreadGroup

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=55684

--- Comment #2 from Mark Thomas <ma...@apache.org> ---
Tomcat is designed to work out of the box under a security manager. Calls to
this particular code either originate from container code that has the
necessary permissions or come via a appropriate PrivilegedAction code block.

If you change Tomcat's default security permissions then that is likely to
break something.

Without a stack trace, this is going to get resolved as invalid.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 55684] WebappClassLoader.getThread want an access to root ThreadGroup

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=55684

Christopher Schultz <ch...@christopherschultz.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |NEEDINFO
                 OS|                            |All

--- Comment #1 from Christopher Schultz <ch...@christopherschultz.net> ---
Stack trace?

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org