You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@tomee.apache.org by "Mark Eschbach (JIRA)" <ji...@apache.org> on 2010/07/28 21:43:16 UTC
[jira] Created: (OPENEJB-1312) SecurityException silently eaten,
allowing org.apache.openejb.loader.FileUtils to construct in invalid state
SecurityException silently eaten, allowing org.apache.openejb.loader.FileUtils to construct in invalid state
------------------------------------------------------------------------------------------------------------
Key: OPENEJB-1312
URL: https://issues.apache.org/jira/browse/OPENEJB-1312
Project: OpenEJB
Issue Type: Bug
Components: container system
Affects Versions: 3.1.2
Environment: Any where a security manager restricts access to the target of a FileUtils instance.
Reporter: Mark Eschbach
One line 60 a SecurityException is caught, however the exception is silenty eaten within the defined catch block ranging from lines 60 to 62 in trunk on Jul 28th, 2010. If a SecurityException does occur the object constructs in an invalid state and may result in a NullPointerException upon client usage.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (OPENEJB-1312) SecurityException silently eaten,
allowing org.apache.openejb.loader.FileUtils to construct in invalid state
Posted by "Mark Eschbach (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/OPENEJB-1312?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Mark Eschbach updated OPENEJB-1312:
-----------------------------------
Attachment: openejb-se-chain.diff
I've attached a patch which will wrap the SecurityException into an java.lang.IllegalStateException and thrown up the stack. The patch also contains a TODO note so someone with more experience and knowledge with the component may choose a more appropriate action for the exception.
> SecurityException silently eaten, allowing org.apache.openejb.loader.FileUtils to construct in invalid state
> ------------------------------------------------------------------------------------------------------------
>
> Key: OPENEJB-1312
> URL: https://issues.apache.org/jira/browse/OPENEJB-1312
> Project: OpenEJB
> Issue Type: Bug
> Components: container system
> Affects Versions: 3.1.2
> Environment: Any where a security manager restricts access to the target of a FileUtils instance.
> Reporter: Mark Eschbach
> Attachments: openejb-se-chain.diff
>
>
> One line 60 a SecurityException is caught, however the exception is silenty eaten within the defined catch block ranging from lines 60 to 62 in trunk on Jul 28th, 2010. If a SecurityException does occur the object constructs in an invalid state and may result in a NullPointerException upon client usage.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.