You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2014/11/17 21:40:19 UTC

[Bug 57232] New: Sealed .jar files in WEB-INF/lib always fail to load second class

https://issues.apache.org/bugzilla/show_bug.cgi?id=57232

            Bug ID: 57232
           Summary: Sealed .jar files in WEB-INF/lib always fail to load
                    second class
           Product: Tomcat 8
           Version: 8.0.15
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Catalina
          Assignee: dev@tomcat.apache.org
          Reporter: brent.shikoski@gmail.com

Created attachment 32211
  --> https://issues.apache.org/bugzilla/attachment.cgi?id=32211&action=edit
Run with security manager enabled.

Sealed .jar files in WEB-INF/lib always fail to load second class.

This looks like a re-introduction (in v8) of this bug:
https://issues.apache.org/bugzilla/show_bug.cgi?id=8611

Problem exists in the org.apache.catalina.loader.WebappClassLoaderBase class.
ResourceEntry.codeBase needs to be changed to the jar file.

Such as changing:

jar:file:/tomcat-8.0.15/webapps/test/WEB-INF/lib/support.jar!/org/xxample/support/web/ConfigurationManager.class 

to 

file:/tomcat-8.0.15/webapps/test/WEB-INF/lib/support.jar


I've attached a war that demonstrates the problem. Run with the security
manager enabled.

Comparing org.apache.catalina.loader.WebappClassLoader revision 288016 with
287606 shows the change made for Bug 8611.

Problem probably also exists in v9, but I have not tested.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 57232] Sealed .jar files in WEB-INF/lib always fail to load second class

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=57232

Brent Shikoski <br...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |INVALID

--- Comment #1 from Brent Shikoski <br...@gmail.com> ---
Sorry, my mistake this was fixed in 8.0.15. Fixed for
https://issues.apache.org/bugzilla/show_bug.cgi?id=57038

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org