Uploaded image for project: 'JBoss Enterprise Spec APIs'
  1. JBoss Enterprise Spec APIs
  2. JBEE-156

Missing privileged action in org.jboss.com.sun.corba.se.impl.util.Utility

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • None
    • None
    • jboss-rmi-api
    • None
    • Low

    Description

      org.jboss.com.sun.corba.se.impl.util.Utility#loadStub(org.omg.CORBA.Object, java.lang.Class<?>)

      This method has the following method:

          /*
           * Load an RMI-IIOP Stub. This is used in PortableRemoteObject.narrow.
           */
          public static Object loadStub(org.omg.CORBA.Object narrowFrom, Class<?> narrowTo)
          {
              Object result = null;
      
              try
              {
                  // Get the codebase from the delegate to use when loading the new stub, if possible...
                  String codebase = null;
                  try
                  {
                      // We can't assume that narrowFrom is a CORBA_2_3 stub, yet it may have a 2_3 Delegate that provides a
                      // codebase. Swallow the ClassCastException otherwise.
                      Delegate delegate = StubAdapter.getDelegate(narrowFrom);
                      codebase = ((org.omg.CORBA_2_3.portable.Delegate) delegate).get_codebase(narrowFrom);
      
                  }
                  catch (ClassCastException e)
                  {
                      throw wrapper.classCastExceptionInLoadStub(e);
                  }
      
                  PresentationManager.StubFactoryFactory sff = org.jboss.com.sun.corba.se.spi.orb.ORB.getStubFactoryFactory();
                  PresentationManager.StubFactory sf = sff.createStubFactory(narrowTo.getName(), false, codebase, narrowTo,
                          narrowTo.getClassLoader());
                  result = sf.makeStub();
                  StubAdapter.setDelegate(result, StubAdapter.getDelegate(narrowFrom));
              }
              catch (Exception err)
              {
                  throw wrapper.exceptionInLoadStub(err);
              }
      
              return result;
          }
      

      The narrowTo.getClassLoader() should be made privileged.

      Problem found in jboss-rmi-api_1.0_spec-1.0.4.Final; no version seems to exist for this release.

      Attachments

        Issue Links

          Activity

            People

              smcgowan@redhat.com Shelly McGowan (Inactive)
              dlloyd@redhat.com David Lloyd
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: