Uploaded image for project: 'JBoss Web Services'
  1. JBoss Web Services
  2. JBWS-3953

Coverity reports possible need to use doPrivileged block for MapToBeanConverter

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • jbossws-cxf-5.1.5.Final
    • None
    • None
    • None

      Coverity reports possible need to use doPrivileged block for org.jboss.wsf.stack.cxf.client.configuration.MapToBeanConverter
      Please investigate if the doPrivileged block is needed or not

      99   protected Object newInstance(String className) throws Exception {
      CID 17469 (#1 of 1): DP: Use doPrivileged (FB.DP_CREATE_CLASSLOADER_INSIDE_DO_PRIVILEGED)1. defect: 
      org.jboss.wsf.stack.cxf.client.configuration.MapToBeanConverter.newInstance(String) 
      creates a org.jboss.ws.common.utils.DelegateClassLoader classloader, which should be performed within a doPrivileged block.
      100      ClassLoader loader = new DelegateClassLoader(ClassLoaderProvider.getDefaultProvider()
      101            .getServerIntegrationClassLoader(), SecurityActions.getContextClassLoader());
      102      Class<?> clazz = SecurityActions.loadClass(loader, className);
      103      return clazz.newInstance();
      104   }
      

            rhn-engineering-ema Jim Ma
            rsvoboda@redhat.com Rostislav Svoboda
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: