Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-16551

Security Manager failure with EE 10 jakarta.websocket.ContainerProvider.getWebSocketContainer()

    XMLWordPrintable

Details

    • ---
    • ---

    Description

      The Eclipse EE 10 version of the Websocket API is missing a doPrivileged block that the org.jboss.spec fork of the EE 8 API had, leading to this security manager failure:

      java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.io.FilePermission" "/opt/buildAgent/work/8cce844551cd382d/ee-9/dist/target/wildfly-preview-27.0.0.Alpha2-SNAPSHOT/modules/system/layers/base/io/undertow/websocket/main/undertow-websockets-jsr-2.3.0.Alpha1.jar" "read")" in code source "(vfs:/content/websocket.war/WEB-INF/classes <no signer certificates>)" of "ModuleClassLoader for Module "deployment.websocket.war" from Service Module Loader")
      	at org.wildfly.security.elytron-base//org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:309)
      	at org.wildfly.security.elytron-base//org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:201)
      	at java.base/java.lang.SecurityManager.checkRead(SecurityManager.java:661)
      	at org.wildfly.security.elytron-base//org.wildfly.security.manager.WildFlySecurityManager.checkRead(WildFlySecurityManager.java:374)
      	at java.base/java.util.zip.ZipFile.<init>(ZipFile.java:237)
      	at java.base/java.util.zip.ZipFile.<init>(ZipFile.java:177)
      	at java.base/java.util.jar.JarFile.<init>(JarFile.java:350)
      	at java.base/sun.net.www.protocol.jar.URLJarFile.<init>(URLJarFile.java:103)
      	at java.base/sun.net.www.protocol.jar.URLJarFile.getJarFile(URLJarFile.java:72)
      	at java.base/sun.net.www.protocol.jar.JarFileFactory.get(JarFileFactory.java:99)
      	at java.base/sun.net.www.protocol.jar.JarURLConnection.connect(JarURLConnection.java:125)
      	at java.base/sun.net.www.protocol.jar.JarURLConnection.getInputStream(JarURLConnection.java:155)
      	at java.base/java.util.ServiceLoader$LazyClassPathLookupIterator.parse(ServiceLoader.java:1165)
      	at java.base/java.util.ServiceLoader$LazyClassPathLookupIterator.nextProviderClass(ServiceLoader.java:1206)
      	at java.base/java.util.ServiceLoader$LazyClassPathLookupIterator.hasNextService(ServiceLoader.java:1221)
      	at java.base/java.util.ServiceLoader$LazyClassPathLookupIterator$1.run(ServiceLoader.java:1268)
      	at java.base/java.util.ServiceLoader$LazyClassPathLookupIterator$1.run(ServiceLoader.java:1267)
      	at java.base/java.security.AccessController.doPrivileged(Native Method)
      	at java.base/java.util.ServiceLoader$LazyClassPathLookupIterator.hasNext(ServiceLoader.java:1270)
      	at java.base/java.util.ServiceLoader$2.hasNext(ServiceLoader.java:1300)
      	at java.base/java.util.ServiceLoader$3.hasNext(ServiceLoader.java:1385)
      	at jakarta.websocket.api@2.1.0//jakarta.websocket.ContainerProvider.getWebSocketContainer(ContainerProvider.java:49)
      	at deployment.websocket.war//org.jboss.as.test.integration.ee.injection.support.websocket.WebSocketInjectionSupportTestCase.testWebSocketInjectionAndInterception(WebSocketInjectionSupportTestCase.java:82)
      

      Attachments

        Issue Links

          Activity

            People

              ropalka Richard Opalka
              bstansbe@redhat.com Brian Stansberry
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: