[prev in list] [next in list] [prev in thread] [next in thread] 

List:       tomcat-dev
Subject:    DO NOT REPLY [Bug 41509]  New:  - Jasper tries to add permissions to readonly PermissionCollection
From:       bugzilla () apache ! org
Date:       2007-01-31 13:49:22
Message-ID: bug-41509-78 () http ! issues ! apache ! org/bugzilla/
[Download RAW message or body]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=41509>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=41509

           Summary: Jasper tries to add permissions to readonly
                    PermissionCollection
           Product: Tomcat 6
           Version: unspecified
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: minor
          Priority: P2
         Component: Jasper
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: valder@yandex.ru


Javadoc: 
http://java.sun.com/javase/6/docs/api/java/security/Policy.html#getPermissions
(java.security.CodeSource)
Policy Javadoc says that method getPermissions(java.security.CodeSource) is 
optional and policies do not have to implement it. At least nobody said that 
returned collection will be editable. So to avoid exceptions a possible 
solution is to check whether permissions can be added before trying to do that.

Stacktrace:
java.lang.SecurityException: attempt to add a Permission to a readonly 
Permissions object
	at java.security.Permissions.add(Permissions.java:110)
	at java.security.Policy$UnsupportedEmptyCollection.add(Policy.java:790)
	at org.apache.jasper.compiler.JspRuntimeContext.initSecurity
(JspRuntimeContext.java:487)
	at org.apache.jasper.compiler.JspRuntimeContext.<init>
(JspRuntimeContext.java:142)
	at org.apache.jasper.servlet.JspServlet.init(JspServlet.java:121)

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

[prev in list] [next in list] [prev in thread] [next in thread]