db-jdo-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Craig Russell (JIRA)" <j...@apache.org>
Subject [jira] Updated: (JDO-544) NullPointerException in JDOImplHelper if running with security manager enabled
Date Tue, 09 Oct 2007 23:44:50 GMT

     [ https://issues.apache.org/jira/browse/JDO-544?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Craig Russell updated JDO-544:
------------------------------

    Attachment: jdo-544.patch

Please review this patch. It adds a security call to the DateFormat.getDateTimeInstance call.

Two things should be different with this patch:

1. If security is enabled, and the proper permissions are set for JDOImplHelper, everything
should work as before.
2. If security is enabled, and permissions are not set for JDOImplHelper, the date formatter
should be a simple "short format" formatter.


> NullPointerException in JDOImplHelper if running with security manager enabled
> ------------------------------------------------------------------------------
>
>                 Key: JDO-544
>                 URL: https://issues.apache.org/jira/browse/JDO-544
>             Project: JDO
>          Issue Type: Bug
>          Components: api2
>            Reporter: Erik Bengtson
>            Assignee: Craig Russell
>            Priority: Minor
>         Attachments: jdo-544.patch
>
>
> --- Craig says:
> Hi Erik,
> Actually, this is a bug in JDOImplHelper. It is missing a  
> doPrivileged around calling getDateTimeInstance.
> The permissions you mention should be assigned to the JDO jar, if  
> needed at all. We need to look at the implementation here and decide  
> if getDateTimeInstance is really needed or if there is some other way  
> to get this functionality.
> Can you please file a JIRA?
> Thanks,
> Craig
> On Oct 8, 2007, at 1:25 PM, Erik Bengtson wrote:
> > An application using JDO needs the following additional permissions  
> > to run:
> >
> > 	permission java.util.PropertyPermission "user.country", "read";
> > 	permission java.util.PropertyPermission "user.timezone",
> > "read,write";
> > 	permission java.util.PropertyPermission "java.home", "read";
> >
> > Otherwise:
> >
> > Caused by: java.lang.NullPointerException
> > 	at java.security.AccessControlContext.checkPermission(Unknown
> > Source)
> > 	at java.security.AccessController.checkPermission(Unknown Source)
> > 	at java.lang.SecurityManager.checkPermission(Unknown Source)
> > 	at java.util.TimeZone.hasPermission(Unknown Source)
> > 	at java.util.TimeZone.setDefaultZone(Unknown Source)
> > 	at java.util.TimeZone.getDefaultRef(Unknown Source)
> > 	at java.util.TimeZone.getDefault(Unknown Source)
> > 	at java.text.SimpleDateFormat.initializeCalendar(Unknown Source)
> > 	at java.text.SimpleDateFormat.<init>(Unknown Source)
> > 	at java.text.DateFormat.get(Unknown Source)
> > 	at java.text.DateFormat.getDateTimeInstance(Unknown Source)
> > 	at javax.jdo.spi.JDOImplHelper.<clinit>(JDOImplHelper.java:123)
> > 	... 22 more
> >
> >
> > Is that interesting to note in the JDO SPEC?
> >
> >
> >

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message