jackrabbit-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Lukas Eder (JIRA)" <j...@apache.org>
Subject [jira] [Created] (JCR-3536) The SessionImpl constructor passes an incompletely initialised "this" reference to the JackrabbitSecurityManager
Date Wed, 20 Mar 2013 11:55:15 GMT
Lukas Eder created JCR-3536:
-------------------------------

             Summary: The SessionImpl constructor passes an incompletely initialised "this"
reference to the JackrabbitSecurityManager
                 Key: JCR-3536
                 URL: https://issues.apache.org/jira/browse/JCR-3536
             Project: Jackrabbit Content Repository
          Issue Type: Bug
          Components: jackrabbit-core
    Affects Versions: 2.6
            Reporter: Lukas Eder
            Priority: Minor


The following call trace can be observed from the org.apache.jackrabbit.core.SessionImpl constructor:

1. SessionImpl<init>()
2. SessionImpl.createAccessManager(Subject)
3. SecurityManager.getAccessManager(Session, AMContext)

In step 3, the incompletely initialised "this" reference is passed to the SecurityManager,
which expects a completely initialised Session.

While this probably doesn't cause any issues in the current Jackrabbit implementation, it
may in the future, or in custom implementations of the JackrabbitSecurityManager

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message