tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Bob Jamison <rjami...@lincom-asg.com>
Subject TC4 Q : Sandbox problem?
Date Wed, 15 Nov 2000 18:25:29 GMT
We have a project that uses xerces.jar,  and I wanted to try
to give the user some access to it via JSP.  I copied our jar to
WEB-INF/lib,   and it ran, no problem until it started encountering
NoClassDefFound errors on the XML serialization classes.

Oops!  Jasper doesn't use xerces anymore  ;-)


So I threw a copy of xerces.jar into WEB-INF/lib, and now the
class loader reports a "sealing violation."  I really can't figure this
one out, unless the class loader has been confused, and is attempting
to load its own classes out of xerces.jar, thus jumping out of its
sandbox.    That would not be cool at all, if xerces.jar is a "poison
pill,"
and cannot be used for any purpose.  I will try to run Tomcat in verbose
mode,
to watch the class loader at work, and I'll send it in if anyone wants
it.


Has anyone encountered this?  I have already checked all of the docs
to try to make sure I haven't sent a stupid message,  which I probably
have done anyway.  :)



Bob Jamison
LinCom Corp








Ignore the following, if you are the type that detests stack dumps!





Exception Report:

javax.servlet.ServletException: sealing violation
        at
org.apache.jasper.runtime.PageContextImpl.handlePageException(PageContextImpl.java:464)

        at
_0002fusernew_0002ejspusernew_jsp_0._jspService(_0002fusernew_0002ejspusernew_jsp_0.java:151)

        at
org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:119)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
        at
org.apache.jasper.servlet.JspServlet$JspServletWrapper.service(JspServlet.java:181)

        at
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:314)

        at
org.apache.jasper.servlet.JspServlet.service(JspServlet.java:393)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)

        at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:251)

        at
org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:977)
        at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:177)

        at
org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:977)
        at
org.apache.catalina.core.StandardContext.invoke(StandardContext.java:1917)

        at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:161)

        at
org.apache.catalina.valves.ValveBase.invokeNext(ValveBase.java:242)
        at
org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:343)

        at
org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:975)
        at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:159)

        at
org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:977)
        at
org.apache.catalina.connector.http.HttpProcessor.process(HttpProcessor.java:785)

        at
org.apache.catalina.connector.http.HttpProcessor.run(HttpProcessor.java:902)

        at java.lang.Thread.run(Thread.java:484)

Root Cause:

java.lang.SecurityException: sealing violation
        at java.net.URLClassLoader.defineClass(URLClassLoader.java:234)
        at java.net.URLClassLoader.access$100(URLClassLoader.java:56)
        at java.net.URLClassLoader$1.run(URLClassLoader.java:195)
        at java.security.AccessController.doPrivileged(Native Method)
        at java.net.URLClassLoader.findClass(URLClassLoader.java:188)
        at
org.apache.catalina.loader.StandardClassLoader.findClass(StandardClassLoader.java:648)

        at
org.apache.catalina.loader.StandardClassLoader.loadClass(StandardClassLoader.java:987)

        at
org.apache.catalina.loader.StandardClassLoader.loadClass(StandardClassLoader.java:906)

        at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:313)

        at java.lang.ClassLoader.defineClass0(Native Method)
        at java.lang.ClassLoader.defineClass(ClassLoader.java:486)
        at
java.security.SecureClassLoader.defineClass(SecureClassLoader.java:111)
        at java.net.URLClassLoader.defineClass(URLClassLoader.java:248)
        at java.net.URLClassLoader.access$100(URLClassLoader.java:56)
        at java.net.URLClassLoader$1.run(URLClassLoader.java:195)
        at java.security.AccessController.doPrivileged(Native Method)
        at java.net.URLClassLoader.findClass(URLClassLoader.java:188)
        at
org.apache.catalina.loader.StandardClassLoader.findClass(StandardClassLoader.java:648)

        at
org.apache.catalina.loader.StandardClassLoader.loadClass(StandardClassLoader.java:987)

        at
org.apache.catalina.loader.StandardClassLoader.loadClass(StandardClassLoader.java:906)

        at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:313)

        at
_0002fusernew_0002ejspusernew_jsp_0._jspService(_0002fusernew_0002ejspusernew_jsp_0.java:102)

        at
org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:119)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
        at
org.apache.jasper.servlet.JspServlet$JspServletWrapper.service(JspServlet.java:181)

        at
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:314)

        at
org.apache.jasper.servlet.JspServlet.service(JspServlet.java:393)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)

        at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:251)

        at
org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:977)
        at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:177)

        at
org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:977)
        at
org.apache.catalina.core.StandardContext.invoke(StandardContext.java:1917)

        at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:161)

        at
org.apache.catalina.valves.ValveBase.invokeNext(ValveBase.java:242)
        at
org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:343)

        at
org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:975)
        at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:159)

        at
org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:977)
        at
org.apache.catalina.connector.http.HttpProcessor.process(HttpProcessor.java:785)

        at
org.apache.catalina.connector.http.HttpProcessor.run(HttpProcessor.java:902)

        at java.lang.Thread.run(Thread.java:484)


Mime
View raw message