[ARIES-2021] SPI Fly thread context class loader swapping fails on multiple interceptions in thread stack

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: spifly-1.3.0, spifly-1.3.1, spifly-1.3.2
• Component/s: SPI Fly
• Assignee: Unassigned
• Reporter: Domagoj Cosic
• Created: 18/Nov/20 10:40
• Updated: 26/Jun/21 14:37

Description

In the Util class, exactly one thread context class loader can be stored per thread (stack). It works if there is only one method intercepted per thread stack. If the intercepted method leads to code that itself leads to another call into SPI Fly, this happens again and overwrites the stored context class loader.

While this scenario is unusual, it can happen in rare cases and it is a potentially dangerous flaw. The implementation should not store only one value per thread but a LiFo stack, a DeQueue.