[NIFI-9861] Stateless ClassLoader isolation does not work on Java 11

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.17.0, 1.16.1
• Assignee: Mark Payne
• Reporter: Peter Turcsanyi
• Created: 01/Apr/22 15:29
• Updated: 24/Aug/22 14:50
• Resolved: 20/Apr/22 20:53

Description

Stateless ClassLoader isolation implementation (NIFI-9576) expects that the system class loader is an URLClassLoader instance but it is not true for Java 11. Due to this, BlockListClassLoader gets initialized with an empty set of classes and it cannot block anything (there is no isolation, otherwise it works on Java 11 as before NIFI-9576)
https://github.com/apache/nifi/blob/7fde2bbfd1afdd6037765340eca9fc675542323e/nifi-stateless/nifi-stateless-bootstrap/src/main/java/org/apache/nifi/stateless/bootstrap/StatelessBootstrap.java#L150-L153

Issue Links

• is related to: NIFI-10375 Stateless NiFi requires JDK to run on Java 9+. It shouldn't.
• relates to: NIFI-9576 ClassLoader isolation for Stateless NiFi
• links to: GitHub Pull Request #5925
• links to: GitHub Pull Request #5925