Uploaded image for project: 'OpenWebBeans'
  1. OpenWebBeans
  2. OWB-477

Two instances of using ObjectInputStream that may not have visibility into application classloader

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 1.0.0
    • Fix Version/s: 1.1.0, 1.1.9
    • Component/s: Core
    • Labels:
      None

      Description

      This is basically the same issue as the previously opened OWB-464. Both InstanceImpl and EventImpl use an ObjectInputStream that will not have visibility into Application classes in a tiered classloading environment.

      Will tentatively fix this the same way, by adding an extra layer of ObjectInputStream wrapping with a customer OIS that has the overwritten resolveClass method.

        Attachments

          Activity

            People

            • Assignee:
              bergmark Joseph E Bergmark
              Reporter:
              bergmark Joseph E Bergmark
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: