[SUREFIRE-2069] Utf8RecodingDeferredFileOutputStream write doesn't protect caller from privileged action

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: Maven Surefire Plugin
• Assignee: Unassigned
• Reporter: Tom Watson
• Created: 11/Apr/22 14:25
• Updated: 11/Apr/22 14:25

Description

See https://github.com/eclipse-equinox/equinox.framework/issues/32

We see the following exception:

Caused by: java.lang.SecurityException: Unable to create temporary file or directory
at java.base/java.nio.file.TempFileHelper.create(TempFileHelper.java:142)
at java.base/java.nio.file.TempFileHelper.createTempFile(TempFileHelper.java:160)
at java.base/java.nio.file.Files.createTempFile(Files.java:912)
at org.apache.maven.plugin.surefire.report.Utf8RecodingDeferredFileOutputStream.write(Utf8RecodingDeferredFileOutputStream.java:69)
at org.apache.maven.plugin.surefire.report.TestSetRunListener.writeTestOutput(TestSetRunListener.java:180)
at org.apache.maven.plugin.surefire.report.TestSetRunListener.writeTestOutput(TestSetRunListener.java:49)
at org.apache.maven.surefire.junitplatform.RunListenerAdapter.writeTestOutput(RunListenerAdapter.java:379)
at org.apache.maven.surefire.api.report.ConsoleOutputCapture$ForwardingPrintStream.println(ConsoleOutputCapture.java:138)
at security.b.Activator.start(Activator.java:28)

Where the class security.b.Activator doesn't have permission to create files in the directory there.