[XALANJ-2436] Xalan must not expose bundled classes (bcel, regexp)

• Type: Bug
• Status: Open
• Priority: Critical
• Resolution: Unresolved
• Affects Version/s: 2.7.1
• Component/s: Xalan
• Environment: any
• Assignee: Joseph Kessselman
• Reporter: Holger Hoffstätte
• Created: 03/Mar/08 14:35
• Updated: 28/Mar/24 03:56

Description

I just spent the better part of half a day figuring out what caused the problem outlined in https://sourceforge.net/tracker/?func=detail&atid=614693&aid=1902137&group_id=96405.

Xalan bundles regexp and bcel, however since one of the recommened ways of installing xalan is via the endorsed mechanism this will wreak serious havoc on any other apps that use bcel. That would be less of a problem is xalan's version were up to date, but as of 2.7.1 it still includes a version from the early stone age (see XALANJ-2423). The solution is easy: when building the aggregate jar, add an ant task to rewrite the bundled packages via jarjar (http://code.google.com/p/jarjar/). This can be trivially added to the build and creates a completely self-contained xalan jar that will not blow up the world when endorsed.

I will attach a trivial rule file for jarjar that rewrites the embedded packages which should immediately fix any collision problems. For more information about how to use jarjar, see http://code.google.com/p/jarjar/wiki/GettingStarted

Issue Links

• relates to: XALANJ-2423 Use current version of BCEL: 5.2