markt       2004/07/25 14:01:39

  Modified:    jasper2/src/share/org/apache/jasper/servlet Tag:
                        tomcat_4_branch JasperLoader.java
  Log:
  Fix bug 30306. Port Jan's security manager patch from TC5 branch (1.4 -> 1.5).
  Only ported changes related to this bug.
  
  Revision  Changes    Path
  No                   revision
  No                   revision
  1.3.2.3   +3 -3      
jakarta-tomcat-jasper/jasper2/src/share/org/apache/jasper/servlet/JasperLoader.java
  
  Index: JasperLoader.java
  ===================================================================
  RCS file: 
/home/cvs/jakarta-tomcat-jasper/jasper2/src/share/org/apache/jasper/servlet/JasperLoader.java,v
  retrieving revision 1.3.2.2
  retrieving revision 1.3.2.3
  diff -u -r1.3.2.2 -r1.3.2.3
  --- JasperLoader.java 25 Jul 2004 20:50:21 -0000      1.3.2.2
  +++ JasperLoader.java 25 Jul 2004 21:01:38 -0000      1.3.2.3
  @@ -166,7 +166,7 @@
                             
           // (.5) Permission to access this class when using a SecurityManager
           int dot = name.lastIndexOf('.');
  -        if (System.getSecurityManager() != null) {     
  +        if (securityManager != null) {     
               if (dot >= 0) {                
                   try {                    
                       securityManager.checkPackageAccess(name.substring(0,dot));
  @@ -182,7 +182,7 @@
           // Class is in a package, delegate to thread context class loader
           if( !name.startsWith(Constants.JSP_PACKAGE_NAME) ) {
               ClassLoader classLoader = null;
  -            if (System.getSecurityManager() != null) {
  +            if (securityManager != null) {
                    classLoader = 
(ClassLoader)AccessController.doPrivileged(privLoadClass);
               } else {
                   classLoader = Thread.currentThread().getContextClassLoader();
  @@ -200,7 +200,7 @@
               byte [] cdata = loadClassDataFromFile(classFile);
               if( cdata == null )
                   throw new ClassNotFoundException(name);
  -            if( System.getSecurityManager() != null ) {
  +            if( securityManager != null ) {
                   ProtectionDomain pd = new ProtectionDomain(
                           codeSource,permissionCollection);
                   clazz = defineClass(name,cdata,0,cdata.length,pd);
  
  
  

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to