-
Bug
-
Resolution: Cannot Reproduce
-
P3
-
None
-
8u91
FULL PRODUCT VERSION :
java version "1.8.0_91"
Java(TM) SE Runtime Environment (build 1.8.0_91-b14)
Java HotSpot(TM) 64-Bit Server VM (build 25.91-b14, mixed mode)
ADDITIONAL OS VERSION INFORMATION :
Windows 7
Linux 64
...
A DESCRIPTION OF THE PROBLEM :
Since version 8.1.91 is reported in the download, the part of the libraries are not signed. This happens when log4j. I tried the current 1.2.17 and the older version in 2006. With both an error message Security Excepiton. With version 8.1.77, the whole works yet.
REGRESSION. Last worked in version 8u91
STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
Use log4j in webstart Application
ERROR MESSAGES/STACK TRACES THAT OCCUR :
java.lang.SecurityException: class "org.apache.log4j.helpers.PatternParser$LiteralPatternConverter" does not match trust level of other classes in the same package
at com.sun.deploy.security.CPCallbackHandler$ChildElement.checkResource(Unknown Source)
at com.sun.deploy.security.DeployURLClassPath$JarLoader.checkResource(Unknown Source)
at com.sun.deploy.security.DeployURLClassPath$JarLoader.getResource(Unknown Source)
at com.sun.deploy.security.DeployURLClassPath.getResource(Unknown Source)
at java.net.URLClassLoader$1.run(URLClassLoader.java:365)
at java.net.URLClassLoader$1.run(URLClassLoader.java:362)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:361)
at com.sun.jnlp.JNLPClassLoader.findClass(Unknown Source)
at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
at com.sun.jnlp.JNLPClassLoader.loadClass(Unknown Source)
at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
at org.apache.log4j.PatternLayout.createPatternParser(PatternLayout.java:488)
at org.apache.log4j.PatternLayout.<init>(PatternLayout.java:438)
at org.apache.log4j.PatternLayout.<init>(PatternLayout.java:430)
at de.tmg.dezent2.common.webstart.Webstart.initLog4jDaily(Webstart.java:1517)
at de.tmg.dezent2.common.webstart.Webstart.<init>(Webstart.java:173)
at de.tmg.dezent2.common.webstart.Webstart.main(Webstart.java:1085)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at com.sun.javaws.Launcher.executeApplication(Unknown Source)
at com.sun.javaws.Launcher.executeMainClass(Unknown Source)
at com.sun.javaws.Launcher.doLaunchApp(Unknown Source)
at com.sun.javaws.Launcher.run(Unknown Source)
at java.lang.Thread.run(Thread.java:745)
REPRODUCIBILITY :
This bug can be reproduced always.
---------- BEGIN SOURCE ----------
import org.apache.log4j.PatternLayout;
PatternLayout layout = new PatternLayout();
---------- END SOURCE ----------
java version "1.8.0_91"
Java(TM) SE Runtime Environment (build 1.8.0_91-b14)
Java HotSpot(TM) 64-Bit Server VM (build 25.91-b14, mixed mode)
ADDITIONAL OS VERSION INFORMATION :
Windows 7
Linux 64
...
A DESCRIPTION OF THE PROBLEM :
Since version 8.1.91 is reported in the download, the part of the libraries are not signed. This happens when log4j. I tried the current 1.2.17 and the older version in 2006. With both an error message Security Excepiton. With version 8.1.77, the whole works yet.
REGRESSION. Last worked in version 8u91
STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
Use log4j in webstart Application
ERROR MESSAGES/STACK TRACES THAT OCCUR :
java.lang.SecurityException: class "org.apache.log4j.helpers.PatternParser$LiteralPatternConverter" does not match trust level of other classes in the same package
at com.sun.deploy.security.CPCallbackHandler$ChildElement.checkResource(Unknown Source)
at com.sun.deploy.security.DeployURLClassPath$JarLoader.checkResource(Unknown Source)
at com.sun.deploy.security.DeployURLClassPath$JarLoader.getResource(Unknown Source)
at com.sun.deploy.security.DeployURLClassPath.getResource(Unknown Source)
at java.net.URLClassLoader$1.run(URLClassLoader.java:365)
at java.net.URLClassLoader$1.run(URLClassLoader.java:362)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:361)
at com.sun.jnlp.JNLPClassLoader.findClass(Unknown Source)
at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
at com.sun.jnlp.JNLPClassLoader.loadClass(Unknown Source)
at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
at org.apache.log4j.PatternLayout.createPatternParser(PatternLayout.java:488)
at org.apache.log4j.PatternLayout.<init>(PatternLayout.java:438)
at org.apache.log4j.PatternLayout.<init>(PatternLayout.java:430)
at de.tmg.dezent2.common.webstart.Webstart.initLog4jDaily(Webstart.java:1517)
at de.tmg.dezent2.common.webstart.Webstart.<init>(Webstart.java:173)
at de.tmg.dezent2.common.webstart.Webstart.main(Webstart.java:1085)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at com.sun.javaws.Launcher.executeApplication(Unknown Source)
at com.sun.javaws.Launcher.executeMainClass(Unknown Source)
at com.sun.javaws.Launcher.doLaunchApp(Unknown Source)
at com.sun.javaws.Launcher.run(Unknown Source)
at java.lang.Thread.run(Thread.java:745)
REPRODUCIBILITY :
This bug can be reproduced always.
---------- BEGIN SOURCE ----------
import org.apache.log4j.PatternLayout;
PatternLayout layout = new PatternLayout();
---------- END SOURCE ----------
- relates to
-
JDK-8155901 Erroneous SecurityException in web start in Java 1.8.0_91
-
- Closed
-