Bug 148705 – SecurityException: Prohibited package name: java

HOME \ Community

Bug 148705 - SecurityException: Prohibited package name: java

Summary:

SecurityException: Prohibited package name: java

Status:	RESOLVED FIXED

Product:	javaee
Component:	Code
Version:	6.5
Platform:	All All

Priority:	P3 (vote)
Target Milestone:	6.7
Assigned To:	Vadiraj Deshpande
QA Contact:	issues@javaee

URL:	http://statistics.netbeans.org/except...
Whiteboard:	EXCEPTIONS_REPORT
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2008-09-30 08:23 by Martin Fousek
Modified:	2009-02-20 17:17 (History)

Issue Type:	DEFECT
Exception Reporter :

Attachments
stacktrace (1.50 KB, text/plain) 2008-09-30 08:23, Martin Fousek	Details
Proposed patch. (812 bytes, text/plain) 2008-12-04 07:10, Vadiraj Deshpande	Details
Incorporated Erno's comments. (1.66 KB, text/plain) 2008-12-08 09:48, Vadiraj Deshpande	Details
Add an attachment (proposed patch, testcase, etc.)

Note

You need to log in before you can comment on or make changes to this bug.

Description From Martin Fousek 2008-09-30 08:23:39

Build: NetBeans IDE Dev (Build 200809300201)
VM: Java HotSpot(TM) Client VM, 11.0-b13, Java(TM) SE Runtime Environment,
1.6.0_10-rc-b26
OS: Linux, 2.6.24-19-generic, i386

User Comments:
marfous: 1, I create a new web app with hybernate
2, use reverse eng. from the database
3, type into package "java"
4, there is no error message
5, then invoke HQL Query and type and run some query 
-> exception appears



Stacktrace: 
java.lang.SecurityException: Prohibited package name: java
        at java.lang.ClassLoader.preDefineClass(ClassLoader.java:480)
        at java.lang.ClassLoader.defineClass(ClassLoader.java:615)
        at
java.security.SecureClassLoader.defineClass(SecureClassLoader.java:124)
        at java.net.URLClassLoader.defineClass(URLClassLoader.java:260)
        at java.net.URLClassLoader.access$000(URLClassLoader.java:56)
        at java.net.URLClassLoader$1.run(URLClassLoader.java:195)

------- Comment #1 From Martin Fousek 2008-09-30 08:23:47 -------

Created an attachment (id=70871) [details]
stacktrace

------- Comment #2 From Vadiraj Deshpande 2008-11-18 10:43:02 -------

Will be taken up in 7.0.

------- Comment #3 From Vadiraj Deshpande 2008-12-04 07:06:59 -------

This issue belongs to j2ee.core.utilities module, since Hibernate module is
using the API provided by that module. 
The API has this bug. 
According to Java Language specification, 
http://java.sun.com/docs/books/jls/third_edition/html/names.html#73307
'java' is a reserved package names for JDK itself and hence cannot be used for
other applications.

------- Comment #4 From Vadiraj Deshpande 2008-12-04 07:10:15 -------

Created an attachment (id=74509) [details]
Proposed patch.

------- Comment #5 From Vadiraj Deshpande 2008-12-04 11:09:37 -------

Moving to j2ee>code (I guess this is the issuezilla component/subcomponent for
j2ee.core.utilities mercurial module)

Please could somebody review the attached patch for this issue ?

------- Comment #6 From Vadiraj Deshpande 2008-12-08 09:47:48 -------

Comments from Erno :

Hi Vadiraj,
You might want to check for exact string 'java'.. and for 'java.something'..
Please update the unit tests.
-Erno.

------- Comment #7 From Vadiraj Deshpande 2008-12-08 09:48:40 -------

Created an attachment (id=74680) [details]
Incorporated Erno's comments.

------- Comment #8 From Vadiraj Deshpande 2008-12-08 10:09:07 -------

Erno says : LGTM..

------- Comment #9 From Vadiraj Deshpande 2008-12-08 10:09:35 -------

Fixed :
http://hg.netbeans.org/main/rev/02721f75580d