This Bugzilla instance is a read-only archive of historic NetBeans bug reports. To report a bug in NetBeans please follow the project's instructions for reporting issues.

Bug 148705

Summary: SecurityException: Prohibited package name: java
Product: javaee Reporter: Martin Fousek <marfous>
Component: CodeAssignee: Vadiraj Deshpande <vadirajvd>
Status: RESOLVED FIXED    
Severity: blocker CC: emononen
Priority: P3    
Version: 6.x   
Hardware: All   
OS: All   
URL: http://statistics.netbeans.org/exceptions/detail.do?id=120658
Issue Type: DEFECT Exception Reporter: 120658
Attachments: stacktrace
Proposed patch.
Incorporated Erno's comments.

Description Martin Fousek 2008-09-30 08:23:39 UTC
Build: NetBeans IDE Dev (Build 200809300201)
VM: Java HotSpot(TM) Client VM, 11.0-b13, Java(TM) SE Runtime Environment, 1.6.0_10-rc-b26
OS: Linux, 2.6.24-19-generic, i386

User Comments:
marfous: 1, I create a new web app with hybernate
2, use reverse eng. from the database
3, type into package "java"
4, there is no error message
5, then invoke HQL Query and type and run some query 
-> exception appears



Stacktrace: 
java.lang.SecurityException: Prohibited package name: java
        at java.lang.ClassLoader.preDefineClass(ClassLoader.java:480)
        at java.lang.ClassLoader.defineClass(ClassLoader.java:615)
        at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:124)
        at java.net.URLClassLoader.defineClass(URLClassLoader.java:260)
        at java.net.URLClassLoader.access$000(URLClassLoader.java:56)
        at java.net.URLClassLoader$1.run(URLClassLoader.java:195)
Comment 1 Martin Fousek 2008-09-30 08:23:47 UTC
Created attachment 70871 [details]
stacktrace
Comment 2 Vadiraj Deshpande 2008-11-18 10:43:02 UTC
Will be taken up in 7.0.
Comment 3 Vadiraj Deshpande 2008-12-04 07:06:59 UTC
This issue belongs to j2ee.core.utilities module, since Hibernate module is using the API provided by that module. 
The API has this bug. 
According to Java Language specification, 
http://java.sun.com/docs/books/jls/third_edition/html/names.html#73307
'java' is a reserved package names for JDK itself and hence cannot be used for other applications.
Comment 4 Vadiraj Deshpande 2008-12-04 07:10:15 UTC
Created attachment 74509 [details]
Proposed patch.
Comment 5 Vadiraj Deshpande 2008-12-04 11:09:37 UTC
Moving to j2ee>code (I guess this is the issuezilla component/subcomponent for j2ee.core.utilities mercurial module)

Please could somebody review the attached patch for this issue ?
Comment 6 Vadiraj Deshpande 2008-12-08 09:47:48 UTC
Comments from Erno :

Hi Vadiraj,
You might want to check for exact string 'java'.. and for 'java.something'..
Please update the unit tests.
-Erno.
Comment 7 Vadiraj Deshpande 2008-12-08 09:48:40 UTC
Created attachment 74680 [details]
Incorporated Erno's comments.
Comment 8 Vadiraj Deshpande 2008-12-08 10:09:07 UTC
Erno says : LGTM..

Comment 9 Vadiraj Deshpande 2008-12-08 10:09:35 UTC
Fixed :
http://hg.netbeans.org/main/rev/02721f75580d