Bug 1126489 – [GSS] (6.4.0) Marshalling fails on objects that require permissions in their readObject

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1126489 - [GSS] (6.4.0) Marshalling fails on objects that require permissions in their readObject

Summary:	[GSS] (6.4.0) Marshalling fails on objects that require permissions in their ...

Status:	VERIFIED

Aliases:	None

Product:	JBoss Enterprise Application Platform 6
Classification:	JBoss
Component:	Remoting (Show other bugs)
Sub Component:
Version:	6.3.0
Hardware:	Unspecified Unspecified

Priority	unspecified Severity unspecified
Target Milestone:	DR1
Target Release:	EAP 6.4.0
Assigned To:	Brad Maxwell
QA Contact:	Jitka Kozana
Docs Contact:

URL:
Whiteboard:
Keywords:

Depends On:
Blocks:	1122329 1126528
	Show dependency tree / graph

Reported:	2014-08-04 10:32 EDT by Brad Maxwell
Modified:	2018-03-06 15:57 EST (History)
CC List:	2 users (show)

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:	With the Java Security manager enabled, the java.security.AccessControlException was thrown when a java.util.Calendar object was passed as an argument or response from an EJB method, even with a java security policy that provides the necessary permissions. This issue has been fixed in this release. The exception is no longer thrown and the marshalling and EJB call succeed.
Story Points:	---
Clone Of:
Clones:	1126528 (view as bug list)
Environment:
Last Closed:
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
JBoss Issue Tracker	JBMAR-165	Major	Resolved	Marshalling fails on objects that require permissions in their readObject	2017-08-07 11:46 EDT

Groups: None (edit)

Description Brad Maxwell 2014-08-04 10:32:47 EDT

The JRE java.util.Calendar object in its readObject requires the permission accessClassInPackage.sun.util.calendar which causes Marshalling to fail.

http://bugs.java.com/bugdatabase/view_bug.do?bug_id=4921945

java.security.AccessControlException: access denied ("java.io.SerializablePermission" "enableSubclassImplementation")
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:372) [rt.jar:1.7.0_51]
at java.security.AccessController.checkPermission(AccessController.java:559) [rt.jar:1.7.0_51]
at java.lang.SecurityManager.checkPermission(SecurityManager.java:549) [rt.jar:1.7.0_51]
at java.io.ObjectInputStream.<init>(ObjectInputStream.java:322) [rt.jar:1.7.0_51]
at org.jboss.marshalling.MarshallerObjectInputStream.<init>(MarshallerObjectInputStream.java:49)
at org.jboss.marshalling.cloner.SerializingCloner$StepObjectInputStream.<init>(SerializingCloner.java:583)
at org.jboss.marshalling.cloner.SerializingCloner.initSerializableClone(SerializingCloner.java:307)

Comment 1 JBoss JIRA Server 2014-08-04 12:04:46 EDT

David Lloyd <david.lloyd@redhat.com> updated the status of jira JBMAR-165 to Resolved

Comment 3 Kabir Khan 2014-08-26 16:20:42 EDT

Should be fixed by remoting upgrade to 1.4.8 https://bugzilla.redhat.com/show_bug.cgi?id=1122329

Comment 4 Ladislav Thon 2014-09-26 03:47:50 EDT

Verified with EAP 6.4.0.DR2.

Note You need to log in before you can comment on or make changes to this bug.