https://bz.apache.org/bugzilla/show_bug.cgi?id=61437

            Bug ID: 61437
           Summary: 8.0.46: Websockets examples failure with
                    AccessControlException
                    "accessClassInPackage.org.apache.catalina.webresources
                    "
           Product: Tomcat 8
           Version: 8.0.x-trunk
          Hardware: PC
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Catalina
          Assignee: dev@tomcat.apache.org
          Reporter: knst.koli...@gmail.com
  Target Milestone: ----

Created attachment 35244
  --> https://bz.apache.org/bugzilla/attachment.cgi?id=35244&action=edit
logs_2017-08-17.zip

Smoke-testing examples webapp of Tomcat 8.0.46 Release Candidate

Configuration:
Java 7u80, configured connector to use NIO protocol

Steps to reproduce:
1. Start Tomcat with SecurityManager enabled
> catalina.bat start -security

2. Go to 'Examples' page, click on Websocket examples

http://localhost:8080/examples/
http://localhost:8080/examples/websocket/index.xhtml

3. Open 4 websocket examples in new browser tabs
http://localhost:8080/examples/websocket/echo.xhtml
http://localhost:8080/examples/websocket/chat.xhtml
http://localhost:8080/examples/websocket/snake.xhtml
http://localhost:8080/examples/websocket/drawboard.xhtml

Result: Snake and Drawboard examples fail immediately, printing "WebSocket
connection closed" messages into their log areas.

In catalina.2017-08-17.log there is exception:

[[[
 java.security.AccessControlException: access denied
("java.lang.RuntimePermission"
"accessClassInPackage.org.apache.catalina.webresources")
        at
java.security.AccessControlContext.checkPermission(AccessControlContext.java:372)
        at
java.security.AccessController.checkPermission(AccessController.java:559)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
        at
java.lang.SecurityManager.checkPackageAccess(SecurityManager.java:1525)
        at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:305)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:412)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:358)
        at
org.apache.catalina.webresources.StandardRoot.isPackedWarFile(StandardRoot.java:651)
        at
org.apache.catalina.webresources.CachedResource.validateResource(CachedResource.java:96)
        at org.apache.catalina.webresources.Cache.getResource(Cache.java:69)
        at
org.apache.catalina.webresources.StandardRoot.getResource(StandardRoot.java:216)
        at
org.apache.catalina.webresources.StandardRoot.getResource(StandardRoot.java:206)
        at
org.apache.catalina.webresources.FileResource.getCodeBase(FileResource.java:224)
        at
org.apache.catalina.loader.WebappClassLoaderBase.findClassInternal(WebappClassLoaderBase.java:2499)
        at
org.apache.catalina.loader.WebappClassLoaderBase.findClass(WebappClassLoaderBase.java:859)
        at
org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1302)
        at
org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1167)
        at websocket.snake.SnakeAnnotation.onOpen(SnakeAnnotation.java:78)
]]]

This is followed by
java.lang.NoClassDefFoundError: websocket/snake/SnakeTimer

In localhost.2017-08-17.log there is
java.lang.ClassNotFoundException: websocket.drawboard.DrawboardEndpoint$3


A zip with log files is attached.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to