https://issues.apache.org/bugzilla/show_bug.cgi?id=49209

--- Comment #7 from sylvain.laur...@gmail.com 2010-09-18 18:08:06 EDT ---
Created an attachment (id=26049)
 --> (https://issues.apache.org/bugzilla/attachment.cgi?id=26049)
Patch for tomcat 6.0.29

I managed to reproduce the problem.
The thing is that the JdbcLeakPrevention class called by
WebappClassLoader.clearReferencesJdbc() is not loaded by the same ClassLoader
as the other parts of catalina. It is loaded by the classloader of the webapp,
but without any ProtectionDomain defined. 

My patch just calls defineClass passing the current ProtectionDomain of the
WebappClassLoader class so that from a security policy point of view, the
loaded JdbcLeakPrevention class has the same privileges as the rest of catalina
as it would have if it had been loaded normally.

I tested my patch with java 1.6.0_20 on OSX 10.6. I suppose the issue also
applies to tomcat 7 but did not check.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to