https://issues.apache.org/bugzilla/show_bug.cgi?id=45706

           Summary: Transform.register class loading and recursive
                    instantiation problems
           Product: Security
           Version: unspecified
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Signature
        AssignedTo: security-dev@xml.apache.org
        ReportedBy: [EMAIL PROTECTED]


There are a couple of problems with
org.apache.xml.security.transforms.Transform.register.

The first is that it doesn't use the current thread's context class loader to
load the class to be registered, which causes ClassNotFound exceptions if the
class can't be loaded by the system ClassLoader.

The second problem is a recursive stack overflow issue. If a custom Transform
implementation calls Transform.register in its constructor, then
Transform.register will try to instantiate the Transform, and so forth ...

I have a fix and test case ready to be putback.


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to