2010/2/2 Konstantin Kolinko <knst.koli...@gmail.com>:
> 2010/2/2 Mark Thomas <ma...@apache.org>:
>> On 02/02/2010 17:31, Konstantin Kolinko wrote:
>>> 2010/2/2  <ma...@apache.org>:
>>>> Author: markt
>>>> Date: Tue Feb  2 17:10:05 2010
>>>> New Revision: 905710
>>>>
>>>> URL: http://svn.apache.org/viewvc?rev=905710&view=rev
>>>> Log:
>>>> Proposal
>>>>
>>>> Modified:
>>>>    tomcat/tc5.5.x/trunk/STATUS.txt
>>>>
>>>
>>>> +* Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=48581
>>>> +  Avoid security exception on first access
>>>> +  http://people.apache.org/~markt/patches/2010-02-02-bug48581.patch
>>>> +  +1: markt
>>>> +  -1:
>>>
>>> A very elaborate patch.  So, it was "org.apache.coyote.Constants".
>>> I thought that we would just preload the class.
>>
>> Yeah, it did get a bit out of hand. Pre-loading should work too.
>>

I tried to preload "org.apache.coyote.Constants", and it doesn't fix the issue.

While class is preloaded, its class initialization (<clinit> call)
still occurs during InternalOutputBuffer.sendStatus(), thus I am
getting

    java.security.AccessControlException: access denied
(java.util.PropertyPermission
      org.apache.coyote.USE_CUSTOM_STATUS_MSG_IN_HEADER read)

in localhost.2010-02-03.log, followed by

    java.lang.NoClassDefFoundError: Could not initialize class
org.apache.coyote.Constants

in catalina.2010-02-03.log


Your patch works. Let's go with it.


Best regards,
Konstantin Kolinko

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to