Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6392771

REGRESSION: Java 6 beta Plug-In does not allow security grant

    XMLWordPrintable

    Details

    • Subcomponent:
    • Introduced In Version:
      6
    • Resolved In Build:
      b85
    • CPU:
      x86
    • OS:
      windows_xp

      Description

      FULL PRODUCT VERSION :
      java version "1.6.0-beta"
      Java(TM) 2 Runtime Environment, Standard Edition (build 1.6.0-beta-b59g)
      Java HotSpot(TM) Client VM (build 1.6.0-beta-b59g, mixed mode, sharing)

      ADDITIONAL OS VERSION INFORMATION :
      Microsoft Windows XP [Version 5.1.2600]

      A DESCRIPTION OF THE PROBLEM :
      Signed applet jars seem to be getting ignored.

      No permission grant dialog appears and permissions are not granted.

      This is occuring with signed applets that work fine in Java 1.3.1, 1.4.2, and 1.5.0 Plug-Ins.

      STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
      Run signed applet.

      EXPECTED VERSUS ACTUAL BEHAVIOR :
      EXPECTED -
      Permission grant dialog appears and permissions are granted.
      ACTUAL -
      No permission grant dialog appears and permissions are not granted.

      ERROR MESSAGES/STACK TRACES THAT OCCUR :
      Err: unable to load plugin privilege set, using default.
      java.security.AccessControlException: access denied (java.lang.RuntimePermission getProtectionDomain)
      at java.security.AccessControlContext.checkPermission(Unknown Source)
      at java.security.AccessController.checkPermission(Unknown Source)
      at java.lang.SecurityManager.checkPermission(Unknown Source)
      at java.lang.Class.getProtectionDomain(Unknown Source)
      at wt.security.ClassQuery12.run(PrivilegeSet.java:464)
      at java.security.AccessController.doPrivileged(Native Method)
      ...

      The wt.security.ClassQuery12 class is ours, but this issue should not be occuring inside a signed applet inside a privileged action.

      REPRODUCIBILITY :
      This bug can be reproduced always.

      ---------- BEGIN SOURCE ----------
      Our signed applets are rather complex, but this should be repeatable with any.
      ---------- END SOURCE ----------

      CUSTOMER SUBMITTED WORKAROUND :
      I assume that disabling security would work, but that's not a solution.

      Release Regression From : mustang
      The above release value was the last known release where this
      bug was known to work. Since then there has been a regression.

        Attachments

          Activity

            People

            Assignee:
            dgu Dennis Gu (Inactive)
            Reporter:
            gmanwanisunw Girish Manwani (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: