[JBWS-4424]:Add AccessController.doPrivileged to ServiceImpl.class.ge…

…tClassLoader() to fix the security permission check failed issue
jbossws · Aug 14, 2024 · fe1efd8 · fe1efd8
1 parent 8478916
commit fe1efd8
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 1 deletion.
diff --git a/modules/client/src/main/java/org/jboss/wsf/stack/cxf/client/ProviderImpl.java b/modules/client/src/main/java/org/jboss/wsf/stack/cxf/client/ProviderImpl.java
@@ -577,7 +577,7 @@ protected <T> T createPort(QName portName, EndpointReferenceType epr, Class<T> s
          ClassLoader origClassLoader = getContextClassLoader();
          T port = null;
          try {
-            setContextClassLoader(createDelegateClassLoader(origClassLoader, ServiceImpl.class.getClassLoader()));
+            setContextClassLoader(createDelegateClassLoader(origClassLoader, SecurityActions.getClassLoader(ServiceImpl.class));
             port = super.createPort(portName, epr, serviceEndpointInterface, features);
          } finally {
             setContextClassLoader(origClassLoader);

diff --git a/modules/client/src/main/java/org/jboss/wsf/stack/cxf/client/SecurityActions.java b/modules/client/src/main/java/org/jboss/wsf/stack/cxf/client/SecurityActions.java
@@ -76,6 +76,26 @@ public Object run()
          });
       }
    }
+
+   static ClassLoader getClassLoader(Class clazz)
+   {
+      SecurityManager sm = System.getSecurityManager();
+      if (sm == null)
+      {
+         return clazz.getClassLoader();
+      }
+      else
+      {
+         return AccessController.doPrivileged(new PrivilegedAction<ClassLoader>()
+         {
+            public ClassLoader run()
+            {
+               return clazz.getClassLoader();
+            }
+         });
+      }
+   }
+
 
    /**
     * Return the current value of the specified system property