[Bug 322] Thread#GetContextClassLoader() throws in IcedTeaPlugin

[bugzilla-daemon at icedtea.classpath.org]

http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=322





------- Comment #3 from tvolkert at gmail.com  2009-04-22 16:56 -------
Actually, it occurs to me that it's likely not a problem with the
SecurityManager (specifically, net.sourceforge.jnlp.SecurityDesc) at all, but
with the fact that Thread.currentThread().getContextClassLoader() isn't
returning the same class loader that loaded the applet itself.  Per the
specification:

"First, if there is a security manager, and the caller's class loader is not
null and the caller's class loader is not the same as or an ancestor of the
context class loader for the thread whose context class loader is being
requested, then the security manager's checkPermission method is called with a
RuntimePermission("getClassLoader") permission to see if it's ok to get the
context ClassLoader.. "

If they were the same class loader or if the applet's class loader were an
ancestor of the context class loader, then the security manager wouldn't even
be consulted.  I checked, and on the Sun plugin, this is indeed the case.  So
this bug becomes a question of "why are two different class loaders in play
here?"


-- 
Configure bugmail: http://icedtea.classpath.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.