United StatesChange Country, Oracle Worldwide Web Sites Communities I am a... I want to...
Bug ID: JDK-6646578 Confusing ClassNotFoundExceptions caused by insecure JVM command-line argument specification
JDK-6646578 : Confusing ClassNotFoundExceptions caused by insecure JVM command-line argument specification

Details
Type:
Bug
Submit Date:
2008-01-02
Status:
Closed
Updated Date:
2010-09-08
Project Name:
JDK
Resolved Date:
2008-06-13
Component:
deploy
OS:
generic
Sub-Component:
plugin
CPU:
generic
Priority:
P3
Resolution:
Fixed
Affected Versions:
6u10
Fixed Versions:
6u10 (b11)

Related Reports

Sub Tasks

Description
The ClassNotFoundExceptions thrown which are related to the specification of insecure JVM command-line arguments are confusing in the default case where the codebase_lookup parameter is not set to false. In this case the ClassNotFoundException which indicates that the class wasn't loaded because it was unsigned is squelched and another ClassNotFoundException is raised which indicates that it wasn't found because it wasn't on the web server. We need to preserve the CNFE raised from the first check and re-raise it later if necessary.

                                    

Comments
SUGGESTED FIX

http://sa.sfbay.sun.com/projects/deployment_data/6u10/6646578.0
testcase: http://j2se.east.sun.com/deployment/www/tests/1.6.0_10/6646578/
                                     
2008-01-03
EVALUATION

Propagated the ClassNotFoundException indicating the unsigned status
of the class out of the doPrivileged block, throwing it in the correct
place to indicate the real reason for failing to load the class.
                                     
2008-01-03



Hardware and Software, Engineered to Work Together