On Solaris 10 & 11 machines running certain versions of the JVM and having the JAI Tools extension present, an unhandled AccessControlException thrown in the ImageIO class static initializer prevents ImageIO object instantiation & usage.
The exception stack is as follows:
java.lang.ExceptionInInitializerError
at ImageIOBug.main(ImageIOBug.java:22)
Caused by: java.security.AccessControlException: access denied (java.util.PropertyPermission com.sun.media.imageio.disableCodecLib read)
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:264)
at java.security.AccessController.checkPermission(AccessController.java:427)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
at java.lang.SecurityManager.checkPropertyAccess(SecurityManager.java:1285)
at java.lang.System.getProperty(System.java:628)
at java.lang.Boolean.getBoolean(Boolean.java:221)
at com.sun.media.imageioimpl.common.PackageUtil.isCodecLibAvailable(PackageUtil.java:70)
at com.sun.media.imageioimpl.plugins.jpeg.CLibJPEGImageWriterSpi.onRegistration(CLibJPEGImageWriterSpi.java:74)
at javax.imageio.spi.SubRegistry.registerServiceProvider(ServiceRegistry.java:698)
at javax.imageio.spi.ServiceRegistry.registerServiceProvider(ServiceRegistry.java:285)
at javax.imageio.spi.IIORegistry$1.run(IIORegistry.java:223)
at java.security.AccessController.doPrivileged(Native Method)
at javax.imageio.spi.IIORegistry.registerInstalledProviders(IIORegistry.java:230)
at javax.imageio.spi.IIORegistry.registerStandardSpis(IIORegistry.java:165)
at javax.imageio.spi.IIORegistry.<init>(IIORegistry.java:119)
at javax.imageio.spi.IIORegistry.getDefaultInstance(IIORegistry.java:141)
at javax.imageio.ImageIO.<clinit>(ImageIO.java:46)
This is reproducable using the following code on Solaris 10 with JVM 1.5.0_11 and
JAI Tools V1.1.2.
java version "1.5.0_11"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_11-b03)
Java HotSpot(TM) Client VM (build 1.5.0_11-b03, mixed mode, sharing)
% jar xf jai_core.jar javax/media/jai/buildVersion
% cat javax/media/jai/buildVersion
jai-1_1_2 Thu Jul 10 18:57:36 PDT 2003
ImageIOBug.java
===============
import java.security.*;
import java.util.*;
import javax.imageio.*;
import javax.swing.*;
public class ImageIOBug {
public static void main(String[] args) {
if(args.length != 1) {
System.err.println("Usage: java ImageIOBug <true|false - Use security mgr>");
System.exit(22);
}
try {
System.err.println("java.ext.dirs" + " = " + System.getProperty("java.ext.dirs"));
if(args[0].equalsIgnoreCase("true")) {
System.setSecurityManager(new RMISecurityManager());
}
System.err.println(Thread.currentThread().getContextClassLoader().getClass().getName());
for(Iterator i = ImageIO.getImageReadersByMIMEType("image/jpeg"); i.hasNext();) {
ImageReader imr = (ImageReader) i.next();
System.out.println(imr.getClass().getName());
}
}
catch(Throwable t) {
t.printStackTrace();
}
}
};
% java -cp . ImageIOBug true
java.ext.dirs = /RickZ/JAVA/jdk1.5.0_11/jre/lib/ext
sun.misc.Launcher$AppClassLoader
java.lang.ExceptionInInitializerError
at ImageIOBug.main(ImageIOBug.java:21)
...
Using the 1.5.0_12 version of the JVM on the same machine works.
% /usr/bin/java -version
java version "1.5.0_12"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_12-b04)
Java HotSpot(TM) Client VM (build 1.5.0_12-b04, mixed mode, sharing)
% /usr/bin/java -cp . ImageIOBug true
java.ext.dirs = /usr/jdk/instances/jdk1.5.0/jre/lib/ext
sun.misc.Launcher$AppClassLoader
com.sun.media.imageioimpl.plugins.jpeg.CLibJPEGImageReader
com.sun.imageio.plugins.jpeg.JPEGImageReader
Running both with -Djava.security.debug=access yields
1.5.0_11
========
access: access denied (java.util.PropertyPermission com.sun.media.imageio.disableCodecLib read)
1.5.0_12
========
access: access allowed (java.util.PropertyPermission com.sun.media.imageio.disableCodecLib read)
Various JVM's have exhibited this problem. Below is a list of those that have seen the
problem with my application.
SunOS sparc 5.10 1.4.2_10-b03
SunOS sparc 5.10 1.5.0_08-b03
SunOS sparc 5.10 1.5.0_11-b03
SunOS sparc 5.10 1.5.0_12-b04
SunOS sparc 5.10 1.5.0_14-b03
SunOS x86 5.10 1.5.0_07-b03
SunOS x86 5.11 1.5.0_08-b03
SunOS x86 5.11 1.5.0_10-b03
SunOS x86 5.11 1.5.0_11-b03
SunOS x86 5.11 1.5.0_13-rev-b07
Reviewing the JAI source, it appears that based on the 1.1.2 release that there is
a try/catch block in the JAI code to catch the SecurityException as shown below.
This appears to be not working.
The following cvs revision tags for jai-imageio-core show:
Doesn't catch security exception.
root-1_1
jai-imageio-1_1-alpha
Revision tag jai-imageio-1_1-dr-b01 & later, including
jai-imageio-1_1-fcs, contains the code below.
public static final boolean isCodecLibAvailable() {
// Retrieve value of system property here to allow this to be
// modified dynamically.
Boolean result = (Boolean)
AccessController.doPrivileged(new PrivilegedAction() {
public Object run() {
String property = null;
try {
property =
System.getProperty("com.sun.media.imageio.disableCodecLib");
} catch(SecurityException se) {
// Do nothing: leave 'property' null.
}
return (property != null &&
property.equalsIgnoreCase("true")) ?
Boolean.TRUE : Boolean.FALSE;
}
});
Regardless of whether there is a problem catching the exception in the above code,
uncaught exceptions loading an extension should not be able to cripple the ImageIO
object instantation.
Applications deployed using Java Web Start have no control over the JVM installations on the
target machine, and in my case Jini proxies which provide image services fail because of this
bug.
The ImageIO static initializer should handle errors trying to load extensions.