Hibernate
/
hibernate-orm
mirror of https://github.com/hibernate/hibernate-orm
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

HHH-10349 : PersistenceUtilHelper should call getDeclaredField/Method inside of privileged block 

(cherry picked from commit 986b2b65ad)
This commit is contained in:
Gail Badner 2015-12-10 16:41:05 -08:00
parent 4acd4bff8e
commit e150a6140e
1 changed files with 23 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
hibernate-entitymanager/src/main/java/org/hibernate/jpa/internal/util/PersistenceUtilHelper.java
View File

@ -10,6 +10,8 @@ import java.io.Serializable;
import java.lang.reflect.Field; import java.lang.reflect.Field;
import java.lang.reflect.InvocationTargetException; import java.lang.reflect.InvocationTargetException;
import java.lang.reflect.Method; import java.lang.reflect.Method;
import java.security.AccessController;
import java.security.PrivilegedAction;
import java.util.ArrayList; import java.util.ArrayList;
import java.util.HashMap; import java.util.HashMap;
import java.util.List; import java.util.List;
@ -352,7 +354,10 @@ public final class PersistenceUtilHelper {
return attributeAccess; return attributeAccess;
} }
private AttributeAccess buildAttributeAccess(String attributeName) { private AttributeAccess buildAttributeAccess(final String attributeName) {
final PrivilegedAction<AttributeAccess> action = new PrivilegedAction<AttributeAccess>() {
@Override
public AttributeAccess run() {
for ( Class clazz : classHierarchy ) { for ( Class clazz : classHierarchy ) {
try { try {
final Field field = clazz.getDeclaredField( attributeName ); final Field field = clazz.getDeclaredField( attributeName );
@ -367,10 +372,12 @@ public final class PersistenceUtilHelper {
} }
} }
} }
//we could not find any match //we could not find any match
return new NoSuchAttributeAccess( specifiedClass, attributeName ); return new NoSuchAttributeAccess( specifiedClass, attributeName );
} }
};
return System.getSecurityManager() != null ? AccessController.doPrivileged( action ) : action.run();
}
} }
/** /**