security issue with java 1.7

Upload core product.
Post Reply
wlewalski
Posts: 1
Joined: Thu Oct 24, 2013 1:50 pm

security issue with java 1.7

Post by wlewalski »

we recently upgraded all our environments to java 1.7 and now the JfileUpload is having problems loading. It seems to be a security related issue (output from console log below)
Posts have suggested that it may be related to a firewall issue and suggests adding the command argument "-Djava.net.preferIPv4Stack=true", but that seems to only work some of the time. Rolling back to 1.6 is not an option, please advise on a fix as we are a licensed customer.


Caused by: java.lang.reflect.InvocationTargetException
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
... 14 more
Caused by: java.lang.NullPointerException
at sun.plugin2.applet.Plugin2ClassLoader.loadAllowedCodebases(Unknown Source)
at sun.plugin2.applet.Plugin2ClassLoader.getPermissions(Unknown Source)
at sun.plugin2.applet.Applet2ClassLoader.getPermissions(Unknown Source)
at java.security.SecureClassLoader.getProtectionDomain(Unknown Source)
at java.security.SecureClassLoader.defineClass(Unknown Source)
at java.net.URLClassLoader.defineClass(Unknown Source)
... 18 more
basic: Removed progress listener: sun.plugin.util.ProgressMonitorAdapter@c34fd9
security: Reset deny session certificate store

User avatar
support
Posts: 1503
Joined: Sun Jan 27, 2008 6:19 pm

Re: security issue with java 1.7

Post by support »

Looks like there is a bug in JRE 1.7.0_45 when you run applet locally. Workaround is to reference applet in JNLP file. Sample solution for JFileUpload attached.
AppletWithJNLP.zip
Workaround to NullPointer
(5.77 KiB) Downloaded 912 times

User avatar
support
Posts: 1503
Joined: Sun Jan 27, 2008 6:19 pm

Re: security issue with java 1.7

Post by support »

This issue does not occur anymore with JRE 1.7.0_51

Post Reply