Page 1 of 1

security issue with java 1.7

Posted: Thu Oct 24, 2013 2:04 pm
by wlewalski
we recently upgraded all our environments to java 1.7 and now the JfileUpload is having problems loading. It seems to be a security related issue (output from console log below)
Posts have suggested that it may be related to a firewall issue and suggests adding the command argument "-Djava.net.preferIPv4Stack=true", but that seems to only work some of the time. Rolling back to 1.6 is not an option, please advise on a fix as we are a licensed customer.


Caused by: java.lang.reflect.InvocationTargetException
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
... 14 more
Caused by: java.lang.NullPointerException
at sun.plugin2.applet.Plugin2ClassLoader.loadAllowedCodebases(Unknown Source)
at sun.plugin2.applet.Plugin2ClassLoader.getPermissions(Unknown Source)
at sun.plugin2.applet.Applet2ClassLoader.getPermissions(Unknown Source)
at java.security.SecureClassLoader.getProtectionDomain(Unknown Source)
at java.security.SecureClassLoader.defineClass(Unknown Source)
at java.net.URLClassLoader.defineClass(Unknown Source)
... 18 more
basic: Removed progress listener: sun.plugin.util.ProgressMonitorAdapter@c34fd9
security: Reset deny session certificate store

Re: security issue with java 1.7

Posted: Fri Oct 25, 2013 5:19 pm
by support
Looks like there is a bug in JRE 1.7.0_45 when you run applet locally. Workaround is to reference applet in JNLP file. Sample solution for JFileUpload attached.
AppletWithJNLP.zip
Workaround to NullPointer
(5.77 KiB) Downloaded 1401 times

Re: security issue with java 1.7

Posted: Sun Jan 19, 2014 10:12 am
by support
This issue does not occur anymore with JRE 1.7.0_51