File tomcat-8.0.32-CVE-2016-5018.patch of Package tomcat.4188
Index: java/org/apache/jasper/runtime/JspRuntimeLibrary.java
IDEA additional info:
Subsystem: com.intellij.openapi.diff.impl.patch.CharsetEP
<+>UTF-8
===================================================================
--- java/org/apache/jasper/runtime/JspRuntimeLibrary.java (date 1454441552000)
+++ java/org/apache/jasper/runtime/JspRuntimeLibrary.java (revision )
@@ -14,7 +14,6 @@
* See the License for the specific language governing permissions and
* limitations under the License.
*/
-
package org.apache.jasper.runtime;
import java.beans.PropertyEditor;
@@ -23,9 +22,6 @@
import java.io.IOException;
import java.io.OutputStreamWriter;
import java.lang.reflect.Method;
-import java.security.AccessController;
-import java.security.PrivilegedActionException;
-import java.security.PrivilegedExceptionAction;
import java.util.Enumeration;
import javax.servlet.RequestDispatcher;
@@ -37,7 +33,6 @@
import javax.servlet.jsp.PageContext;
import javax.servlet.jsp.tagext.BodyContent;
-import org.apache.jasper.Constants;
import org.apache.jasper.JasperException;
import org.apache.jasper.compiler.Localizer;
import org.apache.jasper.util.ExceptionUtils;
@@ -56,36 +51,6 @@
*/
public class JspRuntimeLibrary {
- protected static class PrivilegedIntrospectHelper
- implements PrivilegedExceptionAction<Void> {
-
- private final Object bean;
- private final String prop;
- private final String value;
- private final ServletRequest request;
- private final String param;
- private final boolean ignoreMethodNF;
-
- PrivilegedIntrospectHelper(Object bean, String prop,
- String value, ServletRequest request,
- String param, boolean ignoreMethodNF)
- {
- this.bean = bean;
- this.prop = prop;
- this.value = value;
- this.request = request;
- this.param = param;
- this.ignoreMethodNF = ignoreMethodNF;
- }
-
- @Override
- public Void run() throws JasperException {
- internalIntrospecthelper(
- bean,prop,value,request,param,ignoreMethodNF);
- return null;
- }
- }
-
/**
* Returns the value of the javax.servlet.error.exception request
* attribute value, if present, otherwise the value of the
@@ -292,29 +257,7 @@
public static void introspecthelper(Object bean, String prop,
String value, ServletRequest request,
String param, boolean ignoreMethodNF)
- throws JasperException
- {
- if( Constants.IS_SECURITY_ENABLED ) {
- try {
- PrivilegedIntrospectHelper dp =
- new PrivilegedIntrospectHelper(
- bean,prop,value,request,param,ignoreMethodNF);
- AccessController.doPrivileged(dp);
- } catch( PrivilegedActionException pe) {
- Exception e = pe.getException();
- throw (JasperException)e;
- }
- } else {
- internalIntrospecthelper(
- bean,prop,value,request,param,ignoreMethodNF);
- }
- }
-
- private static void internalIntrospecthelper(Object bean, String prop,
- String value, ServletRequest request,
- String param, boolean ignoreMethodNF)
- throws JasperException
- {
+ throws JasperException {
Method method = null;
Class<?> type = null;
Class<?> propertyEditorClass = null;