[ https://issues.apache.org/jira/browse/HADOOP-12126?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Laurent Goujon updated HADOOP-12126: ------------------------------------ Attachment: HADOOP-12126.001.patch Attach correct patch file. The wrong patch name came from http://wiki.apache.org/hadoop/GitAndHadoop#Creating_Patches_for_attachment_to_JIRA_issues vs http://wiki.apache.org/hadoop/HowToContribute#Generating_a_patch > Configuration might use ApplicationClassLoader to create XML parser > ------------------------------------------------------------------- > > Key: HADOOP-12126 > URL: https://issues.apache.org/jira/browse/HADOOP-12126 > Project: Hadoop Common > Issue Type: Bug > Components: conf > Reporter: Laurent Goujon > Assignee: Laurent Goujon > Attachments: HADOOP-12126.001.patch > > > {{org.apache.hadoop.conf.Configuration}} creates a new DocumentBuilder to > parse the XML config files, but it doesn't specify which classloader to use > to discover and instantiate the XML parser. > Because DocumentBuilderFactory relies on ServiceProvider, whose by default, > uses the context classloader. If classpath isolation is turned on, one might > expect that that Configuration will only load classes from the system > classloader, but it turns out that the context classloader is set to > ApplicationClassLoader, and that a XML parser might be loaded from the user > classpath. -- This message was sent by Atlassian JIRA (v6.3.4#6332)