Lukas Eder created JCR-3536:
-------------------------------
Summary: The SessionImpl constructor passes an incompletely
initialised "this" reference to the JackrabbitSecurityManager
Key: JCR-3536
URL: https://issues.apache.org/jira/browse/JCR-3536
Project: Jackrabbit Content Repository
Issue Type: Bug
Components: jackrabbit-core
Affects Versions: 2.6
Reporter: Lukas Eder
Priority: Minor
The following call trace can be observed from the
org.apache.jackrabbit.core.SessionImpl constructor:
1. SessionImpl<init>()
2. SessionImpl.createAccessManager(Subject)
3. SecurityManager.getAccessManager(Session, AMContext)
In step 3, the incompletely initialised "this" reference is passed to the
SecurityManager, which expects a completely initialised Session.
While this probably doesn't cause any issues in the current Jackrabbit
implementation, it may in the future, or in custom implementations of the
JackrabbitSecurityManager
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
