283841 - security restricions doesn't allow java applet to call the method readObject of ObjectInputStream

Status: RESOLVED INCOMPLETE

(Core Graveyard :: Java: OJI, defect)

Description

[kkkkkkkk28]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0

Using the Sample RTE web aplication provided by ADL at 
http://www.adlnet.org/index.cfm?fuseaction=DownFile&libid=744&bc=false
with the course Photoshop_Competency.zip that is a zip file in anoter zip
file (SCORM2004_Examples_Photoshop_1_1.zip) found in 
http://www.adlnet.org/index.cfm?fuseaction=DownFile&libid=641&bc=false
produces the following exception in java plugin console when reaching to the pre
test page:




Java(TM) Plug-in: Version 1.4.2_03
Using JRE version 1.4.2_03 Java HotSpot(TM) Client VM

Proxy Configuration: Browser Proxy Configuration





----------------------------------------------------
c: clear console window
f: finalize objects on finalization queue
g: garbage collect
h: display this help message
l: dump classloader list
m: print memory usage
o: trigger logging
p: reload proxy configuration
q: hide console
r: reload policy configuration
s: dump system properties
t: dump thread list
v: dump thread stack
x: clear classloader cache
0-5: set trace level to
----------------------------------------------------
java.security.PrivilegedActionException: java.lang.reflect.InvocationTargetException

at java.security.AccessController.doPrivileged(Native Method)

at sun.plugin.liveconnect.SecureInvocation$2.run(Unknown Source)

at java.security.AccessController.doPrivileged(Native Method)

at sun.plugin.liveconnect.SecureInvocation.CallMethod(Unknown Source)

at sun.plugin.liveconnect.SecureInvocation.access$300(Unknown Source)

at sun.plugin.liveconnect.SecureInvocation$CallMethodThread.run(Unknown Source)

Caused by: java.lang.reflect.InvocationTargetException

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)

at java.lang.reflect.Method.invoke(Unknown Source)

at sun.plugin.liveconnect.PrivilegedCallMethodAction.run(Unknown Source)

... 6 more

Caused by: java.lang.NoClassDefFoundError: Lorg/adl/sequencer/ADLValidRequests;

at java.lang.Class.getDeclaredFields0(Native Method)

at java.lang.Class.privateGetDeclaredFields(Unknown Source)

at java.lang.Class.getDeclaredField(Unknown Source)

at java.io.ObjectStreamClass.getDeclaredSUID(Unknown Source)

at java.io.ObjectStreamClass.access$400(Unknown Source)

at java.io.ObjectStreamClass$3.run(Unknown Source)

at java.security.AccessController.doPrivileged(Native Method)

at java.io.ObjectStreamClass.(Unknown Source)

at java.io.ObjectStreamClass.lookup(Unknown Source)

at java.io.ObjectStreamClass.initNonProxy(Unknown Source)

at java.io.ObjectInputStream.readNonProxyDesc(Unknown Source)

at java.io.ObjectInputStream.readClassDesc(Unknown Source)

at java.io.ObjectInputStream.readOrdinaryObject(Unknown Source)

at java.io.ObjectInputStream.readObject0(Unknown Source)

at java.io.ObjectInputStream.readObject(Unknown Source)

at org.adl.samplerte.client.ServletProxy.postLMSRequest(Unknown Source)

at org.adl.samplerte.client.ClientRTS.Initialize(Unknown Source)

... 11 more





With IE it works fine, but using it with Mozilla Firefox it throws an exception.
The problem is in the file ServletProxy.java in the
line 133 (response = (LMSCMIServletResponse) in.readObject();). This file
makes part of the client side applet code. 

Reproducible: Always

Steps to Reproduce:
1. Download ant install the ADL Sample RTE from
http://www.adlnet.org/index.cfm?fuseaction=DownFile&libid=744&bc=false

2. Click on the link Start Server SRTE 1_3_2 in your desktop (make sure your the
variable JAVA_HOME is correct)
3. Click on the link Sample RTE 1.3.2 in your desktop (this will open a Firefox
 window)
4. login as admin and with the password admin
5. import the course Photoshop_Competency.zip that is a zip file in anoter zip
   file (SCORM2004_Examples_Photoshop_1_1.zip) found in 
   http://www.adlnet.org/index.cfm?fuseaction=DownFile&libid=641&bc=false
6. register for the course you just imported 
7. click on the link "View registered courses" and select the course you just
registered.
8. click the Continue-> button in the top frame
9. open the java plugin console and see the exceptions

Actual Results:  
Java Plugin throws the exception mencioned above

Expected Results:  
The java plugin console should not throw any exception and should run cleanly

Comment 1

[Pete Zha]

mass reassign to Alfred

Comment 2

[Benjamin Smedberg]

Mass-closing bugs in the "OJI" component: OJI plugin integration was replaced with npruntime long ago, and these bugs appear to be irrelevant now. If there is in fact a real bug that remains, please file it new in the "Core" product, component "Plug-ins".