Created attachment 27251 [details] eclipse debug In method "org.apache.catalina.security.SecurityConfig.setSecurityProperty", when i enable the SecurityManager, if 'properties' var equals "package.definition", Security.getProperty(properties) will return null, so Security.setProperty(properties, definition + packageList); will be Security.setProperty("package.definition", null + packageList); BTW: "package.access" security property no problem。 my jdk: java version "1.6.0_20" Java(TM) SE Runtime Environment (build 1.6.0_20-b02) Java HotSpot(TM) Client VM (build 16.3-b01, mixed mode, sharing)
Created attachment 27252 [details] eclipse debug 2
Fixed in Tomcat 7 - will be in 7.0.18. Proposed for 6.0 and 5.5.
Fixed in 6.0.x and included in 6.0.33 onwards.
This has been fixed in 5.5.x and will be included in 5.5.34 onwards.