Deserialization may happen, as shown in TCK, in a classloader with no
access to EE module classes.
On Sep 22, 2013 2:50 AM, "Jason T. Greene" <notifications@github.com> wrote:

> In
> ee/src/main/java/org/jboss/as/ee/concurrent/TransactionSetupProviderImpl.java:
>
> > +            throw new IllegalStateException(e);
> > +        }
> > +        final SecurityManager sm = System.getSecurityManager();
> > +        final ClassLoader classLoader;
> > +        if (sm == null) {
> > +            classLoader = currentThread().getContextClassLoader();
> > +        } else {
> > +            classLoader = AccessController.doPrivileged(new PrivilegedAction<ClassLoader>() {
> > +                @Override
> > +                public ClassLoader run() {
> > +                    return currentThread().getContextClassLoader();
> > +                }
> > +            });
> > +        }
> > +        if (sm == null) {
> > +            currentThread().setContextClassLoader(module.getClassLoader());
>
> Why are you setting TCCL, what is actually using it?
>
> —
> Reply to this email directly or view it on GitHub<https://github.com/wildfly/wildfly/pull/5063/files#r6504064>
> .
>