HHH-15655 use privileged operation when defining classes

Signed-off-by: Scott Marlow <[email protected]>

Author: scottmarlow

hibernate-core/src/main/java/org/hibernate/bytecode/internal/bytebuddy/ByteBuddyState.java

@@ -192,10 +192,24 @@ private Class<?> load(Class<?> referenceClass, TypeCache<TypeCache.SimpleKey> ca
 		return cache.findOrInsert(
 				referenceClass.getClassLoader(),
 				cacheKey,
-				() -> make( makeProxyFunction.apply( byteBuddy ) )
-						.load( referenceClass.getClassLoader(), resolveClassLoadingStrategy( referenceClass ) )
-						.getLoaded(),
-				cache );
+				() -> {
+					PrivilegedAction<Class<?>> delegateToPrivilegedAction = new PrivilegedAction<Class<?>>() {
+						@Override
+						public Class<?> run() {
+							return make( makeProxyFunction.apply( byteBuddy ) )
+									.load(
+											referenceClass.getClassLoader(),
+											resolveClassLoadingStrategy( referenceClass )
+									)
+									.getLoaded();
+						}
+					};
+					return SystemSecurityManager.isSecurityManagerEnabled() ? AccessController.doPrivileged(
+							delegateToPrivilegedAction ) :
+							delegateToPrivilegedAction.run();
+				},
+				cache
+		);
 	}
 
 	public Unloaded<?> make(Function<ByteBuddy, DynamicType.Builder<?>> makeProxyFunction) {