Do getParent() in a secure action when looking for the bootclassloader (FELIX-3367).

git-svn-id: https://svn.apache.org/repos/asf/felix/trunk@1441633 13f79535-47bb-0310-9956-ffa450edef68
diff --git a/framework/src/main/java/org/apache/felix/framework/BundleWiringImpl.java b/framework/src/main/java/org/apache/felix/framework/BundleWiringImpl.java
index dde7632..d6bdca5 100644
--- a/framework/src/main/java/org/apache/felix/framework/BundleWiringImpl.java
+++ b/framework/src/main/java/org/apache/felix/framework/BundleWiringImpl.java
@@ -1287,7 +1287,8 @@
     {
         // Get the appropriate class loader for delegation.
         ClassLoader parent = (m_classLoader == null)
-            ? determineParentClassLoader() : m_classLoader.getParent();
+            ? determineParentClassLoader() :
+            BundleRevisionImpl.getSecureAction().getParentClassLoader(m_classLoader);
         return (parent == null) ? m_bootClassLoader : parent;
     }