Erro em upload de arquivo - Myfaces + Tomahawk + JSP + JSF

public void upload(UploadEvent event) {
        System.out.println("132456" + event.getUploadItem().toString());
        System.out.println("132456" + event.getUploadItem().getFileName());
        System.out.println("132456" + event.getUploadItem().getData().length);
        getFiles().add(event.getUploadItem());
}

<h:form id="formUpload" enctype="multipart/form-data">
              <rich:fileUpload
                  align="center"
                  rendered="#{SessionUser.usuario.rules.atualizacao}"
                  acceptedTypes="txt, csv"
                  maxFilesQuantity="1"
                  listHeight="70"
                  uploadData="#{FileUploadBean.data}"
                  fileUploadListener="#{FileUploadBean.fileUploadListener}"
              />
          </h:form>

private UploadItem data;

    public void setData(UploadItem data) {
        this.data = data;
    }

    public UploadItem getData() {
        return data;
    }

    public void fileUploadListener(org.richfaces.event.UploadEvent event) {

        System.out.println("listener: " + event.toString());
        UploadItem item = event.getUploadItem();

        System.out.println("listener: " + item.getFileName());

        File file = item.getFile();
        
        System.out.println("listener: " + file.getName());
        
    }

public synchronized String saveUploadedFile(UploadItem uploadedFile, String path) {
        String name = getFileName(uploadedFile.getFileName());
        String fullPath = caminhoC + path + name;
        FileOutputStream fos = null;
        try {
            File f = new File(fullPath);
            f.createNewFile();
            
            fos = new FileOutputStream(f);
            fos.write(uploadedFile.getData()); // <-- gera a exceção aqui ó . . .
            fos.close();
            return path + name;
        } catch (Exception ex) {
            ex.printStackTrace();
        }
        return null;
    }

<x:inputFileUpload id="file" value="#{fonteSeguraMB.file}" storage="file" required="true"/>
<h:message id="fileMsg" for="file" />

private UploadedFile file;
   
    public UploadedFile getFile() {
        return file;
    }

    public void setFile(UploadedFile file) {
        this.file = file;
    }
    
    public boolean isCapaRendered() {
        System.out.println("isCapaRendered: " + getFonteSeguraSelecionada().getCapa() + "|");
        try {
            return ((getFonteSeguraSelecionada().getCapa() != null) && (!getFonteSeguraSelecionada().getCapa().trim().equals("")));
        } catch (Exception ex) {
            ex.printStackTrace();
            return false;
        }
    }

    public String alterar() {
        UploadManager um = new UploadManager();
        String path = um.saveUploadedFile(getFile(), bd.getFonteSeguraLocal().fonteSeguraPath);
        getFonteSeguraSelecionada().setCapa(path);
        .
        .
        .
    }

public class UploadManager {
    public String saveUploadedFile(UploadedFile uploadedFile, String path) {
        int i = uploadedFile.getName().lastIndexOf("\\") + 1;
        String name = uploadedFile.getName().substring(i);
        String fullPath = "C:\\..." + path + name; //<-provisorio para gravar o arquivo
        System.out.print("--->fullapth" + fullPath);
        FileOutputStream fos = null;
        try {
            File f = new File(fullPath);
            f.createNewFile();
            fos = new FileOutputStream(f);
            fos.write(uploadedFile.getBytes());
            fos.close();
            return path + name;
        } catch (Exception ex) {
            ex.printStackTrace();
        }
        return null;
    }
}

<?xml version="1.0" encoding="UTF-8"?>
<web-app version="2.4" xmlns="http://java.sun.com/xml/ns/j2ee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">
 <description>Mapfre</description>
 <display-name>Mapfre</display-name>
 <context-param>
  <param-name>javax.faces.DEFAULT_SUFFIX</param-name>
  <param-value>.xhtml</param-value>
 </context-param>
 <context-param>
  <param-name>javax.faces.STATE_SAVING_METHOD</param-name>
  <param-value>client</param-value>
 </context-param>
 <context-param>
  <param-name>org.ajax4jsf.SKIN</param-name>
  <param-value>blueSky</param-value>
 </context-param>
 <filter>
  <display-name>Ajax4jsf Filter</display-name>
  <filter-name>ajax4jsf</filter-name>
  <filter-class>org.ajax4jsf.Filter</filter-class>
 </filter>
<filter-mapping>
  <filter-name>ajax4jsf</filter-name>
  <servlet-name>Faces Servlet</servlet-name>
  <dispatcher>REQUEST</dispatcher>
  <dispatcher>FORWARD</dispatcher>
  <dispatcher>INCLUDE</dispatcher>
  <dispatcher>ERROR</dispatcher>
</filter-mapping>
    <listener>
        <listener-class>org.jboss.web.jsf.integration.config.JBossJSFConfigureListener</listener-class>
    </listener>
    <servlet>
  <servlet-name>Faces Servlet</servlet-name>
  <servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
  <load-on-startup>1</load-on-startup>
 </servlet>
 <servlet-mapping>
  <servlet-name>Faces Servlet</servlet-name>
  <url-pattern>*.jsf</url-pattern>
 </servlet-mapping>
 <login-config>
  <auth-method>BASIC</auth-method>
 </login-config>
     <context-param>
        <param-name>jsf-security-user-provider</param-name>
        <param-value>br.com.globalcode.jsf.security.usersession.SessionUserProvider</param-value>
    </context-param>
    <servlet-mapping>
        <servlet-name>Faces Servlet</servlet-name>
        <url-pattern>*.xhtml</url-pattern>
    </servlet-mapping>
    <security-constraint>
     <display-name>Sample</display-name>
        <web-resource-collection>
          <web-resource-name>members</web-resource-name>
          <description/>
          <url-pattern>/teste.jsf</url-pattern>
          <http-method>GET</http-method>
          <http-method>POST</http-method>
        </web-resource-collection>
        <auth-constraint>
          <description/>
          <role-name>admin</role-name>
        </auth-constraint>
    </security-constraint>
    <security-role>
        <description/>
        <role-name>admin</role-name>
    </security-role>
    <security-role>
        <description/>
        <role-name>supervisor</role-name>
    </security-role>
    <security-constraint>
        <display-name>protected pages</display-name>
        <web-resource-collection>
            <web-resource-name>ProtectedPages</web-resource-name>
            <description/>
            <url-pattern>/teste.jsf</url-pattern>
            <http-method>GET</http-method>
            <http-method>POST</http-method>
            <http-method>HEAD</http-method>
            <http-method>PUT</http-method>
            <http-method>OPTIONS</http-method>
            <http-method>TRACE</http-method>
            <http-method>DELETE</http-method>
        </web-resource-collection>
        <auth-constraint>
            <description/>
        </auth-constraint>
    </security-constraint>
    <init-param>   
    <param-name>createTempFiles</param-name>   
    <param-value>true</param-value>   
</init-param></web-app>

FacesContext context = FacesContext.getCurrentInstance();

HttpServletResponse response = (HttpServletResponse) context.getExternalContext().getResponse();

String c = getServletContext().getRealPath("/images");

private String recuperaDiretorioImagem() {
		String newDiretory;
		ExternalContext externalContext = FacesContext.getCurrentInstance().getExternalContext();
		ServletContext ctx = (ServletContext)externalContext.getContext();
		 newDiretory = ctx.getRealPath("WEB-INF\\img");
		return newDiretory;
	}

public void fileUploadListener(org.richfaces.event.UploadEvent event) {
		UploadItem item = event.getUploadItem();
		
		String dirInside = recuperaDiretorioApplication();
		Date nomeMomento = new Date();
		String nome = String.valueOf(nomeMomento.getTime());
		String fullPath = newDiretory+"\\"+nome+".jpg";	
		String novoFullPath = dirInside+"/WebContent/WEB-INF/img/"+ nome+".jpg"; 
		File f = item.getFile();		
		try {
			f.renameTo(new File(novoFullPath ));

		} catch (Exception e) {
			e.printStackTrace();
		}
		

	}