Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-49237

CPPNCSS Plugin fails with "WARNING: java.util.Calendar in JRE might be dangerous,"

    Details

    • Type: Bug
    • Status: Resolved (View Workflow)
    • Priority: Blocker
    • Resolution: Fixed
    • Component/s: cppncss-plugin
    • Labels:
    • Environment:
      Jenkins 2.103
      CppNCSS plugin 1.1
    • Similar Issues:

      Description

      As in summary - after upgrading Jenkins all jobs using CppNCSS plugin fail with SecurityException. Whitelisting java.utils.Calendar does not help (or I'm doing it wrong).

      Quick look into plugin's code shows "Calendar" being used in BuildProxy class, which is marked Serializable...

      Complete info from build log:

      java.lang.SecurityException: Rejected: java.util.Calendar
      	at hudson.remoting.ClassFilter.check(ClassFilter.java:75)
      	at hudson.remoting.MultiClassLoaderSerializer$Input.resolveClass(MultiClassLoaderSerializer.java:129)
      	at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1863)
      	at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1746)
      	at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1880)
      	at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1746)
      	at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:2037)
      	at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1568)
      	at java.io.ObjectInputStream.defaultReadFields(ObjectInputStream.java:2282)
      	at java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:2206)
      	at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:2064)
      	at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1568)
      	at java.io.ObjectInputStream.readObject(ObjectInputStream.java:428)
      	at hudson.remoting.UserRequest.deserialize(UserRequest.java:277)
      	at hudson.remoting.UserResponse.retrieve(UserRequest.java:310)
      	at hudson.remoting.Channel.call(Channel.java:909)
      	at hudson.FilePath.act(FilePath.java:1093)
      	at hudson.plugins.helpers.BuildProxy.doPerform(BuildProxy.java:68)
      	at hudson.plugins.helpers.AbstractPublisherImpl.perform(AbstractPublisherImpl.java:30)
      	at hudson.tasks.BuildStepMonitor$1.perform(BuildStepMonitor.java:20)
      	at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:744)
      	at hudson.model.AbstractBuild$AbstractBuildExecution.performAllBuildSteps(AbstractBuild.java:690)
      	at hudson.model.Build$BuildExecution.post2(Build.java:186)
      	at hudson.model.AbstractBuild$AbstractBuildExecution.post(AbstractBuild.java:635)
      	at hudson.model.Run.execute(Run.java:1752)
      	at hudson.matrix.MatrixRun.run(MatrixRun.java:146)
      	at hudson.model.ResourceController.execute(ResourceController.java:97)
      	at hudson.model.Executor.run(Executor.java:429)
      ERROR: Build step failed with exception
      java.lang.SecurityException: Rejected: java.util.Calendar
      	at hudson.remoting.ClassFilter.check(ClassFilter.java:75)
      	at hudson.remoting.MultiClassLoaderSerializer$Input.resolveClass(MultiClassLoaderSerializer.java:129)
      	at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1863)
      	at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1746)
      	at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1880)
      	at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1746)
      	at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:2037)
      	at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1568)
      	at java.io.ObjectInputStream.defaultReadFields(ObjectInputStream.java:2282)
      	at java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:2206)
      	at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:2064)
      	at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1568)
      	at java.io.ObjectInputStream.readObject(ObjectInputStream.java:428)
      	at hudson.remoting.UserRequest.deserialize(UserRequest.java:277)
      	at hudson.remoting.UserResponse.retrieve(UserRequest.java:310)
      	at hudson.remoting.Channel.call(Channel.java:909)
      	at hudson.FilePath.act(FilePath.java:1093)
      	at hudson.plugins.helpers.BuildProxy.doPerform(BuildProxy.java:68)
      Caused: java.lang.RuntimeException: Unexpected exception
      	at hudson.plugins.helpers.BuildProxy.unwrapException(BuildProxy.java:115)
      	at hudson.plugins.helpers.BuildProxy.doPerform(BuildProxy.java:77)
      	at hudson.plugins.helpers.AbstractPublisherImpl.perform(AbstractPublisherImpl.java:30)
      	at hudson.tasks.BuildStepMonitor$1.perform(BuildStepMonitor.java:20)
      	at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:744)
      	at hudson.model.AbstractBuild$AbstractBuildExecution.performAllBuildSteps(AbstractBuild.java:690)
      	at hudson.model.Build$BuildExecution.post2(Build.java:186)
      	at hudson.model.AbstractBuild$AbstractBuildExecution.post(AbstractBuild.java:635)
      	at hudson.model.Run.execute(Run.java:1752)
      	at hudson.matrix.MatrixRun.run(MatrixRun.java:146)
      	at hudson.model.ResourceController.execute(ResourceController.java:97)
      	at hudson.model.Executor.run(Executor.java:429)
      Build step 'Publish Cpp NCSS Report' marked build as failure

        Attachments

          Issue Links

            Activity

            hcorg Konrad Grochowski created issue -
            hcorg Konrad Grochowski made changes -
            Field Original Value New Value
            Link This issue is related to JENKINS-47736 [ JENKINS-47736 ]
            hcorg Konrad Grochowski made changes -
            Labels JEP-200
            hcorg Konrad Grochowski made changes -
            Description As in summary - after upgrading Jenkins all jobs using CppNCSS plugin fail with SecurityException. Whitelisting java.utils.Calendar does not help (or I'm doing it wrong). As in summary - after upgrading Jenkins all jobs using CppNCSS plugin fail with SecurityException. Whitelisting java.utils.Calendar does not help (or I'm doing it wrong).

            Quick look into plugin's code shows "Calendar" being used in BuildProxy class, which is marked Serializable...
            oleg_nenashev Oleg Nenashev made changes -
            Assignee Oleg Nenashev [ oleg_nenashev ]
            oleg_nenashev Oleg Nenashev made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            hcorg Konrad Grochowski made changes -
            Description As in summary - after upgrading Jenkins all jobs using CppNCSS plugin fail with SecurityException. Whitelisting java.utils.Calendar does not help (or I'm doing it wrong).

            Quick look into plugin's code shows "Calendar" being used in BuildProxy class, which is marked Serializable...
            As in summary - after upgrading Jenkins all jobs using CppNCSS plugin fail with SecurityException. Whitelisting java.utils.Calendar does not help (or I'm doing it wrong).

            Quick look into plugin's code shows "Calendar" being used in BuildProxy class, which is marked Serializable...

            Complete info from build log:
            {code:java}
            java.lang.SecurityException: Rejected: java.util.Calendar
            at hudson.remoting.ClassFilter.check(ClassFilter.java:75)
            at hudson.remoting.MultiClassLoaderSerializer$Input.resolveClass(MultiClassLoaderSerializer.java:129)
            at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1863)
            at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1746)
            at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1880)
            at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1746)
            at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:2037)
            at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1568)
            at java.io.ObjectInputStream.defaultReadFields(ObjectInputStream.java:2282)
            at java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:2206)
            at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:2064)
            at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1568)
            at java.io.ObjectInputStream.readObject(ObjectInputStream.java:428)
            at hudson.remoting.UserRequest.deserialize(UserRequest.java:277)
            at hudson.remoting.UserResponse.retrieve(UserRequest.java:310)
            at hudson.remoting.Channel.call(Channel.java:909)
            at hudson.FilePath.act(FilePath.java:1093)
            at hudson.plugins.helpers.BuildProxy.doPerform(BuildProxy.java:68)
            at hudson.plugins.helpers.AbstractPublisherImpl.perform(AbstractPublisherImpl.java:30)
            at hudson.tasks.BuildStepMonitor$1.perform(BuildStepMonitor.java:20)
            at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:744)
            at hudson.model.AbstractBuild$AbstractBuildExecution.performAllBuildSteps(AbstractBuild.java:690)
            at hudson.model.Build$BuildExecution.post2(Build.java:186)
            at hudson.model.AbstractBuild$AbstractBuildExecution.post(AbstractBuild.java:635)
            at hudson.model.Run.execute(Run.java:1752)
            at hudson.matrix.MatrixRun.run(MatrixRun.java:146)
            at hudson.model.ResourceController.execute(ResourceController.java:97)
            at hudson.model.Executor.run(Executor.java:429)
            ERROR: Build step failed with exception
            java.lang.SecurityException: Rejected: java.util.Calendar
            at hudson.remoting.ClassFilter.check(ClassFilter.java:75)
            at hudson.remoting.MultiClassLoaderSerializer$Input.resolveClass(MultiClassLoaderSerializer.java:129)
            at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1863)
            at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1746)
            at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1880)
            at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1746)
            at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:2037)
            at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1568)
            at java.io.ObjectInputStream.defaultReadFields(ObjectInputStream.java:2282)
            at java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:2206)
            at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:2064)
            at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1568)
            at java.io.ObjectInputStream.readObject(ObjectInputStream.java:428)
            at hudson.remoting.UserRequest.deserialize(UserRequest.java:277)
            at hudson.remoting.UserResponse.retrieve(UserRequest.java:310)
            at hudson.remoting.Channel.call(Channel.java:909)
            at hudson.FilePath.act(FilePath.java:1093)
            at hudson.plugins.helpers.BuildProxy.doPerform(BuildProxy.java:68)
            Caused: java.lang.RuntimeException: Unexpected exception
            at hudson.plugins.helpers.BuildProxy.unwrapException(BuildProxy.java:115)
            at hudson.plugins.helpers.BuildProxy.doPerform(BuildProxy.java:77)
            at hudson.plugins.helpers.AbstractPublisherImpl.perform(AbstractPublisherImpl.java:30)
            at hudson.tasks.BuildStepMonitor$1.perform(BuildStepMonitor.java:20)
            at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:744)
            at hudson.model.AbstractBuild$AbstractBuildExecution.performAllBuildSteps(AbstractBuild.java:690)
            at hudson.model.Build$BuildExecution.post2(Build.java:186)
            at hudson.model.AbstractBuild$AbstractBuildExecution.post(AbstractBuild.java:635)
            at hudson.model.Run.execute(Run.java:1752)
            at hudson.matrix.MatrixRun.run(MatrixRun.java:146)
            at hudson.model.ResourceController.execute(ResourceController.java:97)
            at hudson.model.Executor.run(Executor.java:429)
            Build step 'Publish Cpp NCSS Report' marked build as failure{code}
            oleg_nenashev Oleg Nenashev made changes -
            Status In Progress [ 3 ] In Review [ 10005 ]
            oleg_nenashev Oleg Nenashev made changes -
            Remote Link This issue links to "https://github.com/jenkinsci/cppncss-plugin/pull/2 (Web Link)" [ 19992 ]
            oleg_nenashev Oleg Nenashev made changes -
            Status In Review [ 10005 ] Resolved [ 5 ]
            Resolution Fixed [ 1 ]

              People

              • Assignee:
                oleg_nenashev Oleg Nenashev
                Reporter:
                hcorg Konrad Grochowski
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: