Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-49574

[JEP-200] java.lang.SecurityException: Rejected: java.util.Calendar

    Details

    • Type: Bug
    • Status: Resolved (View Workflow)
    • Priority: Blocker
    • Resolution: Fixed
    • Component/s: cvs-plugin
    • Labels:
    • Environment:
      Jenkins 2.106
      CVS Plugin 2.13
    • Similar Issues:

      Description

      Since the introduction of JEP-200 a new whitelist has to be maintained.

      CVS Plugin was not listed on https://wiki.jenkins.io/display/JENKINS/Plugins+affected+by+fix+for+JEP-200. I added it.

      Hence, I experienced the following error on a matrix build:

      java.lang.SecurityException: Rejected: java.util.Calendar; see https://jenkins.io/redirect/class-filter/
          at hudson.remoting.ClassFilter.check(ClassFilter.java:76)
          at hudson.remoting.MultiClassLoaderSerializer$Input.resolveClass(MultiClassLoaderSerializer.java:129)
          at java.io.ObjectInputStream.readNonProxyDesc(Unknown Source)
          at java.io.ObjectInputStream.readClassDesc(Unknown Source)
          at java.io.ObjectInputStream.readNonProxyDesc(Unknown Source)
          at java.io.ObjectInputStream.readClassDesc(Unknown Source)
          at java.io.ObjectInputStream.readOrdinaryObject(Unknown Source)
          at java.io.ObjectInputStream.readObject0(Unknown Source)
          at java.io.ObjectInputStream.defaultReadFields(Unknown Source)
          at java.io.ObjectInputStream.readSerialData(Unknown Source)
          at java.io.ObjectInputStream.readOrdinaryObject(Unknown Source)
          at java.io.ObjectInputStream.readObject0(Unknown Source)
          at java.io.ObjectInputStream.readObject(Unknown Source)
          at java.util.ArrayList.readObject(Unknown Source)
          at sun.reflect.GeneratedMethodAccessor86.invoke(Unknown Source)
          at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
          at java.lang.reflect.Method.invoke(Unknown Source)
          at java.io.ObjectStreamClass.invokeReadObject(Unknown Source)
          at java.io.ObjectInputStream.readSerialData(Unknown Source)
          at java.io.ObjectInputStream.readOrdinaryObject(Unknown Source)
          at java.io.ObjectInputStream.readObject0(Unknown Source)
          at java.io.ObjectInputStream.defaultReadFields(Unknown Source)
          at java.io.ObjectInputStream.readSerialData(Unknown Source)
          at java.io.ObjectInputStream.readOrdinaryObject(Unknown Source)
          at java.io.ObjectInputStream.readObject0(Unknown Source)
          at java.io.ObjectInputStream.readObject(Unknown Source)
          at hudson.remoting.UserRequest.deserialize(UserRequest.java:277)
          at hudson.remoting.UserResponse.retrieve(UserRequest.java:310)
          at hudson.remoting.Channel.call(Channel.java:952)
      Caused: java.io.IOException: Failed to deserialize response to UserRequest:hudson.scm.AbstractCvs$2@38a84e77
          at hudson.remoting.Channel.call(Channel.java:960)
          at hudson.FilePath.act(FilePath.java:998)
      Caused: java.io.IOException: remote file operation failed: /home/compil/workspace/project/label/centos7 at hudson.remoting.Channel@f24469c:VM_CentOs7
          at hudson.FilePath.act(FilePath.java:1005)
          at hudson.FilePath.act(FilePath.java:987)
          at hudson.scm.AbstractCvs.getRemoteLogForModule(AbstractCvs.java:693)
          at hudson.scm.AbstractCvs.calculateChangeLog(AbstractCvs.java:818)
          at hudson.scm.AbstractCvs.postCheckout(AbstractCvs.java:836)
          at hudson.scm.CVSSCM.checkout(CVSSCM.java:395)
          at hudson.scm.CVSSCM.checkout(CVSSCM.java:365)
          at hudson.model.AbstractProject.checkout(AbstractProject.java:1203)
          at hudson.model.AbstractBuild$AbstractBuildExecution.defaultCheckout(AbstractBuild.java:574)
          at jenkins.scm.SCMCheckoutStrategy.checkout(SCMCheckoutStrategy.java:86)
          at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:499)
          at hudson.model.Run.execute(Run.java:1727)
          at hudson.matrix.MatrixRun.run(MatrixRun.java:146)
          at hudson.model.ResourceController.execute(ResourceController.java:97)
          at hudson.model.Executor.run(Executor.java:429)
      
      
      

        Attachments

          Issue Links

            Activity

            Hide
            jglick Jesse Glick added a comment -

            Possibly you downloaded the wrong artifact pending https://github.com/jenkins-infra/pipeline-library/pull/25 then tried to run the result on a 2.102–2.106 core, which would result in the plugin not being enabled and thus not appearing. That would not apply to actual release builds, only PR artifacts.

            Show
            jglick Jesse Glick added a comment - Possibly you downloaded the wrong artifact pending  https://github.com/jenkins-infra/pipeline-library/pull/25  then tried to run the result on a 2.102–2.106 core, which would result in the plugin not being enabled and thus not appearing. That would not apply to actual release builds, only PR artifacts.
            Hide
            jglick Jesse Glick added a comment -

            the CVS radio button and section is not visible from the Configuration section

            Not sure what is going on there, but sounds like some unrelated problem with the particular build, rather than the patch per se. Not reproducible.

            Show
            jglick Jesse Glick added a comment - the CVS radio button and section is not visible from the Configuration section Not sure what is going on there, but sounds like some unrelated problem with the particular build, rather than the patch per se. Not reproducible.
            Hide
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Jesse Glick
            Path:
            Jenkinsfile
            pom.xml
            src/main/java/hudson/scm/AbstractCvs.java
            src/main/java/hudson/scm/CVSChangeLogSet.java
            src/main/java/hudson/scm/CVSSCM.java
            src/main/java/hudson/scm/CvsModuleLocation.java
            src/main/java/hudson/scm/CvsProjectset.java
            src/main/java/hudson/scm/CvsRepository.java
            src/main/java/hudson/scm/CvsRepositoryItem.java
            src/main/java/hudson/scm/CvsRepositoryLocation.java
            src/main/java/hudson/scm/CvsTagsParamDefinition.java
            src/main/java/hudson/scm/LegacyConvertor.java
            src/main/java/hudson/scm/browsers/CvsFacadeRepositoryBrowser.java
            src/main/java/hudson/scm/browsers/FishEyeCVS.java
            src/main/java/hudson/scm/cvstagging/CvsTagAction.java
            src/main/java/hudson/scm/cvstagging/LegacyTagAction.java
            src/main/resources/hudson/scm/CVSChangeLogSet/digest.jelly
            src/main/resources/hudson/scm/CVSChangeLogSet/index.jelly
            src/main/resources/hudson/scm/CVSSCM/config.jelly
            src/main/resources/hudson/scm/CVSSCM/global.jelly
            src/main/resources/hudson/scm/CvsModule/config.jelly
            src/main/resources/hudson/scm/CvsProjectset/config.jelly
            src/main/resources/hudson/scm/CvsRepository/config.jelly
            src/main/resources/hudson/scm/CvsRepositoryItem/config.jelly
            src/main/resources/hudson/scm/CvsRepositoryLocation/BranchRepositoryLocation/config.jelly
            src/main/resources/hudson/scm/CvsRepositoryLocation/HeadRepositoryLocation/config.jelly
            src/main/resources/hudson/scm/CvsRepositoryLocation/TagRepositoryLocation/config.jelly
            src/main/resources/hudson/scm/CvsTagsParamDefinition/config.jelly
            src/main/resources/hudson/scm/CvsTagsParamDefinition/index.jelly
            src/main/resources/hudson/scm/CvsTagsParamValue/value.jelly
            src/main/resources/hudson/scm/ExcludedRegion/config.jelly
            src/main/resources/hudson/scm/browsers/FishEyeCVS/config.jelly
            src/main/resources/hudson/scm/browsers/OpenGrok/config.jelly
            src/main/resources/hudson/scm/browsers/ViewCVS/config.jelly
            src/main/resources/hudson/scm/cvstagging/CvsTagAction/tagForm.jelly
            src/main/resources/hudson/scm/cvstagging/LegacyTagAction/tagForm.jelly
            src/main/resources/index.jelly
            src/test/java/hudson/scm/IntegrationTest.java
            http://jenkins-ci.org/commit/cvs-plugin/b06434d590add2c631622d32c30db76a6aaa3103
            Log:
            Merge pull request #46 from jglick/JEP-200-JENKINS-49574

            JENKINS-49574 JEP-200 compatibility

            Compare: https://github.com/jenkinsci/cvs-plugin/compare/25e0d5f18785...b06434d590ad

            Show
            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Jesse Glick Path: Jenkinsfile pom.xml src/main/java/hudson/scm/AbstractCvs.java src/main/java/hudson/scm/CVSChangeLogSet.java src/main/java/hudson/scm/CVSSCM.java src/main/java/hudson/scm/CvsModuleLocation.java src/main/java/hudson/scm/CvsProjectset.java src/main/java/hudson/scm/CvsRepository.java src/main/java/hudson/scm/CvsRepositoryItem.java src/main/java/hudson/scm/CvsRepositoryLocation.java src/main/java/hudson/scm/CvsTagsParamDefinition.java src/main/java/hudson/scm/LegacyConvertor.java src/main/java/hudson/scm/browsers/CvsFacadeRepositoryBrowser.java src/main/java/hudson/scm/browsers/FishEyeCVS.java src/main/java/hudson/scm/cvstagging/CvsTagAction.java src/main/java/hudson/scm/cvstagging/LegacyTagAction.java src/main/resources/hudson/scm/CVSChangeLogSet/digest.jelly src/main/resources/hudson/scm/CVSChangeLogSet/index.jelly src/main/resources/hudson/scm/CVSSCM/config.jelly src/main/resources/hudson/scm/CVSSCM/global.jelly src/main/resources/hudson/scm/CvsModule/config.jelly src/main/resources/hudson/scm/CvsProjectset/config.jelly src/main/resources/hudson/scm/CvsRepository/config.jelly src/main/resources/hudson/scm/CvsRepositoryItem/config.jelly src/main/resources/hudson/scm/CvsRepositoryLocation/BranchRepositoryLocation/config.jelly src/main/resources/hudson/scm/CvsRepositoryLocation/HeadRepositoryLocation/config.jelly src/main/resources/hudson/scm/CvsRepositoryLocation/TagRepositoryLocation/config.jelly src/main/resources/hudson/scm/CvsTagsParamDefinition/config.jelly src/main/resources/hudson/scm/CvsTagsParamDefinition/index.jelly src/main/resources/hudson/scm/CvsTagsParamValue/value.jelly src/main/resources/hudson/scm/ExcludedRegion/config.jelly src/main/resources/hudson/scm/browsers/FishEyeCVS/config.jelly src/main/resources/hudson/scm/browsers/OpenGrok/config.jelly src/main/resources/hudson/scm/browsers/ViewCVS/config.jelly src/main/resources/hudson/scm/cvstagging/CvsTagAction/tagForm.jelly src/main/resources/hudson/scm/cvstagging/LegacyTagAction/tagForm.jelly src/main/resources/index.jelly src/test/java/hudson/scm/IntegrationTest.java http://jenkins-ci.org/commit/cvs-plugin/b06434d590add2c631622d32c30db76a6aaa3103 Log: Merge pull request #46 from jglick/JEP-200- JENKINS-49574 JENKINS-49574 JEP-200 compatibility Compare: https://github.com/jenkinsci/cvs-plugin/compare/25e0d5f18785...b06434d590ad
            Hide
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Oleg Nenashev
            Path:
            src/test/java/hudson/scm/JEP200Test.java
            http://jenkins-ci.org/commit/cvs-plugin/6f2103cc2ddbb9b90283668b9eed2d4a81c62ac8
            Log:
            JENKINS-49574 - Remove forgotten import in tests

            Show
            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Oleg Nenashev Path: src/test/java/hudson/scm/JEP200Test.java http://jenkins-ci.org/commit/cvs-plugin/6f2103cc2ddbb9b90283668b9eed2d4a81c62ac8 Log: JENKINS-49574 - Remove forgotten import in tests
            Hide
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Oleg Nenashev
            Path:
            src/main/resources/META-INF/hudson.remoting.ClassFilter
            src/test/java/hudson/scm/JEP200Test.java
            http://jenkins-ci.org/commit/cvs-plugin/c9172d8d113a6ae092d62f6c06426975fb1f7fed
            Log:
            JENKINS-49574 - Whitelist calendar classes and improve the unit test

            Show
            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Oleg Nenashev Path: src/main/resources/META-INF/hudson.remoting.ClassFilter src/test/java/hudson/scm/JEP200Test.java http://jenkins-ci.org/commit/cvs-plugin/c9172d8d113a6ae092d62f6c06426975fb1f7fed Log: JENKINS-49574 - Whitelist calendar classes and improve the unit test

              People

              • Assignee:
                jglick Jesse Glick
                Reporter:
                adrien Adrien CLERC
              • Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: