Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-49788

ConcurrentLinkedQueue is missing from whitelisted-classes.txt



    • Type: Bug
    • Status: Resolved (View Workflow)
    • Priority: Minor
    • Resolution: Fixed
    • Component/s: core
    • Environment:
      Jenkins v 2.109

      java version "1.8.0_161"
      Java(TM) SE Runtime Environment (build 1.8.0_161-b12)
      Java HotSpot(TM) 64-Bit Server VM (build 25.161-b12, mixed mode)
    • Similar Issues:


      We make use of the ConcurrentLinkedQueue class, and which is not white-listed like other concurrent collections are. The unmarshalling and marshalling of the field fails with the following error:

      Feb 28, 2018 9:08:22 AM WARNING jenkins.security.ClassFilterImpl lambda$isBlacklisted$1
      java.util.concurrent.ConcurrentLinkedQueue in JRE might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/

      java.lang.UnsupportedOperationException: Refusing to marshal java.util.concurrent.ConcurrentLinkedQueue for security reasons; see https://jenkins.io/redirect/class-filter/
          at hudson.util.XStream2$BlacklistedTypesConverter.marshal(XStream2.java:543)
          at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
          at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
          at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
          at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
          at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)



          tfiskgul Carl-Frederik Hallberg created issue -
          oleg_nenashev Oleg Nenashev made changes -
          Field Original Value New Value
          Assignee Oleg Nenashev [ oleg_nenashev ]
          oleg_nenashev Oleg Nenashev made changes -
          Status Open [ 1 ] In Progress [ 3 ]
          oleg_nenashev Oleg Nenashev made changes -
          Status In Progress [ 3 ] In Review [ 10005 ]
          oleg_nenashev Oleg Nenashev made changes -
          Remote Link This issue links to "https://github.com/jenkinsci/jenkins/pull/3315 (Web Link)" [ 20185 ]
          oleg_nenashev Oleg Nenashev made changes -
          Labels JEP-200 JEP-200 lts-candidate
          oleg_nenashev Oleg Nenashev made changes -
          Status In Review [ 10005 ] Resolved [ 5 ]
          Resolution Fixed [ 1 ]
          olivergondza Oliver Gondža made changes -
          Labels JEP-200 lts-candidate 2.107.2-fixed JEP-200


            • Assignee:
              oleg_nenashev Oleg Nenashev
              tfiskgul Carl-Frederik Hallberg
            • Votes:
              0 Vote for this issue
              3 Start watching this issue


              • Created: