-
Bug
-
Resolution: Fixed
-
Blocker
-
Jenkins 2.103
CppNCSS plugin 1.1
As in summary - after upgrading Jenkins all jobs using CppNCSS plugin fail with SecurityException. Whitelisting java.utils.Calendar does not help (or I'm doing it wrong).
Quick look into plugin's code shows "Calendar" being used in BuildProxy class, which is marked Serializable...
Complete info from build log:
java.lang.SecurityException: Rejected: java.util.Calendar
at hudson.remoting.ClassFilter.check(ClassFilter.java:75)
at hudson.remoting.MultiClassLoaderSerializer$Input.resolveClass(MultiClassLoaderSerializer.java:129)
at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1863)
at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1746)
at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1880)
at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1746)
at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:2037)
at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1568)
at java.io.ObjectInputStream.defaultReadFields(ObjectInputStream.java:2282)
at java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:2206)
at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:2064)
at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1568)
at java.io.ObjectInputStream.readObject(ObjectInputStream.java:428)
at hudson.remoting.UserRequest.deserialize(UserRequest.java:277)
at hudson.remoting.UserResponse.retrieve(UserRequest.java:310)
at hudson.remoting.Channel.call(Channel.java:909)
at hudson.FilePath.act(FilePath.java:1093)
at hudson.plugins.helpers.BuildProxy.doPerform(BuildProxy.java:68)
at hudson.plugins.helpers.AbstractPublisherImpl.perform(AbstractPublisherImpl.java:30)
at hudson.tasks.BuildStepMonitor$1.perform(BuildStepMonitor.java:20)
at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:744)
at hudson.model.AbstractBuild$AbstractBuildExecution.performAllBuildSteps(AbstractBuild.java:690)
at hudson.model.Build$BuildExecution.post2(Build.java:186)
at hudson.model.AbstractBuild$AbstractBuildExecution.post(AbstractBuild.java:635)
at hudson.model.Run.execute(Run.java:1752)
at hudson.matrix.MatrixRun.run(MatrixRun.java:146)
at hudson.model.ResourceController.execute(ResourceController.java:97)
at hudson.model.Executor.run(Executor.java:429)
ERROR: Build step failed with exception
java.lang.SecurityException: Rejected: java.util.Calendar
at hudson.remoting.ClassFilter.check(ClassFilter.java:75)
at hudson.remoting.MultiClassLoaderSerializer$Input.resolveClass(MultiClassLoaderSerializer.java:129)
at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1863)
at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1746)
at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1880)
at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1746)
at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:2037)
at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1568)
at java.io.ObjectInputStream.defaultReadFields(ObjectInputStream.java:2282)
at java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:2206)
at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:2064)
at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1568)
at java.io.ObjectInputStream.readObject(ObjectInputStream.java:428)
at hudson.remoting.UserRequest.deserialize(UserRequest.java:277)
at hudson.remoting.UserResponse.retrieve(UserRequest.java:310)
at hudson.remoting.Channel.call(Channel.java:909)
at hudson.FilePath.act(FilePath.java:1093)
at hudson.plugins.helpers.BuildProxy.doPerform(BuildProxy.java:68)
Caused: java.lang.RuntimeException: Unexpected exception
at hudson.plugins.helpers.BuildProxy.unwrapException(BuildProxy.java:115)
at hudson.plugins.helpers.BuildProxy.doPerform(BuildProxy.java:77)
at hudson.plugins.helpers.AbstractPublisherImpl.perform(AbstractPublisherImpl.java:30)
at hudson.tasks.BuildStepMonitor$1.perform(BuildStepMonitor.java:20)
at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:744)
at hudson.model.AbstractBuild$AbstractBuildExecution.performAllBuildSteps(AbstractBuild.java:690)
at hudson.model.Build$BuildExecution.post2(Build.java:186)
at hudson.model.AbstractBuild$AbstractBuildExecution.post(AbstractBuild.java:635)
at hudson.model.Run.execute(Run.java:1752)
at hudson.matrix.MatrixRun.run(MatrixRun.java:146)
at hudson.model.ResourceController.execute(ResourceController.java:97)
at hudson.model.Executor.run(Executor.java:429)
Build step 'Publish Cpp NCSS Report' marked build as failure
- is related to
-
JENKINS-47736 JEP-200: Switch Remoting/XStream blacklist to a whitelist
-
- Resolved
-
- links to
Code changed in jenkins
User: Oleg Nenashev
Path:
src/main/java/hudson/plugins/cppncss/AbstractBuildReport.java
src/main/java/hudson/plugins/cppncss/parser/FormattedStatisticSummary.java
src/main/java/hudson/plugins/cppncss/parser/Statistic.java
src/main/java/hudson/plugins/cppncss/parser/StatisticSummary.java
src/main/java/hudson/plugins/cppncss/parser/StatisticsTotalResult.java
src/main/java/hudson/plugins/cppncss/parser/StringStatisticSummary.java
src/main/java/hudson/plugins/helpers/AbstractBuildAction.java
src/main/resources/hudson/plugins/cppncss/parser/FormattedStatisticSummary/summary.jelly
src/main/resources/hudson/plugins/cppncss/parser/StringStatisticSummary/summary.jelly
src/main/resources/hudson/plugins/helpers/AbstractBuildAction/summary.jelly
http://jenkins-ci.org/commit/cppncss-plugin/8309ec95b82e5cf249f3757bb5ab0eabfa5b330c
Log:
JENKINS-49237- Fix escaping of StatisticSummary