[JENKINS-49282] Caused by: java.lang.UnsupportedOperationException: Refusing to marshal org.kohsuke.github.GHRepository for security reasons;

Type: Bug
Resolution: Cannot Reproduce
Priority: Major
Component/s: github-api-plugin
Labels:
- JEP-200
- invalid
Environment:

Hide
Jenkins 2.104 (alpine docker image)
running on amazon ecs

amazon-ecs:1.11
aws-credentials:1.23
aws-java-sdk:1.11.264
bouncycastle-api:2.16.2
cloudbees-folder:6.3
config-file-provider:2.17
credentials-binding:1.14
credentials:2.1.16
display-url-api:2.2.0
envinject-api:1.5
envinject:2.1.5
git-client:2.7.1
git:3.7.0
github-api:1.90
github:1.29.0
gradle:1.28
jackson2-api:2.8.10.1
job-dsl:1.67
junit:1.23
mailer:1.20
matrix-project:1.12
plain-credentials:1.4
scm-api:2.2.6
script-security:1.40
ssh-credentials:1.13
structs:1.10
token-macro:2.3
workflow-scm-step:2.6
workflow-step-api:2.14

Show
Jenkins 2.104 (alpine docker image) running on amazon ecs amazon-ecs:1.11 aws-credentials:1.23 aws-java-sdk:1.11.264 bouncycastle-api:2.16.2 cloudbees-folder:6.3 config-file-provider:2.17 credentials-binding:1.14 credentials:2.1.16 display-url-api:2.2.0 envinject-api:1.5 envinject:2.1.5 git-client:2.7.1 git:3.7.0 github-api:1.90 github:1.29.0 gradle:1.28 jackson2-api:2.8.10.1 job-dsl:1.67 junit:1.23 mailer:1.20 matrix-project:1.12 plain-credentials:1.4 scm-api:2.2.6 script-security:1.40 ssh-credentials:1.13 structs:1.10 token-macro:2.3 workflow-scm-step:2.6 workflow-step-api:2.14

Similar Issues:
Powered by SuggestiMate

Show
Epic Link:
JEP-200: Switch Remoting/XStream blacklist to a whitelist

java.io.IOException: java.lang.RuntimeException: Failed to serialize hudson.model.Actionable#actions for class org.jenkinsci.plugins.workflow.job.WorkflowRun
 at hudson.XmlFile.write(XmlFile.java:201)
 at org.jenkinsci.plugins.workflow.support.PipelineIOUtils.writeByXStream(PipelineIOUtils.java:30)
 at org.jenkinsci.plugins.workflow.job.WorkflowRun.save(WorkflowRun.java:1070)
 at hudson.BulkChange.commit(BulkChange.java:98)
 at org.jenkinsci.plugins.workflow.cps.CpsFlowExecution.notifyListeners(CpsFlowExecution.java:1377)
 at org.jenkinsci.plugins.workflow.cps.CpsThreadGroup$3.run(CpsThreadGroup.java:412)
 at org.jenkinsci.plugins.workflow.cps.CpsVmExecutorService$1.run(CpsVmExecutorService.java:35)
 at hudson.remoting.SingleLaneExecutorService$1.run(SingleLaneExecutorService.java:131)
 at jenkins.util.ContextResettingExecutorService$1.run(ContextResettingExecutorService.java:28)
 at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
 at java.util.concurrent.FutureTask.run(FutureTask.java:266)
 at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
 at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
 at java.lang.Thread.run(Thread.java:748)
Caused by: java.lang.RuntimeException: Failed to serialize hudson.model.Actionable#actions for class org.jenkinsci.plugins.workflow.job.WorkflowRun
 at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)
 at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)
 at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)
 at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)
 at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)
 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
 at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
 at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43)
 at com.thoughtworks.xstream.core.TreeMarshaller.start(TreeMarshaller.java:82)
 at com.thoughtworks.xstream.core.AbstractTreeMarshallingStrategy.marshal(AbstractTreeMarshallingStrategy.java:37)
 at com.thoughtworks.xstream.XStream.marshal(XStream.java:1026)
 at com.thoughtworks.xstream.XStream.marshal(XStream.java:1015)
 at com.thoughtworks.xstream.XStream.toXML(XStream.java:988)
 at hudson.XmlFile.write(XmlFile.java:194)
 ... 13 more
Caused by: java.lang.RuntimeException: Failed to serialize org.jenkinsci.plugins.githubautostatus.BuildStatusAction#buildStatuses for class org.jenkinsci.plugins.githubautostatus.BuildStatusAction
 at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)
 at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)
 at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)
 at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)
 at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)
 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
 at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
 at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43)
 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:88)
 at com.thoughtworks.xstream.converters.collections.AbstractCollectionConverter.writeItem(AbstractCollectionConverter.java:64)
 at com.thoughtworks.xstream.converters.collections.CollectionConverter.marshal(CollectionConverter.java:74)
 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
 at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
 at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
 at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)
 ... 26 more
Caused by: java.lang.RuntimeException: Failed to serialize org.jenkinsci.plugins.githubautostatus.BuildStatus#repository for class org.jenkinsci.plugins.githubautostatus.BuildStatus
 at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)
 at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)
 at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)
 at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)
 at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)
 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
 at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
 at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43)
 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:88)
 at com.thoughtworks.xstream.converters.collections.AbstractCollectionConverter.writeItem(AbstractCollectionConverter.java:64)
 at com.thoughtworks.xstream.converters.collections.MapConverter.marshal(MapConverter.java:79)
 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
 at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
 at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
 at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)
 ... 41 more
Caused by: java.lang.UnsupportedOperationException: Refusing to marshal org.kohsuke.github.GHRepository for security reasons; see https://jenkins.io/redirect/class-filter/
 at hudson.util.XStream2$BlacklistedTypesConverter.marshal(XStream2.java:530)
 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
 at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
 at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
 at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)
 ... 56 more

relates to

JENKINS-48950 JEP-200: GHPRB Plugin Fails Whitelist

Resolved

JENKINS-49294 GitHub Autostatus Plugin is affected by JEP-200 on Jenkins 2.102+

Closed

wesley Brown added a comment - 2018-01-30 23:28

Just remembered that my workers are cloudbees/[jnlp-slave-with-java-build-tools|https://hub.docker.com/r/cloudbees/jnlp-slave-with-java-build-tools/]

wesley Brown added a comment - 2018-01-30 23:28 Just remembered that my workers are cloudbees /[jnlp-slave-with-java-build-tools|https://hub.docker.com/r/cloudbees/jnlp-slave-with-java-build-tools/]

Oleg Nenashev added a comment - 2018-01-31 05:07

Please provide a full build log and Pipeline script. Seems like a context issue

Oleg Nenashev added a comment - 2018-01-31 05:07 Please provide a full build log and Pipeline script. Seems like a context issue

Oleg Nenashev added a comment - 2018-01-31 14:32

GHPRB plugin is not installed, do it is not ~~JENKINS-48950~~. But the symptoms are similar

Oleg Nenashev added a comment - 2018-01-31 14:32 GHPRB plugin is not installed, do it is not JENKINS-48950 . But the symptoms are similar

Oleg Nenashev added a comment - 2018-01-31 14:36

There are plugins like GitHub Autostatus Plugin, which serialize GHRepository: https://github.com/jenkinsci/github-autostatus-plugin/blob/819fb5e9d03b4144113237f98b1ac8a5379fdb5d/src/main/java/org/jenkinsci/plugins/githubautostatus/BuildStatusAction.java#L56

Oleg Nenashev added a comment - 2018-01-31 14:36 There are plugins like GitHub Autostatus Plugin, which serialize GHRepository: https://github.com/jenkinsci/github-autostatus-plugin/blob/819fb5e9d03b4144113237f98b1ac8a5379fdb5d/src/main/java/org/jenkinsci/plugins/githubautostatus/BuildStatusAction.java#L56

Oleg Nenashev added a comment - 2018-01-31 14:59

Created a ticket for GitHub autostatus: ~~JENKINS-49294~~. It would be perfectly fit the reported issue, but the plugin is not listed in the Environment

Oleg Nenashev added a comment - 2018-01-31 14:59 Created a ticket for GitHub autostatus: JENKINS-49294 . It would be perfectly fit the reported issue, but the plugin is not listed in the Environment

Oleg Nenashev added a comment - 2018-02-01 10:06

Ping wesley_b We need more details to diagnose this issue

Oleg Nenashev added a comment - 2018-02-01 10:06 Ping wesley_b We need more details to diagnose this issue

Oleg Nenashev added a comment - 2018-02-14 12:33

No response from the issue reporter. Closing as "Cannot reproduce"

Oleg Nenashev added a comment - 2018-02-14 12:33 No response from the issue reporter. Closing as "Cannot reproduce"

Assignee:: Unassigned

Reporter:: wesley Brown

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Created:: 2018-01-30 22:46

Updated:: 2024-07-11 23:33

Resolved:: 2018-02-14 12:33

Details

Description

Attachments

Issue Links

Activity

Collapse comment: wesley Brown added a comment - 2018-01-30 23:28

Expand comment: wesley Brown added a comment - 2018-01-30 23:28

Collapse comment: Oleg Nenashev added a comment - 2018-01-31 05:07

Expand comment: Oleg Nenashev added a comment - 2018-01-31 05:07

Collapse comment: Oleg Nenashev added a comment - 2018-01-31 14:32

Expand comment: Oleg Nenashev added a comment - 2018-01-31 14:32

Collapse comment: Oleg Nenashev added a comment - 2018-01-31 14:36

Expand comment: Oleg Nenashev added a comment - 2018-01-31 14:36

Collapse comment: Oleg Nenashev added a comment - 2018-01-31 14:59

Expand comment: Oleg Nenashev added a comment - 2018-01-31 14:59

Collapse comment: Oleg Nenashev added a comment - 2018-02-01 10:06

Expand comment: Oleg Nenashev added a comment - 2018-02-01 10:06

Collapse comment: Oleg Nenashev added a comment - 2018-02-14 12:33

Expand comment: Oleg Nenashev added a comment - 2018-02-14 12:33

People

Dates