Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-49573

Matrix Configuration Parameter Plugin is affected by JEP-200

      We are not able to run our matrix jobs since we upgraded our Jenkins server to 2.106

      The issue what is logged in the console:

      FATAL: java.lang.RuntimeException: Failed to serialize hudson.model.Actionable#actions for class hudson.matrix.MatrixBuild
      java.lang.UnsupportedOperationException: Refusing to marshal com.google.common.collect.Lists$TransformingRandomAccessList for security reasons; see https://jenkins.io/redirect/class-filter/
      	at hudson.util.XStream2$BlacklistedTypesConverter.marshal(XStream2.java:543)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
      	at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)
      Caused: java.lang.RuntimeException: Failed to serialize java.util.Collections$UnmodifiableCollection#c for class java.util.Collections$UnmodifiableList
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)
      	at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)
      	at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)
      	at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)
      	at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
      	at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)
      Caused: java.lang.RuntimeException: Failed to serialize hudson.plugins.matrix_configuration_parameter.shortcut.ResultShortcut#resultsToCheck for class hudson.plugins.matrix_configuration_parameter.shortcut.ResultShortcut
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)
      	at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)
      	at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)
      	at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)
      	at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:88)
      	at com.thoughtworks.xstream.converters.collections.AbstractCollectionConverter.writeItem(AbstractCollectionConverter.java:64)
      	at com.thoughtworks.xstream.converters.collections.ArrayConverter.marshal(ArrayConverter.java:45)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
      	at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)
      Caused: java.lang.RuntimeException: Failed to serialize java.util.Arrays$ArrayList#a for class java.util.Arrays$ArrayList
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)
      	at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)
      	at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)
      	at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)
      	at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
      	at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)
      Caused: java.lang.RuntimeException: Failed to serialize hudson.plugins.matrix_configuration_parameter.MatrixCombinationsParameterDefinition#shortcutList for class hudson.plugins.matrix_configuration_parameter.MatrixCombinationsParameterDefinition
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)
      	at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)
      	at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)
      	at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)
      	at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:88)
      	at com.thoughtworks.xstream.converters.collections.AbstractCollectionConverter.writeItem(AbstractCollectionConverter.java:64)
      	at com.thoughtworks.xstream.converters.collections.CollectionConverter.marshal(CollectionConverter.java:74)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
      	at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)
      Caused: java.lang.RuntimeException: Failed to serialize hudson.model.ParametersDefinitionProperty#parameterDefinitions for class hudson.model.ParametersDefinitionProperty
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)
      	at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)
      	at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)
      	at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)
      	at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
      	at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)
      Caused: java.lang.RuntimeException: Failed to serialize hudson.model.ParametersDefinitionProperty$1#this$0 for class hudson.model.ParametersDefinitionProperty$1
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)
      	at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)
      	at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)
      	at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)
      	at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
      	at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)
      Caused: java.lang.RuntimeException: Failed to serialize hudson.model.ParametersAction#parameterDefinitionNames for class hudson.model.ParametersAction
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)
      	at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)
      	at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)
      	at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)
      	at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:88)
      	at com.thoughtworks.xstream.converters.collections.AbstractCollectionConverter.writeItem(AbstractCollectionConverter.java:64)
      	at com.thoughtworks.xstream.converters.collections.CollectionConverter.marshal(CollectionConverter.java:74)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
      	at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)
      Caused: java.lang.RuntimeException: Failed to serialize hudson.model.Actionable#actions for class hudson.matrix.MatrixBuild
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)
      	at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)
      	at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)
      	at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)
      	at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43)
      	at com.thoughtworks.xstream.core.TreeMarshaller.start(TreeMarshaller.java:82)
      	at com.thoughtworks.xstream.core.AbstractTreeMarshallingStrategy.marshal(AbstractTreeMarshallingStrategy.java:37)
      	at com.thoughtworks.xstream.XStream.marshal(XStream.java:1026)
      	at com.thoughtworks.xstream.XStream.marshal(XStream.java:1015)
      	at com.thoughtworks.xstream.XStream.toXML(XStream.java:988)
      	at hudson.XmlFile.write(XmlFile.java:193)
      Caused: java.io.IOException
      	at hudson.XmlFile.write(XmlFile.java:200)
      	at hudson.model.Run.save(Run.java:1923)
      	at hudson.model.Run.setDisplayName(Run.java:803)
      	at org.jenkinsci.plugins.buildnamesetter.BuildNameSetter.setDisplayName(BuildNameSetter.java:76)
      	at org.jenkinsci.plugins.buildnamesetter.BuildNameSetter.access$000(BuildNameSetter.java:31)
      	at org.jenkinsci.plugins.buildnamesetter.BuildNameSetter$2.startBuild(BuildNameSetter.java:87)
      	at hudson.matrix.DefaultMatrixExecutionStrategyImpl.notifyStartBuild(DefaultMatrixExecutionStrategyImpl.java:214)
      	at hudson.matrix.DefaultMatrixExecutionStrategyImpl.run(DefaultMatrixExecutionStrategyImpl.java:129)
      	at hudson.matrix.MatrixBuild$MatrixBuildExecution.doRun(MatrixBuild.java:366)
      	at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:504)
      	at hudson.model.Run.execute(Run.java:1727)
      	at hudson.matrix.MatrixBuild.run(MatrixBuild.java:314)
      	at hudson.model.ResourceController.execute(ResourceController.java:97)
      	at hudson.model.Executor.run(Executor.java:429)
      Set build name.
      New build name is 'DEV_ECOM_WEB.David Gangel.master'
      FATAL: java.lang.RuntimeException: Failed to serialize hudson.model.Actionable#actions for class hudson.matrix.MatrixBuild
      java.lang.UnsupportedOperationException: Refusing to marshal com.google.common.collect.Lists$TransformingRandomAccessList for security reasons; see https://jenkins.io/redirect/class-filter/
      	at hudson.util.XStream2$BlacklistedTypesConverter.marshal(XStream2.java:543)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
      	at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)
      Caused: java.lang.RuntimeException: Failed to serialize java.util.Collections$UnmodifiableCollection#c for class java.util.Collections$UnmodifiableList
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)
      	at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)
      	at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)
      	at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)
      	at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
      	at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)
      Caused: java.lang.RuntimeException: Failed to serialize hudson.plugins.matrix_configuration_parameter.shortcut.ResultShortcut#resultsToCheck for class hudson.plugins.matrix_configuration_parameter.shortcut.ResultShortcut
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)
      	at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)
      	at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)
      	at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)
      	at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:88)
      	at com.thoughtworks.xstream.converters.collections.AbstractCollectionConverter.writeItem(AbstractCollectionConverter.java:64)
      	at com.thoughtworks.xstream.converters.collections.ArrayConverter.marshal(ArrayConverter.java:45)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
      	at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)
      Caused: java.lang.RuntimeException: Failed to serialize java.util.Arrays$ArrayList#a for class java.util.Arrays$ArrayList
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)
      	at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)
      	at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)
      	at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)
      	at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
      	at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)
      Caused: java.lang.RuntimeException: Failed to serialize hudson.plugins.matrix_configuration_parameter.MatrixCombinationsParameterDefinition#shortcutList for class hudson.plugins.matrix_configuration_parameter.MatrixCombinationsParameterDefinition
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)
      	at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)
      	at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)
      	at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)
      	at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:88)
      	at com.thoughtworks.xstream.converters.collections.AbstractCollectionConverter.writeItem(AbstractCollectionConverter.java:64)
      	at com.thoughtworks.xstream.converters.collections.CollectionConverter.marshal(CollectionConverter.java:74)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
      	at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)
      Caused: java.lang.RuntimeException: Failed to serialize hudson.model.ParametersDefinitionProperty#parameterDefinitions for class hudson.model.ParametersDefinitionProperty
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)
      	at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)
      	at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)
      	at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)
      	at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
      	at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)
      Caused: java.lang.RuntimeException: Failed to serialize hudson.model.ParametersDefinitionProperty$1#this$0 for class hudson.model.ParametersDefinitionProperty$1
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)
      	at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)
      	at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)
      	at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)
      	at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
      	at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)
      Caused: java.lang.RuntimeException: Failed to serialize hudson.model.ParametersAction#parameterDefinitionNames for class hudson.model.ParametersAction
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)
      	at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)
      	at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)
      	at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)
      	at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:88)
      	at com.thoughtworks.xstream.converters.collections.AbstractCollectionConverter.writeItem(AbstractCollectionConverter.java:64)
      	at com.thoughtworks.xstream.converters.collections.CollectionConverter.marshal(CollectionConverter.java:74)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
      	at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)
      Caused: java.lang.RuntimeException: Failed to serialize hudson.model.Actionable#actions for class hudson.matrix.MatrixBuild
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)
      	at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)
      	at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)
      	at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)
      	at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43)
      	at com.thoughtworks.xstream.core.TreeMarshaller.start(TreeMarshaller.java:82)
      	at com.thoughtworks.xstream.core.AbstractTreeMarshallingStrategy.marshal(AbstractTreeMarshallingStrategy.java:37)
      	at com.thoughtworks.xstream.XStream.marshal(XStream.java:1026)
      	at com.thoughtworks.xstream.XStream.marshal(XStream.java:1015)
      	at com.thoughtworks.xstream.XStream.toXML(XStream.java:988)
      	at hudson.XmlFile.write(XmlFile.java:193)
      Caused: java.io.IOException
      	at hudson.XmlFile.write(XmlFile.java:200)
      	at hudson.model.Run.save(Run.java:1923)
      	at hudson.model.Run.setDisplayName(Run.java:803)
      	at org.jenkinsci.plugins.buildnamesetter.BuildNameSetter.setDisplayName(BuildNameSetter.java:76)
      	at org.jenkinsci.plugins.buildnamesetter.BuildNameSetter.access$000(BuildNameSetter.java:31)
      	at org.jenkinsci.plugins.buildnamesetter.BuildNameSetter$2.endBuild(BuildNameSetter.java:93)
      	at hudson.matrix.MatrixBuild$MatrixBuildExecution.post2(MatrixBuild.java:424)
      	at hudson.model.AbstractBuild$AbstractBuildExecution.post(AbstractBuild.java:635)
      	at hudson.model.Run.execute(Run.java:1752)
      	at hudson.matrix.MatrixBuild.run(MatrixBuild.java:314)
      	at hudson.model.ResourceController.execute(ResourceController.java:97)
      	at hudson.model.Executor.run(Executor.java:429)
      

          [JENKINS-49573] Matrix Configuration Parameter Plugin is affected by JEP-200

          Oleg Nenashev added a comment -

          Actually this is Matrix Configuration Parameter plugin

          Oleg Nenashev added a comment - Actually this is Matrix Configuration Parameter plugin

          David Gangel added a comment -

          oleg_nenashev thank you for the correction! Based on your comment for temporally we are able to come out from the blocked state simply by removing this plugin until the issue is fixed.

          David Gangel added a comment - oleg_nenashev thank you for the correction! Based on your comment for temporally we are able to come out from the blocked state simply by removing this plugin until the issue is fixed.

          Oleg Nenashev added a comment -

          Code causing that:

          public ResultShortcut(String name, boolean exact, Result... results) {
                  this(name, exact, Lists.transform(
                      Arrays.asList(results),
                      new Function<Result, String>() {
                          public String apply(Result result) {
                              return result.toString();
                          }
                  }));
              }
          

          We will likely need to whitelist it in the plugin and then whitelist it to the core

          Oleg Nenashev added a comment - Code causing that: public ResultShortcut( String name, boolean exact, Result... results) { this (name, exact, Lists.transform( Arrays.asList(results), new Function<Result, String >() { public String apply(Result result) { return result.toString(); } })); } We will likely need to whitelist it in the plugin and then whitelist it to the core

          Oleg Nenashev added a comment -

          Oleg Nenashev added a comment - https://github.com/jenkinsci/matrix-combinations-plugin/pull/23

          Jesse Glick added a comment -

          PR 23 is not right. PR 25 solves the issue for new installations, including in functional tests, but does not yet address compatibility.

          From actually looking at the stack trace, there is more going on than was initially suspected.

          First of all, even without any patch, the problem is not reproducible for jobs newly configured with current versions of the plugin, even if you start with a pre-2.102 version of Jenkins! That is because the @DataBoundConstructor, which is used whenever you actually save from a current configuration form, does not directly use the getDefaultShortcutList() method, which is the problematic one since that is the only production code to call the problematic ResultShortcut overload taking Result.... (There is some test code which calls this, which is why functional tests can reproduce a stack trace, but these are not exercising a realistic code path.) The method is called from MatrixCombinationsParameterDefinition/config.jelly, but the result is then “flattened” into an HTML form, which upon submission calls the usual List<String> resultsToCheck constructor and there is no problem.

          The problem, AFAICT, comes from older settings (pre-1.1.0, according to code comments) where MatrixCombinationsParameterDefinition.readResolve is called which in turns calls a MatrixCombinationsParameterDefinition overload that calls getDefaultShortcutList(). But even that should not really be a problem: either you are just loading the old config.xml, which lacks a shortcutList field so the in-memory version gets it populated, but there is no serialization or deserialization of ResultShortcut, so there is no JEP-200 issue; or you clicked Configure and resaved the project, in which case again the configuration is flattened and the List<String> overload is used, which bypasses Lists.transform and thus any JEP-200 problems. In principle there could be some code which calls Job.save without going through the configuration form, and that could crash, but this is unusual.

          So back to that stack trace. If you look at the sequence of fields being written, and the top-level object, you will see that the problem is not in saving the job configuration at all! It is in saving a build. But this makes no sense—a ParameterDefinition is part of job-level configuration. All that the build needs to store is ParameterValue instances. The stack trace starts to make sense when you look at a build.xml record saved by an old version of Jenkins:

          <hudson.model.ParametersAction>
            <parameters>
              <hudson.plugins.matrix__configuration__parameter.MatrixCombinationsParameterValue plugin="matrix-combinations-parameter@1.2.1-SNAPSHOT">
                <name>x</name>
                <description></description>
                <combinations class="java.util.Collections$UnmodifiableRandomAccessList" resolves-to="java.util.Collections$UnmodifiableList">
                  <c class="list">
                    <string>x=b,y=2</string>
                  </c>
                  <list reference="../c"/>
                </combinations>
              </hudson.plugins.matrix__configuration__parameter.MatrixCombinationsParameterValue>
            </parameters>
          </hudson.model.ParametersAction>
          

          OK, the use of unmodifiable lists in the XStream form is gratuitous, but nothing here really harmful. And then by a new version of Jenkins:

          <hudson.model.ParametersAction>
            <safeParameters class="sorted-set"/>
            <parameters>
              <hudson.plugins.matrix__configuration__parameter.MatrixCombinationsParameterValue plugin="matrix-combinations-parameter@1.2.1-SNAPSHOT">
                <!-- as before… -->
              </hudson.plugins.matrix__configuration__parameter.MatrixCombinationsParameterValue>
            </parameters>
            <parameterDefinitionNames class="hudson.model.ParametersDefinitionProperty$1"> <!-- !!! -->
              <outer-class>
                <parameterDefinitions>
                  <hudson.plugins.matrix__configuration__parameter.MatrixCombinationsParameterDefinition plugin="matrix-combinations-parameter@1.2.1-SNAPSHOT">
                    <name>x</name>
                    <description></description>
                    <shortcutList>
                      <hudson.plugins.matrix__configuration__parameter.shortcut.ResultShortcut>
                        <name>Successful</name>
                        <exact>false</exact>
                        <resultsToCheck class="java.util.Collections$UnmodifiableRandomAccessList" resolves-to="java.util.Collections$UnmodifiableList">
                          <c class="list">
                            <string>SUCCESS</string>
                          </c>
                          <list reference="../c"/>
                        </resultsToCheck>
                      </hudson.plugins.matrix__configuration__parameter.shortcut.ResultShortcut>
                      <!-- …and 3 more -->
                    </shortcutList>
                  </hudson.plugins.matrix__configuration__parameter.MatrixCombinationsParameterDefinition>
                </parameterDefinitions>
              </outer-class>
            </parameterDefinitionNames>
          </hudson.model.ParametersAction>
          

          So this is copying the whole <parameterDefinitions> section from the job’s config.xml. So now if we are loading an old config.xml, which contains no problematic types, and populating some of the deeply nested fields (resultsToCheck) in memory with problematic types even though we do not save them back to config.xml, when we go to do a build those types do get saved to build.xml and everything explodes.

          And this is all due to a core bug, evidently introduced by SECURITY-170. Until now, no one bothered to look at a parameterized build.xml, I guess, because if you do the problem is pretty obvious.

          Jesse Glick added a comment - PR 23 is not right. PR 25 solves the issue for new installations, including in functional tests, but does not yet address compatibility. From actually looking at the stack trace, there is more going on than was initially suspected. First of all, even without any patch, the problem is not reproducible for jobs newly configured with current versions of the plugin, even if you start with a pre-2.102 version of Jenkins! That is because the @DataBoundConstructor , which is used whenever you actually save from a current configuration form, does not directly use the getDefaultShortcutList() method, which is the problematic one since that is the only production code to call the problematic ResultShortcut overload taking Result... . (There is some test code which calls this, which is why functional tests can reproduce a stack trace, but these are not exercising a realistic code path.) The method is called from MatrixCombinationsParameterDefinition/config.jelly , but the result is then “flattened” into an HTML form, which upon submission calls the usual List<String> resultsToCheck constructor and there is no problem. The problem, AFAICT, comes from older settings (pre-1.1.0, according to code comments) where MatrixCombinationsParameterDefinition.readResolve is called which in turns calls a MatrixCombinationsParameterDefinition overload that calls getDefaultShortcutList() . But even that should not really be a problem: either you are just loading the old config.xml , which lacks a shortcutList field so the in-memory version gets it populated, but there is no serialization or deserialization of ResultShortcut , so there is no JEP-200 issue; or you clicked Configure and resaved the project, in which case again the configuration is flattened and the List<String> overload is used, which bypasses Lists.transform and thus any JEP-200 problems. In principle there could be some code which calls Job.save without going through the configuration form, and that could crash, but this is unusual. So back to that stack trace. If you look at the sequence of fields being written, and the top-level object, you will see that the problem is not in saving the job configuration at all! It is in saving a build . But this makes no sense—a ParameterDefinition is part of job-level configuration. All that the build needs to store is ParameterValue instances. The stack trace starts to make sense when you look at a build.xml record saved by an old version of Jenkins: <hudson.model.ParametersAction> <parameters> <hudson.plugins.matrix__configuration__parameter.MatrixCombinationsParameterValue plugin= "matrix-combinations-parameter@1.2.1-SNAPSHOT" > <name> x </name> <description> </description> <combinations class= "java.util.Collections$UnmodifiableRandomAccessList" resolves-to= "java.util.Collections$UnmodifiableList" > <c class= "list" > <string> x=b,y=2 </string> </c> <list reference= "../c" /> </combinations> </hudson.plugins.matrix__configuration__parameter.MatrixCombinationsParameterValue> </parameters> </hudson.model.ParametersAction> OK, the use of unmodifiable lists in the XStream form is gratuitous, but nothing here really harmful. And then by a new version of Jenkins: <hudson.model.ParametersAction> <safeParameters class= "sorted-set" /> <parameters> <hudson.plugins.matrix__configuration__parameter.MatrixCombinationsParameterValue plugin= "matrix-combinations-parameter@1.2.1-SNAPSHOT" > <!-- as before… --> </hudson.plugins.matrix__configuration__parameter.MatrixCombinationsParameterValue> </parameters> <parameterDefinitionNames class= "hudson.model.ParametersDefinitionProperty$1" > <!-- !!! --> <outer-class> <parameterDefinitions> <hudson.plugins.matrix__configuration__parameter.MatrixCombinationsParameterDefinition plugin= "matrix-combinations-parameter@1.2.1-SNAPSHOT" > <name> x </name> <description> </description> <shortcutList> <hudson.plugins.matrix__configuration__parameter.shortcut.ResultShortcut> <name> Successful </name> <exact> false </exact> <resultsToCheck class= "java.util.Collections$UnmodifiableRandomAccessList" resolves-to= "java.util.Collections$UnmodifiableList" > <c class= "list" > <string> SUCCESS </string> </c> <list reference= "../c" /> </resultsToCheck> </hudson.plugins.matrix__configuration__parameter.shortcut.ResultShortcut> <!-- …and 3 more --> </shortcutList> </hudson.plugins.matrix__configuration__parameter.MatrixCombinationsParameterDefinition> </parameterDefinitions> </outer-class> </parameterDefinitionNames> </hudson.model.ParametersAction> So this is copying the whole <parameterDefinitions> section from the job’s config.xml . So now if we are loading an old config.xml , which contains no problematic types, and populating some of the deeply nested fields ( resultsToCheck ) in memory with problematic types even though we do not save them back to config.xml , when we go to do a build those types do get saved to build.xml and everything explodes. And this is all due to a core bug, evidently introduced by SECURITY-170. Until now, no one bothered to look at a parameterized build.xml , I guess, because if you do the problem is pretty obvious.

          Oleg Nenashev added a comment -

          Nice catch

          Oleg Nenashev added a comment - Nice catch

          Jesse Glick added a comment -

          I also plan to file a core PR to fix ParametersAction and, if possible, help us avoid repeating this class if mistake.

          Jesse Glick added a comment - I also plan to file a core PR to fix ParametersAction and, if possible, help us avoid repeating this class if mistake.

          Code changed in jenkins
          User: Oleg Nenashev
          Path:
          pom.xml
          http://jenkins-ci.org/commit/matrix-combinations-plugin/ed119b2954d2e00fcd5ab4263a23e584c872ef48
          Log:
          JENKINS-49573 - Update plugin POM to the last version, use Jenkins 1.625.3 as a new baseline

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Oleg Nenashev Path: pom.xml http://jenkins-ci.org/commit/matrix-combinations-plugin/ed119b2954d2e00fcd5ab4263a23e584c872ef48 Log: JENKINS-49573 - Update plugin POM to the last version, use Jenkins 1.625.3 as a new baseline

          Code changed in jenkins
          User: Oleg Nenashev
          Path:
          src/test/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsJenkinsRule.java
          src/test/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsParameterDefinitionTest.java
          src/test/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsParameterValueTest.java
          src/test/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsRebuildParameterProviderTest.java
          http://jenkins-ci.org/commit/matrix-combinations-plugin/9a04e33b1503744d9aa9d10fc2e7b9ad1b33745f
          Log:
          JENKINS-49573 - Fix tests depending on Matrix Project and obsolete Markup formatter

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Oleg Nenashev Path: src/test/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsJenkinsRule.java src/test/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsParameterDefinitionTest.java src/test/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsParameterValueTest.java src/test/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsRebuildParameterProviderTest.java http://jenkins-ci.org/commit/matrix-combinations-plugin/9a04e33b1503744d9aa9d10fc2e7b9ad1b33745f Log: JENKINS-49573 - Fix tests depending on Matrix Project and obsolete Markup formatter

          Code changed in jenkins
          User: Oleg Nenashev
          Path:
          src/test/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsParameterDefinitionTest.java
          http://jenkins-ci.org/commit/matrix-combinations-plugin/c262b1631f71ffcacd74034558260a57e75c0936
          Log:
          JENKINS-49573 - Fix issues with Script Security and URL which now requires Crumb

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Oleg Nenashev Path: src/test/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsParameterDefinitionTest.java http://jenkins-ci.org/commit/matrix-combinations-plugin/c262b1631f71ffcacd74034558260a57e75c0936 Log: JENKINS-49573 - Fix issues with Script Security and URL which now requires Crumb

          Code changed in jenkins
          User: Oleg Nenashev
          Path:
          src/main/resources/META-INF/hudson.remoting.ClassFilter
          http://jenkins-ci.org/commit/matrix-combinations-plugin/f286e8e79ad8f2f7e21855b81c54073081898f82
          Log:
          JENKINS-49573 - Whitelist the Guava collection missing in the core whitelist

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Oleg Nenashev Path: src/main/resources/META-INF/hudson.remoting.ClassFilter http://jenkins-ci.org/commit/matrix-combinations-plugin/f286e8e79ad8f2f7e21855b81c54073081898f82 Log: JENKINS-49573 - Whitelist the Guava collection missing in the core whitelist

          Code changed in jenkins
          User: Oleg Nenashev
          Path:
          Jenkinsfile
          http://jenkins-ci.org/commit/matrix-combinations-plugin/44c6c731a18710681effbd501987ea2a584a1982
          Log:
          JENKINS-49573 - Add Jenkinsfile

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Oleg Nenashev Path: Jenkinsfile http://jenkins-ci.org/commit/matrix-combinations-plugin/44c6c731a18710681effbd501987ea2a584a1982 Log: JENKINS-49573 - Add Jenkinsfile

          Code changed in jenkins
          User: Oleg Nenashev
          Path:
          src/main/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsParameterValue.java
          src/main/java/hudson/plugins/matrix_configuration_parameter/shortcut/MatrixCombinationsShortcutDescriptor.java
          http://jenkins-ci.org/commit/matrix-combinations-plugin/c9f0aa122286e63adec22a82387f34e4ec703c9d
          Log:
          JENKINS-49573 - Also fix FindBugs issues

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Oleg Nenashev Path: src/main/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsParameterValue.java src/main/java/hudson/plugins/matrix_configuration_parameter/shortcut/MatrixCombinationsShortcutDescriptor.java http://jenkins-ci.org/commit/matrix-combinations-plugin/c9f0aa122286e63adec22a82387f34e4ec703c9d Log: JENKINS-49573 - Also fix FindBugs issues

          Code changed in jenkins
          User: Jesse Glick
          Path:
          src/test/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsRebuildParameterProviderTest.java
          http://jenkins-ci.org/commit/matrix-combinations-plugin/fb6bcd5a8c0ccddd0708e19969ddc610f0a958b0
          Log:
          Ignoring test which fails due to JENKINS-49573.

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Jesse Glick Path: src/test/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsRebuildParameterProviderTest.java http://jenkins-ci.org/commit/matrix-combinations-plugin/fb6bcd5a8c0ccddd0708e19969ddc610f0a958b0 Log: Ignoring test which fails due to JENKINS-49573 .

          Code changed in jenkins
          User: ikedam
          Path:
          Jenkinsfile
          pom.xml
          src/main/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsParameterDefinition.java
          src/main/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsParameterValue.java
          src/main/java/hudson/plugins/matrix_configuration_parameter/shortcut/MatrixCombinationsShortcutDescriptor.java
          src/main/java/hudson/plugins/matrix_configuration_parameter/shortcut/ResultShortcut.java
          src/test/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsJenkinsRule.java
          src/test/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsParameterDefinitionTest.java
          src/test/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsParameterValueTest.java
          src/test/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsRebuildParameterProviderTest.java
          src/test/resources/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsParameterDefinitionTest/compat/jobs/p/config.xml
          src/test/resources/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsParameterDefinitionTest/hairyCompat/jobs/p/config.xml
          http://jenkins-ci.org/commit/matrix-combinations-plugin/db3d32a84d50be6b145c96e4fa15904c719ee518
          Log:
          Merge pull request #25 from jglick/JEP-200-JENKINS-49573

          JENKINS-49573 JEP-200 compatibility

          Compare: https://github.com/jenkinsci/matrix-combinations-plugin/compare/3a433dd80e0b...db3d32a84d50

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: ikedam Path: Jenkinsfile pom.xml src/main/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsParameterDefinition.java src/main/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsParameterValue.java src/main/java/hudson/plugins/matrix_configuration_parameter/shortcut/MatrixCombinationsShortcutDescriptor.java src/main/java/hudson/plugins/matrix_configuration_parameter/shortcut/ResultShortcut.java src/test/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsJenkinsRule.java src/test/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsParameterDefinitionTest.java src/test/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsParameterValueTest.java src/test/java/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsRebuildParameterProviderTest.java src/test/resources/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsParameterDefinitionTest/compat/jobs/p/config.xml src/test/resources/hudson/plugins/matrix_configuration_parameter/MatrixCombinationsParameterDefinitionTest/hairyCompat/jobs/p/config.xml http://jenkins-ci.org/commit/matrix-combinations-plugin/db3d32a84d50be6b145c96e4fa15904c719ee518 Log: Merge pull request #25 from jglick/JEP-200- JENKINS-49573 JENKINS-49573 JEP-200 compatibility Compare: https://github.com/jenkinsci/matrix-combinations-plugin/compare/3a433dd80e0b...db3d32a84d50

          Code changed in jenkins
          User: ikedam
          Path:
          pom.xml
          http://jenkins-ci.org/commit/matrix-combinations-plugin/a314877620b1ba16be24d15e8f43d2dde294a3ee
          Log:
          JENKINS-49573 Depend on matrix-project 1.4.1 bundled with Jenkins-1.625.3

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: ikedam Path: pom.xml http://jenkins-ci.org/commit/matrix-combinations-plugin/a314877620b1ba16be24d15e8f43d2dde294a3ee Log: JENKINS-49573 Depend on matrix-project 1.4.1 bundled with Jenkins-1.625.3

          Code changed in jenkins
          User: ikedam
          Path:
          pom.xml
          http://jenkins-ci.org/commit/matrix-combinations-plugin/14a2368c9e40e5e39c0390520ae7648d33993152
          Log:
          JENKINS-49573 Use matrix-project 1.7 which fixes SECURITY-170 for tests with latest cores

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: ikedam Path: pom.xml http://jenkins-ci.org/commit/matrix-combinations-plugin/14a2368c9e40e5e39c0390520ae7648d33993152 Log: JENKINS-49573 Use matrix-project 1.7 which fixes SECURITY-170 for tests with latest cores

          Code changed in jenkins
          User: ikedam
          Path:
          pom.xml
          http://jenkins-ci.org/commit/matrix-combinations-plugin/ef078ad88a822ff2639fa4b7f2d55b225e08fba2
          Log:
          JENKINS-49573 Target Jenkins 1.651.3 with SECURITY-170

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: ikedam Path: pom.xml http://jenkins-ci.org/commit/matrix-combinations-plugin/ef078ad88a822ff2639fa4b7f2d55b225e08fba2 Log: JENKINS-49573 Target Jenkins 1.651.3 with SECURITY-170

          Code changed in jenkins
          User: ikedam
          Path:
          pom.xml
          http://jenkins-ci.org/commit/matrix-combinations-plugin/4058e9d766b08f7b27cfbfb5c9c36deabeeb9ba9
          Log:
          Merge pull request #24 from ikedam/feature/JENKINS-49573

          JENKINS-49573 core-1.651.3 + matrix-project-1.7

          Compare: https://github.com/jenkinsci/matrix-combinations-plugin/compare/db3d32a84d50...4058e9d766b0

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: ikedam Path: pom.xml http://jenkins-ci.org/commit/matrix-combinations-plugin/4058e9d766b08f7b27cfbfb5c9c36deabeeb9ba9 Log: Merge pull request #24 from ikedam/feature/ JENKINS-49573 JENKINS-49573 core-1.651.3 + matrix-project-1.7 Compare: https://github.com/jenkinsci/matrix-combinations-plugin/compare/db3d32a84d50...4058e9d766b0

          Jesse Glick added a comment -

          Merged but apparently not yet released.

          Jesse Glick added a comment - Merged but apparently not yet released.

          ikedam added a comment -

          1.3.0 with this fix is released.
          It will be available in the update center in a day.

          ikedam added a comment - 1.3.0 with this fix is released. It will be available in the update center in a day.

          Code changed in jenkins
          User: Jesse Glick
          Path:
          core/src/main/java/hudson/model/ParametersAction.java
          core/src/main/java/jenkins/security/ClassFilterImpl.java
          test/src/test/java/hudson/model/ParametersAction2Test.java
          http://jenkins-ci.org/commit/jenkins/fcae9bb59881a8878774e4ebbe563935ed1382b4
          Log:
          JENKINS-49573 Fix bad serialization of ParametersAction.parameterDefinitionNames and make sure this kind of mistake produces a warning in the future.

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Jesse Glick Path: core/src/main/java/hudson/model/ParametersAction.java core/src/main/java/jenkins/security/ClassFilterImpl.java test/src/test/java/hudson/model/ParametersAction2Test.java http://jenkins-ci.org/commit/jenkins/fcae9bb59881a8878774e4ebbe563935ed1382b4 Log: JENKINS-49573 Fix bad serialization of ParametersAction.parameterDefinitionNames and make sure this kind of mistake produces a warning in the future.

          After upgrading to Jenkins 2.110 and actually presumably JENKINS-49795 I saw the following warning logs:

          2018-03-07 08:51:04 WARNING [jenkins.security.ClassFilterImpl lambda$isBlacklisted$1]   JENKINS-49573: attempt to (de-)serialize anonymous class jenkins.install.InstallState$6 in file:/var/cache/jenkins/war/WEB-INF/lib/jenkins-core-2.110.jar
          ...
          2018-03-07 08:53:41 WARNING [jenkins.security.ClassFilterImpl lambda$isBlacklisted$1]   JENKINS-49573: attempt to (de-)serialize anonymous class hudson.model.ParametersDefinitionProperty$1 in file:/var/cache/jenkins/war/WEB-INF/lib/jenkins-core-2.110.jar
          2018-03-07 08:58:51 WARNING [jenkins.security.ClassFilterImpl lambda$isBlacklisted$1]   JENKINS-49573: attempt to (de-)serialize anonymous class org.jenkinsci.plugins.pipeline.modeldefinition.ast.ModelASTValue$1 in file:/var/lib/jenkins/plugins/pipeline-model-api/WEB-INF/lib/pipeline-model-api.jar
          2018-03-07 08:58:51 WARNING [jenkins.security.ClassFilterImpl lambda$isBlacklisted$1]   JENKINS-49573: attempt to (de-)serialize anonymous class org.jenkinsci.plugins.pipeline.modeldefinition.ast.ModelASTValue$2 in file:/var/lib/jenkins/plugins/pipeline-model-api/WEB-INF/lib/pipeline-model-api.jar
          
          1. May I assume that this issue (JENKINS-49573) is already addressing and resolving the problem(s) and the affected plugins/changes will be released in the near future?
          2. Or is it helpful to comment such occurrences here, when stumbling over them?

          Reinhold Füreder added a comment - After upgrading to Jenkins 2.110 and actually presumably JENKINS-49795 I saw the following warning logs: 2018-03-07 08:51:04 WARNING [jenkins.security.ClassFilterImpl lambda$isBlacklisted$1] JENKINS-49573: attempt to (de-)serialize anonymous class jenkins.install.InstallState$6 in file:/var/cache/jenkins/war/WEB-INF/lib/jenkins-core-2.110.jar ... 2018-03-07 08:53:41 WARNING [jenkins.security.ClassFilterImpl lambda$isBlacklisted$1] JENKINS-49573: attempt to (de-)serialize anonymous class hudson.model.ParametersDefinitionProperty$1 in file:/var/cache/jenkins/war/WEB-INF/lib/jenkins-core-2.110.jar 2018-03-07 08:58:51 WARNING [jenkins.security.ClassFilterImpl lambda$isBlacklisted$1] JENKINS-49573: attempt to (de-)serialize anonymous class org.jenkinsci.plugins.pipeline.modeldefinition.ast.ModelASTValue$1 in file:/var/lib/jenkins/plugins/pipeline-model-api/WEB-INF/lib/pipeline-model-api.jar 2018-03-07 08:58:51 WARNING [jenkins.security.ClassFilterImpl lambda$isBlacklisted$1] JENKINS-49573: attempt to (de-)serialize anonymous class org.jenkinsci.plugins.pipeline.modeldefinition.ast.ModelASTValue$2 in file:/var/lib/jenkins/plugins/pipeline-model-api/WEB-INF/lib/pipeline-model-api.jar May I assume that this issue ( JENKINS-49573 ) is already addressing and resolving the problem(s) and the affected plugins/changes will be released in the near future? Or is it helpful to comment such occurrences here, when stumbling over them?

          Oleg Nenashev added a comment -

          reinholdfuereder Yes, it is JENKINS-49795. It should have fixed in 2.110 for Install State: https://github.com/jenkinsci/jenkins/pull/3325 (CC jglick, maybe something is missed).

          For the rest of the warnings I suggest bugs in Jenkins JIRA

          Oleg Nenashev added a comment - reinholdfuereder Yes, it is JENKINS-49795 . It should have fixed in 2.110 for Install State: https://github.com/jenkinsci/jenkins/pull/3325 (CC jglick , maybe something is missed). For the rest of the warnings I suggest bugs in Jenkins JIRA

          oleg_nenashev Thanks for your fast response. And sorry for my potentially "spammy" response comment as I am not fully sure to understand you correctly:

          After another restart (due to updating a few Jenkins plugins) I really do not see/get the first warning anymore (the Install State one), but the remaining three:

          2018-03-07 11:39:37 WARNING [jenkins.security.ClassFilterImpl lambda$isBlacklisted$1]   JENKINS-49573: attempt to (de-)serialize anonymous class org.jenkinsci.plugins.pipeline.modeldefinition.ast.ModelASTValue$1 in file:/var/lib/jenkins/plugins/pipeline-model-api/WEB-INF/lib/pipeline-model-api.jar
          2018-03-07 11:39:37 WARNING [jenkins.security.ClassFilterImpl lambda$isBlacklisted$1]   JENKINS-49573: attempt to (de-)serialize anonymous class org.jenkinsci.plugins.pipeline.modeldefinition.ast.ModelASTValue$2 in file:/var/lib/jenkins/plugins/pipeline-model-api/WEB-INF/lib/pipeline-model-api.jar
          2018-03-07 11:39:38 WARNING [jenkins.security.ClassFilterImpl lambda$isBlacklisted$1]   JENKINS-49573: attempt to (de-)serialize anonymous class hudson.model.ParametersDefinitionProperty$1 in file:/var/cache/jenkins/war/WEB-INF/lib/jenkins-core-2.110.jar
          

          => I will therefore file 2 bugs in Jenkins JIRA and link them to JENKINS-49573

          Reinhold Füreder added a comment - oleg_nenashev Thanks for your fast response. And sorry for my potentially "spammy" response comment as I am not fully sure to understand you correctly: After another restart (due to updating a few Jenkins plugins) I really do not see/get the first warning anymore (the Install State one), but the remaining three: 2018-03-07 11:39:37 WARNING [jenkins.security.ClassFilterImpl lambda$isBlacklisted$1] JENKINS-49573: attempt to (de-)serialize anonymous class org.jenkinsci.plugins.pipeline.modeldefinition.ast.ModelASTValue$1 in file:/var/lib/jenkins/plugins/pipeline-model-api/WEB-INF/lib/pipeline-model-api.jar 2018-03-07 11:39:37 WARNING [jenkins.security.ClassFilterImpl lambda$isBlacklisted$1] JENKINS-49573: attempt to (de-)serialize anonymous class org.jenkinsci.plugins.pipeline.modeldefinition.ast.ModelASTValue$2 in file:/var/lib/jenkins/plugins/pipeline-model-api/WEB-INF/lib/pipeline-model-api.jar 2018-03-07 11:39:38 WARNING [jenkins.security.ClassFilterImpl lambda$isBlacklisted$1] JENKINS-49573: attempt to (de-)serialize anonymous class hudson.model.ParametersDefinitionProperty$1 in file:/var/cache/jenkins/war/WEB-INF/lib/jenkins-core-2.110.jar => I will therefore file 2 bugs in Jenkins JIRA and link them to JENKINS-49573

          Code changed in jenkins
          User: Jesse Glick
          Path:
          core/src/main/java/jenkins/security/ClassFilterImpl.java
          http://jenkins-ci.org/commit/jenkins/48c95f5aee999a7fbf6d30f3a1e92eabf3723a02
          Log:
          s/JENKINS-49573/JENKINS-49795/g in messages.

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Jesse Glick Path: core/src/main/java/jenkins/security/ClassFilterImpl.java http://jenkins-ci.org/commit/jenkins/48c95f5aee999a7fbf6d30f3a1e92eabf3723a02 Log: s/ JENKINS-49573 / JENKINS-49795 /g in messages.

          Code changed in jenkins
          User: Jesse Glick
          Path:
          core/src/main/java/jenkins/security/ClassFilterImpl.java
          http://jenkins-ci.org/commit/jenkins/93b951046f95275f1a7d55e2e96392476b5a7a24
          Log:
          Merge pull request #3332 from jglick/message-JENKINS-49795

          s/JENKINS-49573/JENKINS-49795/g in messages

          Compare: https://github.com/jenkinsci/jenkins/compare/c5e96fb6180b...93b951046f95

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Jesse Glick Path: core/src/main/java/jenkins/security/ClassFilterImpl.java http://jenkins-ci.org/commit/jenkins/93b951046f95275f1a7d55e2e96392476b5a7a24 Log: Merge pull request #3332 from jglick/message- JENKINS-49795 s/ JENKINS-49573 / JENKINS-49795 /g in messages Compare: https://github.com/jenkinsci/jenkins/compare/c5e96fb6180b...93b951046f95

          Code changed in jenkins
          User: Jesse Glick
          Path:
          core/src/main/java/hudson/model/ParametersAction.java
          http://jenkins-ci.org/commit/jenkins/5d4a76d28423dea1aedbb7ee73e9444a834b2ff9
          Log:
          JENKINS-49573 Fix bad serialization of ParametersAction.parameterDefinitionNames.

          (cherry picked part of commit fcae9bb59881a8878774e4ebbe563935ed1382b4)

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Jesse Glick Path: core/src/main/java/hudson/model/ParametersAction.java http://jenkins-ci.org/commit/jenkins/5d4a76d28423dea1aedbb7ee73e9444a834b2ff9 Log: JENKINS-49573 Fix bad serialization of ParametersAction.parameterDefinitionNames. (cherry picked part of commit fcae9bb59881a8878774e4ebbe563935ed1382b4)

          Oleg Nenashev added a comment -

          The patch in the core has been backported to 2.107.2. jglick for the future it would be better to create separate issues to simplify the backporting process

          Oleg Nenashev added a comment - The patch in the core has been backported to 2.107.2. jglick for the future it would be better to create separate issues to simplify the backporting process

            jglick Jesse Glick
            gangeld David Gangel
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: