Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-50237

[JEP-200] java.lang.SecurityException: Rejected: org.apache.tools.ant.Location

        [JENKINS-50237] [JEP-200] java.lang.SecurityException: Rejected: org.apache.tools.ant.Location

        Christian Schneider created issue -

        Oleg Nenashev added a comment -

        Oops, it really seems to be a defect in the core.
        Apparently we do not have enough test coverage for FilePath#list(final FileFilter filter).

        I have reviewed the code, and I see no direct usages of org.apache.tools.ant.Location in the stacktrace's codebase. But it apparently happens during the response deserialization for core-internal method... Will investigate tomorrow

        Oleg Nenashev added a comment - Oops, it really seems to be a defect in the core. Apparently we do not have enough test coverage for FilePath#list(final FileFilter filter). I have reviewed the code, and I see no direct usages of org.apache.tools.ant.Location in the stacktrace's codebase. But it apparently happens during the response deserialization for core-internal method... Will investigate tomorrow
        Oleg Nenashev made changes -
        Assignee New: Oleg Nenashev [ oleg_nenashev ]
        Daniel Beck made changes -
        Labels Original: JEP-200 New: JEP-200 lts-candidate regression
        Oleg Nenashev made changes -
        Status Original: Open [ 1 ] New: In Progress [ 3 ]
        Oleg Nenashev made changes -
        Status Original: In Progress [ 3 ] New: In Review [ 10005 ]

        Oleg Nenashev added a comment -

        From what I see it happens if and only if the target directory does not exist OR if the glob filter is invalid. Anyway, I have created https://github.com/jenkinsci/jenkins/pull/3358

        It is an LTS candidate for sure, but I doubt it justifies out-of-order LTS release on its own

        Oleg Nenashev added a comment - From what I see it happens if and only if the target directory does not exist OR if the glob filter is invalid. Anyway, I have created https://github.com/jenkinsci/jenkins/pull/3358 It is an LTS candidate for sure, but I doubt it justifies out-of-order LTS release on its own
        Oleg Nenashev made changes -
        Remote Link New: This issue links to "https://github.com/jenkinsci/jenkins/pull/3358 (Web Link)" [ 20275 ]
        Jesse Glick made changes -
        Remote Link New: This issue links to "remoting PR 263 (Web Link)" [ 20276 ]
        Jesse Glick made changes -
        Remote Link New: This issue links to "core PR 3359 (Web Link)" [ 20277 ]

          oleg_nenashev Oleg Nenashev
          chschneider89 Christian Schneider
          Votes:
          0 Vote for this issue
          Watchers:
          4 Start watching this issue

            Created:
            Updated:
            Resolved: