[JIRA] (JENKINS-48967) JEP-200:Refusing to marshal java.io.PrintStream for security reasons

[bupt851@gmail.com (JIRA)]

Roberta T guo commented on JENKINS-48967

Re: JEP-200:Refusing to marshal java.io.PrintStream for security reasons I just upgraded my Jenkins to v2.114 yesterday and I am able to reproduce this issue. When a Jenkins job is done, at very end of its console output, I always see this. Here is the full stacktrace- New build name is '#43' FATAL: java.lang.RuntimeException: Failed to serialize hudson.model.Actionable#actions for class hudson.model.FreeStyleBuild java.lang.UnsupportedOperationException: Refusing to marshal java.io.PrintStream for security reasons; see https://jenkins.io/redirect/class-filter/ at hudson.util.XStream2$BlacklistedTypesConverter.marshal(XStream2.java:543) at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69) at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58) at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84) at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265) at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252) Caused: java.lang.RuntimeException: Failed to serialize org.jenkinsci.plugins.EnvironmentVarSetter#log for class org.jenkinsci.plugins.EnvironmentVarSetter at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256) at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224) at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138) at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209) at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150) at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69) at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58) at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43) at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:88) at com.thoughtworks.xstream.converters.collections.AbstractCollectionConverter.writeItem(AbstractCollectionConverter.java:64) at com.thoughtworks.xstream.converters.collections.CollectionConverter.marshal(CollectionConverter.java:74) at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69) at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58) at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84) at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265) at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252) Caused: java.lang.RuntimeException: Failed to serialize hudson.model.Actionable#actions for class hudson.model.FreeStyleBuild at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256) at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224) at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138) at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209) at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150) at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69) at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58) at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43) at com.thoughtworks.xstream.core.TreeMarshaller.start(TreeMarshaller.java:82) at com.thoughtworks.xstream.core.AbstractTreeMarshallingStrategy.marshal(AbstractTreeMarshallingStrategy.java:37) at com.thoughtworks.xstream.XStream.marshal(XStream.java:1026) at com.thoughtworks.xstream.XStream.marshal(XStream.java:1015) at com.thoughtworks.xstream.XStream.toXML(XStream.java:988) at hudson.XmlFile.write(XmlFile.java:193) Caused: java.io.IOException at hudson.XmlFile.write(XmlFile.java:200) at hudson.model.Run.save(Run.java:1923) at hudson.model.Run.setDisplayName(Run.java:803) at org.jenkinsci.plugins.buildnamesetter.BuildNameSetter.setDisplayName(BuildNameSetter.java:76) at org.jenkinsci.plugins.buildnamesetter.BuildNameSetter.access$000(BuildNameSetter.java:31) at org.jenkinsci.plugins.buildnamesetter.BuildNameSetter$1.tearDown(BuildNameSetter.java:64) at hudson.model.Build$BuildExecution.doRun(Build.java:174) at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:504) at hudson.model.Run.execute(Run.java:1727) at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43) at hudson.model.ResourceController.execute(ResourceController.java:97) at hudson.model.Executor.run(Executor.java:429)   Add Comment

This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e)

[o.v.nenashev@gmail.com (JIRA)]

Oleg Nenashev commented on JENKINS-48967

Re: JEP-200:Refusing to marshal java.io.PrintStream for security reasons

Roberta T guo have you updated the Build Name Setter plugin as suggested in https://wiki.jenkins.io/display/JENKINS/Plugins+affected+by+fix+for+JEP-200 ?

Add Comment

[bupt851@gmail.com (JIRA)]

Roberta T guo commented on JENKINS-48967

Re: JEP-200:Refusing to marshal java.io.PrintStream for security reasons

Hi Oleg, We are using Build-name-setter v1.6.7. There is v1.6.9 available. Since our jenkins is in production, I have to try to update it when few users use it. Will update you after updating this plugin to v1.6.9.

Add Comment

[bupt851@gmail.com (JIRA)]

Roberta T guo commented on JENKINS-48967

Re: JEP-200:Refusing to marshal java.io.PrintStream for security reasons

Hi Oleg, Verified that updating the Build-name-setter plugin solved this issue.

Add Comment

[o.v.nenashev@gmail.com (JIRA)]

Oleg Nenashev commented on JENKINS-48967

Re: JEP-200:Refusing to marshal java.io.PrintStream for security reasons

Great, thanks for the update!

Add Comment

[chetanrajiv777@gmail.com (JIRA)]

Chetan Rajiv sirigiri commented on JENKINS-48967

Re: JEP-200:Refusing to marshal java.io.PrintStream for security reasons

FATAL: java.lang.RuntimeException: Failed to serialize hudson.model.Actionable#actions for class hudson.model.FreeStyleBuild

at hudson.model.Run.save(Run.java:1994) at hudson.model.Run.setDisplayName(Run.java:805)

at org.jenkinsci.plugins.buildnamesetter.BuildNameSetter.setDisplayName(BuildNameSetter.java:76) at org.jenkinsci.plugins.buildnamesetter.BuildNameSetter.access$000(BuildNameSetter.java:31) at org.jenkinsci.plugins.buildnamesetter.BuildNameSetter$1.tearDown(BuildNameSetter.java:64) at hudson.model.Build$BuildExecution.doRun(Build.java:174) at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:504)

at hudson.model.Run.execute(Run.java:1798)

at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43) at hudson.model.ResourceController.execute(ResourceController.java:97) at hudson.model.Executor.run(Executor.java:429)

Add Comment

This message was sent by Atlassian JIRA (v7.10.1#710002-sha1:6efc396)

[chetanrajiv777@gmail.com (JIRA)]

Chetan Rajiv sirigiri commented on JENKINS-48967

Re: JEP-200:Refusing to marshal java.io.PrintStream for security reasons

This exception mentioned in above comment is same as reported here. i have updated the build-name-setter plugin. after updating this plugin would this update the failed jobs also??? if that is the case , my failed job with this exception is not fixed after updating the plugin. can you help me understand this

Add Comment

[o.v.nenashev@gmail.com (JIRA)]

Oleg Nenashev commented on JENKINS-48967

Re: JEP-200:Refusing to marshal java.io.PrintStream for security reasons

Chetan Rajiv sirigiri it is another issue in another plugin "Caused: java.lang.RuntimeException: Failed to serialize org.jenkinsci.plugins.EnvironmentVarSetter#log for class org.jenkinsci.plugins.EnvironmentVarSetter". Please report an issue to the Environment Var Setter plugin

Add Comment

[sharmaabhyudaya@gmail.com (JIRA)]

Abhyudaya Sharma assigned an issue to Abhyudaya Sharma

Jenkins / JENKINS-48967

JEP-200:Refusing to marshal java.io.PrintStream for security reasons

Change By: Abhyudaya Sharma Assignee: Abhyudaya Sharma

Add Comment

This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d)

[sharmaabhyudaya@gmail.com (JIRA)]

Abhyudaya Sharma assigned an issue to Unassigned