ClassCircularityError using Jenkins Plugin

[lgreg...@gmail.com]

Hello,

When I attempt to run the dependency check via Jenkins plugin, the build hands indefinitely, and the following is seen in jenkins.err.log:

Mar 13, 2014 9:24:09 AM hudson.model.Executor run
SEVERE: Executor threw an exception
java.lang.ClassCircularityError: java/util/logging/LogRecord
    at org.owasp.dependencycheck.utils.LogFilter.isLoggable(LogFilter.java:39)
    at java.util.logging.Handler.isLoggable(Unknown Source)
    at java.util.logging.StreamHandler.isLoggable(Unknown Source)
    at java.util.logging.FileHandler.publish(Unknown Source)
    at java.util.logging.Logger.log(Unknown Source)
    at java.util.logging.Logger.doLog(Unknown Source)
    at java.util.logging.Logger.log(Unknown Source)
    at java.util.logging.Logger.warning(Unknown Source)
    at hudson.model.Run.onEndBuilding(Run.java:1834)
    at hudson.model.Run.execute(Run.java:1746)
    at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
    at hudson.model.ResourceController.execute(ResourceController.java:88)
    at hudson.model.Executor.run(Executor.java:231)
Mar 13, 2014 9:24:09 AM hudson.model.Executor run
SEVERE: Unexpected executor death
java.lang.ClassCircularityError: java/util/logging/LogRecord
    at org.owasp.dependencycheck.utils.LogFilter.isLoggable(LogFilter.java:39)
    at java.util.logging.Handler.isLoggable(Unknown Source)
    at java.util.logging.StreamHandler.isLoggable(Unknown Source)
    at java.util.logging.FileHandler.publish(Unknown Source)
    at java.util.logging.Logger.log(Unknown Source)
    at java.util.logging.Logger.doLog(Unknown Source)
    at java.util.logging.Logger.log(Unknown Source)
    at hudson.model.Executor.run(Executor.java:242)
Exception in thread "Executor #0 for master : executing Owasp Dependency Test #12" java.lang.ClassCircularityError: java/util/logging/LogRecord
    at org.owasp.dependencycheck.utils.LogFilter.isLoggable(LogFilter.java:39)
    at java.util.logging.Handler.isLoggable(Unknown Source)
    at java.util.logging.StreamHandler.isLoggable(Unknown Source)
    at java.util.logging.FileHandler.publish(Unknown Source)
    at java.util.logging.Logger.log(Unknown Source)
    at java.util.logging.Logger.doLog(Unknown Source)
    at java.util.logging.Logger.log(Unknown Source)
    at hudson.model.Executor.run(Executor.java:259)
Mar 13, 2014 9:24:09 AM org.eclipse.jetty.util.log.JavaUtilLog warn
WARNING: handle failed
java.lang.ClassCircularityError: java/util/logging/LogRecord
    at org.owasp.dependencycheck.utils.LogFilter.isLoggable(LogFilter.java:39)
    at java.util.logging.Handler.isLoggable(Unknown Source)
    at java.util.logging.StreamHandler.isLoggable(Unknown Source)
    at java.util.logging.FileHandler.publish(Unknown Source)
    at java.util.logging.Logger.log(Unknown Source)
    at java.util.logging.Logger.doLog(Unknown Source)
    at java.util.logging.Logger.log(Unknown Source)
    at org.eclipse.jetty.util.log.JavaUtilLog.debug(JavaUtilLog.java:108)
    at org.eclipse.jetty.http.HttpParser.parseNext(HttpParser.java:281)
    at org.eclipse.jetty.http.HttpParser.parseAvailable(HttpParser.java:235)
    at org.eclipse.jetty.server.AsyncHttpConnection.handle(AsyncHttpConnection.java:82)
    at org.eclipse.jetty.io.nio.SelectChannelEndPoint.handle(SelectChannelEndPoint.java:668)
    at org.eclipse.jetty.io.nio.SelectChannelEndPoint$1.run(SelectChannelEndPoint.java:52)
    at winstone.BoundedExecutorService$1.run(BoundedExecutorService.java:77)
    at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Unknown Source)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
    at java.lang.Thread.run(Unknown Source)

I am using version 1.1.3 of the Dependency-Check Plugin, with version 1.55 of analysis-core on Jenkins version 1.554 (the latest version of all three, as of this post).
Any thoughts on how to proceed?


Thanks,
Larry

[Steve Springett]

Larry,

Are you running this on a Jenkins master or slave server?  

Upon starting Jenkins for the first time, and without kicking off any other jobs, are you able to run a dependency-check scan using the plugin without it hanging?

--
You received this message because you are subscribed to the Google Groups "Dependency Check" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dependency-che...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[lgreg...@gmail.com]

Hi Steve,

I am running this on a Jenkins master.
Restarting Jenkins and running the dependency-check scan before any other jobs are kicked off does not help either...it hangs with the same error.

-Larry

[Steve Springett]

Larry,

I think I know where the problem might be. I have a workaround for another classpath issue that only seems to be caused on master servers. And it seems there could be a consequence to using this particular workaround.

What OS are you running?  Also, if I were to provide you the HPI directly, are you in a position to be able to test a possible fix, once I come up with one?

--

[lgreg...@gmail.com]

Steve,

I am running the Jenkins master on a Windows 7 installation (64 bit).

Yes, if you provide an HPI, I can test a possible fix.

Thanks!

On Thursday, March 13, 2014 9:47:39 AM UTC-4, lgreg...@gmail.com wrote:

[Steve Springett]

Larry,

Apologies for the delay, but there was a lot of work in the core that was changing around this time. I think I may have a solution to this issue, but could use your help to confirm, as I'm not able to produce the original issue.

I'm using the current 1.1.5 snapshot code with some modifications to dependency-check-core that haven't been checked in yet. Delete the existing HPI file and replace it with the one here, then restart Jenkins. Let me know if this solves the issue or not.

https://drive.google.com/file/d/0B47PJfxvH4CtazhubDhqVjV5NjA/edit?usp=sharing

--Steve

--

[Tim Jacomb]

Hi

I'm getting the almost the same issue as above, except my jenkins shuts down on error rather than the build hanging

Here's my environment:

Ubuntu 14.04

Jenkins 1.583 on a master

Dependency check plugin 1.2.5

WARNING: IVS OWASP weekly checks #22: No build result is set, so marking as failure. This should not happen.

6/10/2014 10:39:17 AM hudson.model.Executor run

SEVERE: Executor threw an exception

java.lang.ClassCircularityError: java/util/logging/LogRecord

        at org.owasp.dependencycheck.utils.LogFilter.isLoggable(LogFilter.java:39)

        at java.util.logging.Handler.isLoggable(Handler.java:292)

        at java.util.logging.StreamHandler.isLoggable(StreamHandler.java:233)

        at java.util.logging.FileHandler.publish(FileHandler.java:569)

        at java.util.logging.Logger.log(Logger.java:573)

        at java.util.logging.Logger.doLog(Logger.java:598)

        at java.util.logging.Logger.log(Logger.java:642)

        at hudson.model.Run.onEndBuilding(Run.java:1904)

        at hudson.model.Run.execute(Run.java:1816)

        at hudson.maven.MavenModuleSetBuild.run(MavenModuleSetBuild.java:529)

        at hudson.model.ResourceController.execute(ResourceController.java:89)

        at hudson.model.Executor.run(Executor.java:240)

6/10/2014 10:39:17 AM hudson.model.Executor run

SEVERE: Unexpected executor death

java.lang.ClassCircularityError: java/util/logging/LogRecord

        at org.owasp.dependencycheck.utils.LogFilter.isLoggable(LogFilter.java:39)

        at java.util.logging.Handler.isLoggable(Handler.java:292)

        at java.util.logging.StreamHandler.isLoggable(StreamHandler.java:233)

        at java.util.logging.FileHandler.publish(FileHandler.java:569)

        at java.util.logging.Logger.log(Logger.java:573)

        at java.util.logging.Logger.doLog(Logger.java:598)

        at java.util.logging.Logger.log(Logger.java:621)

        at hudson.model.Executor.run(Executor.java:251)

Exception in thread "Executor #1 for master : executing IVS OWASP weekly checks #22" java.lang.ClassCircularityError: java/util/logging/LogRecord

        at org.owasp.dependencycheck.utils.LogFilter.isLoggable(LogFilter.java:39)

        at java.util.logging.Handler.isLoggable(Handler.java:292)

        at java.util.logging.StreamHandler.isLoggable(StreamHandler.java:233)

        at java.util.logging.FileHandler.publish(FileHandler.java:569)

        at java.util.logging.Logger.log(Logger.java:573)

        at java.util.logging.Logger.doLog(Logger.java:598)

        at java.util.logging.Logger.log(Logger.java:687)

        at hudson.model.Executor.run(Executor.java:268)

......

WARNING:

java.lang.ClassCircularityError: java/util/logging/LogRecord

        at org.owasp.dependencycheck.utils.LogFilter.isLoggable(LogFilter.java:39)

        at java.util.logging.Handler.isLoggable(Handler.java:292)

        at java.util.logging.StreamHandler.isLoggable(StreamHandler.java:233)

        at java.util.logging.FileHandler.publish(FileHandler.java:569)

        at java.util.logging.Logger.log(Logger.java:573)

        at java.util.logging.Logger.doLog(Logger.java:598)

        at java.util.logging.Logger.log(Logger.java:621)

        at org.eclipse.jetty.util.log.JavaUtilLog.debug(JavaUtilLog.java:108)

        at org.eclipse.jetty.io.nio.SelectorManager$SelectSet.createEndPoint(SelectorManager.java:842)

        at org.eclipse.jetty.io.nio.SelectorManager$SelectSet.doSelect(SelectorManager.java:496)

        at org.eclipse.jetty.io.nio.SelectorManager$1.run(SelectorManager.java:290)

        at winstone.BoundedExecutorService$1.run(BoundedExecutorService.java:77)

        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1146)

        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)

        at java.lang.Thread.run(Thread.java:701)

Exception in thread "RequestHandlerThread[#1] Selector0" java.lang.ClassCircularityError: java/util/logging/LogRecord

        at org.owasp.dependencycheck.utils.LogFilter.isLoggable(LogFilter.java:39)

        at java.util.logging.Handler.isLoggable(Handler.java:292)

        at java.util.logging.StreamHandler.isLoggable(StreamHandler.java:233)

        at java.util.logging.FileHandler.publish(FileHandler.java:569)

        at java.util.logging.Logger.log(Logger.java:573)

        at java.util.logging.Logger.doLog(Logger.java:598)

        at java.util.logging.Logger.log(Logger.java:621)

        at org.eclipse.jetty.util.log.JavaUtilLog.debug(JavaUtilLog.java:108)

        at org.eclipse.jetty.io.nio.SelectorManager$1.run(SelectorManager.java:304)

        at winstone.BoundedExecutorService$1.run(BoundedExecutorService.java:77)

        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1146)

        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)

        at java.lang.Thread.run(Thread.java:701)

6/10/2014 10:44:45 AM winstone.Logger logInternal

INFO: JVM is terminating. Shutting down Winstone

Any help would be much appreciated

Cheers,

Tim

[Steve Springett]

Tim, 

What version/arch of Java?

What other plugins do you have installed? 

Also, please disable verbose logging on the build if you have it enabled. This is a dependency-check option.

Similar problem over here:

https://issues.jenkins-ci.org/browse/JENKINS-23442

Also, as a workaround, you can run it on a Jenkins slave. Or you can also use the CLI, Maven plugin or Ant task to perform the actual scan, and the Jenkins plugin (publisher only) for visualizing the results.

—Steve

--