[JIRA] (JENKINS-49650) JEP-200: Unreliable Slave plugin: javax.mail.internet.InternetAddress

regis.maura@infotel.com (JIRA)

unread,

Feb 20, 2018, 9:15:02 AM2/20/18

to jenkinsc...@googlegroups.com

Régis Maura created an issue

Jenkins /

JENKINS-49650

JEP-200: Unreliable Slave plugin: javax.mail.internet.InternetAddress

Issue Type:	Bug
Assignee:	Unassigned
Components:	unreliable-slave-plugin
Created:	2018-02-20 14:14
Environment:	Jenkins 2.107 Windows 7 32bits JDK 1.8.0_162
Labels:	JEP-200
Priority:	Minor
Reporter:	Régis Maura

javax.mail.internet.InternetAddress from additional jar mail-1.4.4.jar appears to be missing from whitelist :

 
                                                                févr. 19, 2018 3:29:28 PM jenkins.security.ClassFilterImpl lambda$isBlacklisted$1
AVERTISSEMENT: javax.mail.internet.InternetAddress in file:/C:/dev/programmes/Jenkins/war/WEB-INF/lib/mail-1.4.4.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/

This is making trouble to read some job configuration, and for data cleaning :

 
                                                                ConversionException: Refusing to unmarshal javax.mail.internet.InternetAddress for security reasons; see https://jenkins.io/redirect/class-filter/ ---- Debugging information ---- class : javax.mail.internet.InternetAddress required-type : javax.mail.internet.InternetAddress converter-type : hudson.util.XStream2$BlacklistedTypesConverter path : /org.jenkinsci.plugins.detection.unreliable.slave.UnreliableSlaveDetection$DescriptorImpl/settings/addresses/javax.mail.internet.InternetAddress line number : 5 class[1] : [Ljavax.mail.internet.InternetAddress; converter-type[1] : com.thoughtworks.xstream.converters.collections.ArrayConverter -------------------------------, MissingFieldException: No field 'numberOfFailureInRow' found in class 'org.jenkinsci.plugins.detection.unreliable.slave.UnreliableSlaveDetection$DescriptorImpl'

Workaround:

Add the following argument to jenkins command line:

 
                                                                -Dhudson.remoting.ClassFilter=javax.mail.internet.InternetAddress

Add Comment

This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e)

o.v.nenashev@gmail.com (JIRA)

unread,

Feb 20, 2018, 5:29:03 PM2/20/18

to jenkinsc...@googlegroups.com

Oleg Nenashev commented on

JENKINS-49650

Re: JEP-200: Unreliable Slave plugin: javax.mail.internet.InternetAddress

Lucie Votypkova could you please take a look?

https://plugins.jenkins.io/unreliable-slave-plugin has only 78 installations, so I doubt we will prioritize it high as JEP-200 maintainers.

Add Comment

o.v.nenashev@gmail.com (JIRA)

unread,

Feb 21, 2018, 3:02:02 AM2/21/18

to jenkinsc...@googlegroups.com

Oleg Nenashev assigned an issue to Lucie Votypkova

Jenkins /

JENKINS-49650

JEP-200: Unreliable Slave plugin: javax.mail.internet.InternetAddress

Change By:	Oleg Nenashev
Assignee:	Lucie Votypkova

Add Comment

o.v.nenashev@gmail.com (JIRA)

unread,

Feb 21, 2018, 3:05:01 AM2/21/18

to jenkinsc...@googlegroups.com

Oleg Nenashev commented on

JENKINS-49650

Re: JEP-200: Unreliable Slave plugin: javax.mail.internet.InternetAddress

The plugin also has no automated tests && its plugin POM is extremely outdated. Facelifting it would take a significant time.

Let's wait for feedback from contributors.
Also cc Oliver Gondža

Add Comment

regis.maura@infotel.com (JIRA)

unread,

Feb 21, 2018, 3:16:02 AM2/21/18

to jenkinsc...@googlegroups.com

Régis Maura commented on

JENKINS-49650

Re: JEP-200: Unreliable Slave plugin: javax.mail.internet.InternetAddress

No worries about the delay for fix.
Even if it is not fixed, it is not blocking as long as we can use the option "-Dhudson.remoting.ClassFilter".
My goal was mostly informative for other users of the plugin.

Add Comment

lvotypko@redhat.com (JIRA)

unread,

Feb 21, 2018, 7:20:02 AM2/21/18

to jenkinsc...@googlegroups.com

Lucie Votypkova commented on

JENKINS-49650

Re: JEP-200: Unreliable Slave plugin: javax.mail.internet.InternetAddress

Hello,

I did not do any change for so long time in this plugin! I guess that whole implementation is very old and need some actualization. Oleg is right .... it would deserve some tests too. I do not have time for it, but if you sent pull request I will happily accept it. I do not have a usage for this plugin anymore (I would maintain it only for community) so handover of the plugin to someone else is welcome too!