Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[JENKINS-49054] Work around XStream bug by looking up list type before trying to unmarshal elements #3248

Merged
merged 1 commit into from
Jan 21, 2018

Conversation

jglick
Copy link
Member

@jglick jglick commented Jan 19, 2018

See JENKINS-49054.

jenkinsci/xstream-fork#2 is the actual fix, and suffices to make the test pass. The change to DescribableList is more of a workaround, and might not cover more exotic cases such as an error inside a DescribableList inside some other object inside another DescribableList.

Proposed changelog entries

  • A ClassCastException or NoSuchMethodException could under certain circumstances mask the actual error when loading erroneous data from an XML file.

Desired reviewers

@jenkinsci/code-reviewers @reviewbybees

@jglick jglick requested a review from a user January 19, 2018 22:55
@ghost
Copy link

ghost commented Jan 19, 2018

This pull request originates from a CloudBees employee. At CloudBees, we require that all pull requests be reviewed by other CloudBees employees before we seek to have the change accepted. If you want to learn more about our process please see this explanation.

try {
DescribableList r = (DescribableList)context.getRequiredType().newInstance();
DescribableList r = (DescribableList) context.getRequiredType().asSubclass(DescribableList.class).newInstance();
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

asSubclass ensures that even if the problem occurs, we will get a ClassCastException, which is easier to diagnose than a NoSuchMethodException.

try {
DescribableList r = (DescribableList)context.getRequiredType().newInstance();
DescribableList r = (DescribableList) context.getRequiredType().asSubclass(DescribableList.class).newInstance();
CopyOnWriteList core = copyOnWriteListConverter.unmarshal(reader, context);
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The workaround consists of moving the unmarshal call after the getRequiredType call, so even if unmarshal corrupts this aspect of the context, we can still produce a meaningful error.

XStream2 xs = new XStream2();
xs.addCriticalField(Data.class, "list");
String xml = xs.toXML(data);
data = (Data) xs.fromXML(xml);
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Without the fix, we get something like

java.lang.InstantiationError
	at hudson.util.DescribableList$ConverterImpl.unmarshal(DescribableList.java:280)
	at com.thoughtworks.xstream.core.TreeUnmarshaller.convert(TreeUnmarshaller.java:72)
	at com.thoughtworks.xstream.core.AbstractReferenceUnmarshaller.convert(AbstractReferenceUnmarshaller.java:65)
	at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:66)
	at hudson.util.RobustReflectionConverter.unmarshalField(RobustReflectionConverter.java:393)
	at hudson.util.RobustReflectionConverter.doUnmarshal(RobustReflectionConverter.java:331)
	at hudson.util.RobustReflectionConverter.unmarshal(RobustReflectionConverter.java:270)
	at com.thoughtworks.xstream.core.TreeUnmarshaller.convert(TreeUnmarshaller.java:72)
	at com.thoughtworks.xstream.core.AbstractReferenceUnmarshaller.convert(AbstractReferenceUnmarshaller.java:65)
	at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:66)
	at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:50)
	at com.thoughtworks.xstream.core.TreeUnmarshaller.start(TreeUnmarshaller.java:134)
	at com.thoughtworks.xstream.core.AbstractTreeMarshallingStrategy.unmarshal(AbstractTreeMarshallingStrategy.java:32)
	at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1189)
	at hudson.util.XStream2.unmarshal(XStream2.java:147)
	at hudson.util.XStream2.unmarshal(XStream2.java:118)
	at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1173)
	at com.thoughtworks.xstream.XStream.fromXML(XStream.java:1044)
	at com.thoughtworks.xstream.XStream.fromXML(XStream.java:1035)
	at hudson.util.DescribableListTest.unmarshalling(DescribableListTest.java:44)
	at …
Caused by: java.lang.InstantiationException: hudson.util.DescribableListTest$Datum
	at java.lang.Class.newInstance(Class.java:427)
	at hudson.util.DescribableList$ConverterImpl.unmarshal(DescribableList.java:276)
	... 43 more
Caused by: java.lang.NoSuchMethodException: hudson.util.DescribableListTest$Datum.<init>()
	at java.lang.Class.getConstructor0(Class.java:3082)
	at java.lang.Class.newInstance(Class.java:412)
	... 44 more

public Object fromString(String str) {
int val = Integer.parseInt(str);
if (val == 2) {
throw new IllegalStateException("oops");
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just here to make for an artificial error in some element. Normally RobustReflectionConverter in Jenkins will handle these cases differently; I am not exactly sure how this happens in the field—because the original error is being masked by the NoSuchMethodException! Observed deserializing a FolderCredentialsProperty element of Folder.properties.

Copy link
Member

@oleg-nenashev oleg-nenashev left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🐝

@oleg-nenashev
Copy link
Member

There is still some mess there BTW. @ndeloof forked XStream and deprecated the original https://github.com/jenkinsci/xstream repository, but he has not finished his work. Jenkins project still uses jenkinsci/xstream, not xstream-fork. @jenkinsci/core we should do something about that IMO

Copy link

@ghost ghost left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🐝

Thanks for tracking this down, Jesse.

@oleg-nenashev oleg-nenashev added the ready-for-merge The PR is ready to go, and it will be merged soon if there is no negative feedback label Jan 21, 2018
@oleg-nenashev oleg-nenashev merged commit 53ac66e into jenkinsci:master Jan 21, 2018
@jglick jglick deleted the JENKINS-49054 branch January 22, 2018 17:51
@jglick jglick mentioned this pull request Sep 21, 2020
6 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
ready-for-merge The PR is ready to go, and it will be merged soon if there is no negative feedback
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants