[
https://issues.apache.org/jira/browse/AVRO-4204?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18038681#comment-18038681
]
ASF subversion and git services commented on AVRO-4204:
-------------------------------------------------------
Commit a663e54d738c4050880e7020d873221b3803241e in avro's branch
refs/heads/main from Ryan Skraba
[ https://gitbox.apache.org/repos/asf?p=avro.git;h=a663e54d73 ]
AVRO-4204: Fix test_rpc_interop with allowed packages (#3551)
> [build] test_rpc_interop.sh fails
> ----------------------------------
>
> Key: AVRO-4204
> URL: https://issues.apache.org/jira/browse/AVRO-4204
> Project: Apache Avro
> Issue Type: Bug
> Affects Versions: 1.11.5, 1.12.1
> Reporter: Ryan Skraba
> Assignee: Ryan Skraba
> Priority: Major
> Fix For: 1.11.6, 1.12.2
>
> Time Spent: 10m
> Remaining Estimate: 0h
>
> {code}
> + ./share/test/interop/bin/test_rpc_interop.sh
>
>
>
> + cd ./share/test/interop/bin/../../../..
>
>
>
> + VERSION=1.13.0-SNAPSHOT
>
>
>
> + export GEM_HOME=/home/ryanskraba/avro/lang/ruby/.gem/
>
>
>
> + GEM_HOME=/home/ryanskraba/avro/lang/ruby/.gem/
>
>
>
> + tools=({java,py,ruby}_tool)
>
>
>
> + proto=share/test/schemas/simple.avpr
>
>
>
> + portfile=/tmp/interop_40454
>
>
>
> + trap cleanup EXIT
>
>
>
> + for server in "${tools[@]}"
>
>
>
> + for msgDir in share/test/interop/rpc/*
>
>
>
> + msg=add
>
>
>
> + for c in "$msgDir/"*
>
>
>
> + echo 'TEST: share/test/interop/rpc/add/onePlusOne'
>
>
>
> TEST: share/test/interop/rpc/add/onePlusOne
>
>
>
> + for client in "${tools[@]}"
>
>
>
> + rm -rf /tmp/interop_40454
>
>
>
> + count=0
>
>
>
> + [[ -s /tmp/interop_40454 ]]
>
>
>
> + sleep 1
>
>
>
> + java_tool rpcreceive http://127.0.0.1:0/ share/test/schemas/simple.avpr add
> -file share/test/interop/rpc/add/onePlusOne/response.avro
> + java -jar lang/java/tools/target/avro-tools-1.13.0-SNAPSHOT.jar rpcreceive
> http://127.0.0.1:0/ share/test/schemas/simple.avpr add -file
> share/test/interop/rpc/add/onePlusOne/response.avro
> Exception in thread "main" java.lang.SecurityException: Forbidden
> org.apache.avro.ipc.HandshakeRequest! This class is not trusted to be
> included in Avro schemas. You may either use the system properties
> org.apache.avro.SERIALIZABLE_CLASSES and
> org.apache.avro.SERIALIZABLE_PACKAGES to set the comma separated list of the
> classes or packages you trust, or you can set them via the API (see
> org.apache.avro.util.ClassSecurityValidator).
> at
> org.apache.avro.util.ClassSecurityValidator$ClassSecurityPredicate.forbiddenClass(ClassSecurityValidator.java:106)
> at
> org.apache.avro.util.ClassSecurityValidator.validate(ClassSecurityValidator.java:60)
> at org.apache.avro.util.ClassUtils.forName(ClassUtils.java:99)
> at org.apache.avro.util.ClassUtils.forName(ClassUtils.java:72)
> at
> org.apache.avro.specific.SpecificData.lambda$getClass$2(SpecificData.java:392)
> at
> java.base/java.util.concurrent.ConcurrentHashMap.computeIfAbsent(ConcurrentHashMap.java:1708)
> at
> org.apache.avro.specific.SpecificData.getClass(SpecificData.java:390)
> at
> org.apache.avro.specific.SpecificDatumReader.setSchema(SpecificDatumReader.java:98)
> at
> org.apache.avro.specific.SpecificDatumReader.<init>(SpecificDatumReader.java:62)
> at org.apache.avro.ipc.Responder.<init>(Responder.java:204)
> at
> org.apache.avro.ipc.generic.GenericResponder.<init>(GenericResponder.java:45)
> at
> org.apache.avro.ipc.generic.GenericResponder.<init>(GenericResponder.java:40)
> at
> org.apache.avro.tool.RpcReceiveTool$SinkResponder.<init>(RpcReceiveTool.java:66)
> at org.apache.avro.tool.RpcReceiveTool.run1(RpcReceiveTool.java:144)
> at org.apache.avro.tool.RpcReceiveTool.run(RpcReceiveTool.java:103)
> at org.apache.avro.tool.Main.run(Main.java:67)
> at org.apache.avro.tool.Main.main(Main.java:56)
> {code}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
