Skip to main content


Eclipse Community Forums
Forum Search:

Search      Help    Register    Login    Home
Home » Modeling » TMF (Xtext) » Security Exception when building Projects with Xtend
Security Exception when building Projects with Xtend [message #1804321] Fri, 22 March 2019 12:21 Go to next message
Thomas Schindl is currently offline Thomas SchindlFriend
Messages: 6651
Registered: July 2009
Senior Member
Without any code changes in the last time our build started to fail with the following exception

INFO] --- xtend-maven-plugin:2.16.0:compile (default) @ org.eclipse.fx.ide.jdt.ui ---
[ERROR] resolution of uriFragment '|4' failed.
org.eclipse.emf.ecore.resource.impl.ResourceSetImpl$1DiagnosticWrappedException: org.eclipse.xtext.common.types.access.TypeResource$CannotLoadTypeResourceException: java.lang.SecurityException: invalid SHA1 signature file digest for org/apache/commons/lang/math/JVMRandom.class
    at org.eclipse.emf.ecore.resource.impl.ResourceSetImpl.handleDemandLoadException (ResourceSetImpl.java:319)
    at org.eclipse.emf.ecore.resource.impl.ResourceSetImpl.demandLoadHelper (ResourceSetImpl.java:278)
    at org.eclipse.xtext.resource.XtextResourceSet.getResource (XtextResourceSet.java:265)
    at org.eclipse.xtext.common.types.access.impl.ClasspathTypeProvider.findTypeByClass (ClasspathTypeProvider.java:246)
    at org.eclipse.xtext.common.types.access.impl.ClasspathTypeProvider.doFindTypeByName (ClasspathTypeProvider.java:221)
    at org.eclipse.xtext.common.types.access.impl.ClasspathTypeProvider.findTypeByName (ClasspathTypeProvider.java:213)
    at org.eclipse.xtext.common.types.xtext.AbstractTypeScope.getSingleElement (AbstractTypeScope.java:59)
    at org.eclipse.xtext.common.types.xtext.AbstractTypeScope.getSingleElement (AbstractTypeScope.java:54)
    at org.eclipse.xtend.core.scoping.LocalResourceFilteringTypeScope.getSingleElement (LocalResourceFilteringTypeScope.java:42)
    at org.eclipse.xtend.core.scoping.RecordingTypeScope.getSingleElement (RecordingTypeScope.java:51)
    at org.eclipse.xtext.scoping.impl.AbstractScope.getSingleElement (AbstractScope.java:108)
    at org.eclipse.xtext.linking.impl.DefaultLinkingService.getLinkedObjects (DefaultLinkingService.java:114)
    at org.eclipse.xtext.linking.lazy.LazyLinkingResource.getEObject (LazyLinkingResource.java:265)
    at org.eclipse.xtext.xbase.resource.BatchLinkableResource.getEObject (BatchLinkableResource.java:119)
    at org.eclipse.emf.ecore.resource.impl.ResourceSetImpl.getEObject (ResourceSetImpl.java:223)
    at org.eclipse.emf.ecore.util.EcoreUtil.resolve (EcoreUtil.java:199)
    at org.eclipse.emf.ecore.util.EcoreUtil.resolve (EcoreUtil.java:259)
    at org.eclipse.emf.ecore.impl.BasicEObjectImpl.eResolveProxy (BasicEObjectImpl.java:1477)
    at org.eclipse.xtext.xtype.impl.XImportDeclarationImpl.getImportedType (XImportDeclarationImpl.java:253)
    at org.eclipse.xtext.xtype.impl.XImportDeclarationImpl.eGet (XImportDeclarationImpl.java:373)
    at org.eclipse.emf.ecore.impl.BasicEObjectImpl.eGet (BasicEObjectImpl.java:1011)
    at org.eclipse.emf.ecore.impl.BasicEObjectImpl.eGet (BasicEObjectImpl.java:1003)
    at org.eclipse.emf.ecore.util.EContentsEList$FeatureIteratorImpl.hasNext (EContentsEList.java:439)
    at org.eclipse.emf.ecore.util.EcoreUtil.resolveCrossReferences (EcoreUtil.java:304)
    at org.eclipse.emf.ecore.util.EcoreUtil.resolveAll (EcoreUtil.java:298)
    at org.eclipse.emf.ecore.util.EcoreUtil.resolveAll (EcoreUtil.java:283)
    at org.eclipse.xtend.core.compiler.batch.XtendBatchCompiler.compile (XtendBatchCompiler.java:513)
    at org.eclipse.xtend.maven.AbstractXtendCompilerMojo.compile (AbstractXtendCompilerMojo.java:175)
    at org.eclipse.xtend.maven.XtendCompile.internalExecute (XtendCompile.java:63)
    at org.eclipse.xtend.maven.AbstractXtendMojo.execute (AbstractXtendMojo.java:42)
    at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:137)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:208)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:154)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:146)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:81)
    at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:56)
    at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:128)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:305)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
    at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
    at org.apache.maven.cli.MavenCli.execute (MavenCli.java:954)
    at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:288)
    at org.apache.maven.cli.MavenCli.main (MavenCli.java:192)
    at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke (Method.java:498)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:289)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:229)
    at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:415)
    at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:356)
Caused by: org.eclipse.xtext.common.types.access.TypeResource$CannotLoadTypeResourceException: java.lang.SecurityException: invalid SHA1 signature file digest for org/apache/commons/lang/math/JVMRandom.class
    at org.eclipse.xtext.common.types.access.TypeResource.doLoad (TypeResource.java:147)
    at org.eclipse.emf.ecore.resource.impl.ResourceImpl.load (ResourceImpl.java:1518)
    at org.eclipse.xtext.common.types.access.TypeResource.load (TypeResource.java:120)


Has anyone see such an exception? The complete build log is at https://ci.eclipse.org/efxclipse/job/efxclipse_ide/1283/console
Re: Security Exception when building Projects with Xtend [message #1804325 is a reply to message #1804321] Fri, 22 March 2019 12:39 Go to previous messageGo to next message
Christian Dietrich is currently offline Christian DietrichFriend
Messages: 14661
Registered: July 2009
Senior Member
do you build with a clean new or a shared maven repo?

Twitter : @chrdietrich
Blog : https://www.dietrich-it.de
Re: Security Exception when building Projects with Xtend [message #1804327 is a reply to message #1804325] Fri, 22 March 2019 13:03 Go to previous messageGo to next message
Thomas Schindl is currently offline Thomas SchindlFriend
Messages: 6651
Registered: July 2009
Senior Member
The job is configured to:
* Clear the workspace before building
* Use a private repository
Re: Security Exception when building Projects with Xtend [message #1804328 is a reply to message #1804327] Fri, 22 March 2019 13:37 Go to previous messageGo to next message
Christian Dietrich is currently offline Christian DietrichFriend
Messages: 14661
Registered: July 2009
Senior Member
hmmmm do you have steps to reproduce this locally?

Twitter : @chrdietrich
Blog : https://www.dietrich-it.de
Re: Security Exception when building Projects with Xtend [message #1804332 is a reply to message #1804328] Fri, 22 March 2019 14:22 Go to previous messageGo to next message
Christian Dietrich is currently offline Christian DietrichFriend
Messages: 14661
Registered: July 2009
Senior Member
[INFO] Fetching org.eclipse.emf.emfstore.common_1.9.0.v20170530-0703.jar.pack.gz from http://ftp-stud.fht-esslingen.de/pub/Mirrors/eclipse/releases/2019-03/201903201000/plugins/ (1,86MB)
[INFO] Fetching org.eclipse.emf.emfstore.common_1.9.0.v20170530-0703.jar.pack.gz from http://ftp-stud.fht-esslingen.de/pub/Mirrors/eclipse/releases/2019-03/201903201000/plugins/ (1,86MB)
=> this update site looks new. the question is if the content is proper. (maybe a newer or different version was downloaded before)

jarsigner -verify ./.m2/.cache/tycho/org.eclipse.emf.emfstore.common-1.9.0.v20170530-0703.jar/lib/org.apache.commons.lang_2.4.0.v201005080502.jar
jarsigner: java.lang.SecurityException: invalid SHA1 signature file digest for org/apache/commons/lang/math/JVMRandom.class

=> that said plugin is broken. am not sure if it is "too old" or pulled from a bad mirror. or should not be unpackaged or was not before.



Twitter : @chrdietrich
Blog : https://www.dietrich-it.de
Re: Security Exception when building Projects with Xtend [message #1804335 is a reply to message #1804332] Fri, 22 March 2019 15:27 Go to previous messageGo to next message
Ed Willink is currently offline Ed WillinkFriend
Messages: 7655
Registered: July 2009
Senior Member
Hi

Quote:
Fetching org.apache.commons.lang_2.6.0.v201404270220.jar from http://download.eclipse.org/efxclipse/runtime-nightly/site/plugins/


This looks unwise since it is strongly recommended that the latest version from Orbit is in use. A private version only risks being different.

More likely there have been heavy bandwidth challenges with 2019-03 so you may just have a bad repo.

Regards

Ed Willink
Re: Security Exception when building Projects with Xtend [message #1804339 is a reply to message #1804335] Fri, 22 March 2019 15:59 Go to previous messageGo to next message
Christian Dietrich is currently offline Christian DietrichFriend
Messages: 14661
Registered: July 2009
Senior Member
had this downloading with a clean repo.

Twitter : @chrdietrich
Blog : https://www.dietrich-it.de
Re: Security Exception when building Projects with Xtend [message #1804372 is a reply to message #1804339] Mon, 25 March 2019 07:45 Go to previous messageGo to next message
Thomas Schindl is currently offline Thomas SchindlFriend
Messages: 6651
Registered: July 2009
Senior Member
The question si why does it get pulled at all? I don't use EMF-Store and do not reference it that in my build! Question is also where do I report this too? EMF-Store or Webmasters?
Re: Security Exception when building Projects with Xtend [message #1804376 is a reply to message #1804372] Mon, 25 March 2019 08:12 Go to previous message
Christian Dietrich is currently offline Christian DietrichFriend
Messages: 14661
Registered: July 2009
Senior Member
i dont know why this is pulled. therefore you would have to analyze the dependency tree.
i am also not sure what the policy about old artifacts is.
maybe you can also find a possibility in tycho to exclude this from cp

update: maybe you do a import package on some of the packages that got dropped from orbit but may be exported by the plugin org.eclipse.emf.emfstore.common

Export-Package: com.google.common.base;version="10.0.1",com.google.com
mon.collect;version="10.0.1",com.google.common.io;version="2.2.0",org
.apache.commons.io;version="1.9.0",org.apache.commons.io.comparator;v
ersion="2.0.1",org.apache.commons.io.filefilter;version="2.0.1",org.a
pache.commons.io.input;version="2.0.1",org.apache.commons.io.monitor;
version="2.0.1",org.apache.commons.io.output;version="1.9.0",org.apac
he.commons.lang;version="1.9.0",


Twitter : @chrdietrich
Blog : https://www.dietrich-it.de

[Updated on: Mon, 25 March 2019 08:34]

Report message to a moderator

Previous Topic:[Xbase] Classloading in XbaseInterpreter
Next Topic:Space validation
Goto Forum:
  


Current Time: Fri Mar 29 13:57:10 GMT 2024

Powered by FUDForum. Page generated in 0.02964 seconds
.:: Contact :: Home ::.

Powered by: FUDforum 3.0.2.
Copyright ©2001-2010 FUDforum Bulletin Board Software

Back to the top