See
<https://builds.apache.org/job/Struts-master-JDK7-dependency-check/109/display/redirect>
------------------------------------------
[...truncated 1.42 MB...]
at
com.opensymphony.xwork2.util.ClassLoaderUtil.loadClass(ClassLoaderUtil.java:179)
~[classes/:?]
at
com.opensymphony.xwork2.ObjectFactory.getClassInstance(ObjectFactory.java:129)
~[classes/:?]
at
com.opensymphony.xwork2.ObjectFactory.buildBean(ObjectFactory.java:190)
~[classes/:?]
at
com.opensymphony.xwork2.ObjectFactory.buildBean(ObjectFactory.java:177)
~[classes/:?]
at
com.opensymphony.xwork2.factory.DefaultInterceptorFactory.buildInterceptor(DefaultInterceptorFactory.java:65)
~[classes/:?]
... 47 more
Oct 14, 2018 10:41:43 PM
org.springframework.context.support.ClassPathXmlApplicationContext
prepareRefresh
INFO: Refreshing
org.springframework.context.support.ClassPathXmlApplicationContext@da9e0f7:
startup date [Sun Oct 14 22:41:43 UTC 2018]; root of context hierarchy
Oct 14, 2018 10:41:43 PM
org.springframework.beans.factory.xml.XmlBeanDefinitionReader
loadBeanDefinitions
INFO: Loading XML bean definitions from class path resource
[com/opensymphony/xwork2/spring/actionContext-spring.xml]
Oct 14, 2018 10:41:43 PM
org.springframework.context.support.ClassPathXmlApplicationContext
prepareRefresh
INFO: Refreshing
org.springframework.context.support.ClassPathXmlApplicationContext@517e4191:
startup date [Sun Oct 14 22:41:43 UTC 2018]; root of context hierarchy
Oct 14, 2018 10:41:43 PM
org.springframework.beans.factory.xml.XmlBeanDefinitionReader
loadBeanDefinitions
INFO: Loading XML bean definitions from class path resource
[com/opensymphony/xwork2/spring/actionContext-spring.xml]
Oct 14, 2018 10:41:43 PM
org.springframework.context.support.ClassPathXmlApplicationContext
prepareRefresh
INFO: Refreshing
org.springframework.context.support.ClassPathXmlApplicationContext@6073c0bd:
startup date [Sun Oct 14 22:41:43 UTC 2018]; root of context hierarchy
Oct 14, 2018 10:41:43 PM
org.springframework.beans.factory.xml.XmlBeanDefinitionReader
loadBeanDefinitions
INFO: Loading XML bean definitions from class path resource
[com/opensymphony/xwork2/spring/actionContext-spring.xml]
2018-10-14 22:41:43,908 INFO [main] struts2.TestResult (TestResult.java:74) -
executing TestResult.
org.testng.TestNGException:
Failure in JUnit mode for class
org.apache.struts2.config.entities.ConstantConfigTest: could not create/run
JUnit test suite:
Cannot find JUnit method class junit.framework.TestSuite$1.warning
at org.testng.junit.JUnitTestRunner.runFailed(JUnitTestRunner.java:237)
at org.testng.junit.JUnitTestRunner.start(JUnitTestRunner.java:230)
at org.testng.junit.JUnitTestRunner.run(JUnitTestRunner.java:211)
at org.testng.TestRunner$1.run(TestRunner.java:659)
at org.testng.TestRunner.runWorkers(TestRunner.java:1147)
at org.testng.TestRunner.privateRunJUnit(TestRunner.java:690)
at org.testng.TestRunner.run(TestRunner.java:597)
at org.testng.SuiteRunner.runTest(SuiteRunner.java:317)
at org.testng.SuiteRunner.runSequentially(SuiteRunner.java:312)
at org.testng.SuiteRunner.privateRun(SuiteRunner.java:274)
at org.testng.SuiteRunner.run(SuiteRunner.java:223)
at org.testng.SuiteRunnerWorker.runSuite(SuiteRunnerWorker.java:52)
at org.testng.SuiteRunnerWorker.run(SuiteRunnerWorker.java:86)
at org.testng.TestNG.runSuitesSequentially(TestNG.java:1039)
at org.testng.TestNG.runSuitesLocally(TestNG.java:964)
at org.testng.TestNG.run(TestNG.java:900)
at
org.apache.maven.surefire.testng.TestNGExecutor.run(TestNGExecutor.java:135)
at
org.apache.maven.surefire.testng.TestNGDirectoryTestSuite.executeMulti(TestNGDirectoryTestSuite.java:198)
at
org.apache.maven.surefire.testng.TestNGDirectoryTestSuite.execute(TestNGDirectoryTestSuite.java:94)
at
org.apache.maven.surefire.testng.TestNGProvider.invoke(TestNGProvider.java:146)
at
org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:373)
at
org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:334)
at
org.apache.maven.surefire.booter.ForkedBooter.execute(ForkedBooter.java:119)
at
org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:407)
2018-10-14 22:41:44,905 WARN [main] mapper.DefaultActionMapper
(DefaultActionMapper.java:452) - 2test did not match allowed method names
[a-zA-Z_]*[0-9]* - default method execute will be used!
2018-10-14 22:41:44,906 WARN [main] mapper.DefaultActionMapper
(DefaultActionMapper.java:452) - %{exp} did not match allowed method names
[a-zA-Z_]*[0-9]* - default method execute will be used!
2018-10-14 22:41:44,906 WARN [main] mapper.DefaultActionMapper
(DefaultActionMapper.java:452) - ${%{foo}} did not match allowed method names
[a-zA-Z_]*[0-9]* - default method execute will be used!
2018-10-14 22:41:44,906 WARN [main] mapper.DefaultActionMapper
(DefaultActionMapper.java:452) - ${#foo='method',#foo} did not match allowed
method names [a-zA-Z_]*[0-9]* - default method execute will be used!
2018-10-14 22:41:46,009 WARN [main] mapper.DefaultActionMapper
(DefaultActionMapper.java:437) - ${action} did not match allowed action names
[a-zA-Z0-9._!/\-]* - default action index will be used!
2018-10-14 22:41:46,010 WARN [main] mapper.DefaultActionMapper
(DefaultActionMapper.java:437) - ${${%{action}}} did not match allowed action
names [a-zA-Z0-9._!/\-]* - default action index will be used!
2018-10-14 22:41:46,010 WARN [main] mapper.DefaultActionMapper
(DefaultActionMapper.java:437) - ${#foo='action',#foo} did not match allowed
action names [a-zA-Z0-9._!/\-]* - default action index will be used!
2018-10-14 22:41:47,212 WARN [main] mapper.DefaultActionMapper
(DefaultActionMapper.java:419) - ${namespace} did not match allowed namespace
names [a-zA-Z0-9._/\-]* - default namespace / will be used!
2018-10-14 22:41:47,213 WARN [main] mapper.DefaultActionMapper
(DefaultActionMapper.java:419) - ${${%{namespace}}} did not match allowed
namespace names [a-zA-Z0-9._/\-]* - default namespace / will be used!
2018-10-14 22:41:47,213 WARN [main] mapper.DefaultActionMapper
(DefaultActionMapper.java:419) - ${#foo='namespace',#foo} did not match allowed
namespace names [a-zA-Z0-9._/\-]* - default namespace / will be used!
2018-10-14 22:41:47,414 WARN [main] ognl.SecurityMemberAccess
(SecurityMemberAccess.java:102) - Package [package org.apache.struts2] of
target class [class org.apache.struts2.TestAction] of target
[org.apache.struts2.TestAction@2d183bf6] or package [package
javax.servlet.jsp.tagext, JavaServer Pages(TM) Specification, version 2.1] of
member [public int javax.servlet.jsp.tagext.TagSupport.doStartTag() throws
javax.servlet.jsp.JspException] are excluded!
org.testng.TestNGException:
Failure in JUnit mode for class
org.apache.struts2.conversion.UploadedFileConverterTest: could not create/run
JUnit test suite:
Cannot find JUnit method class junit.framework.TestSuite$1.warning
at org.testng.junit.JUnitTestRunner.runFailed(JUnitTestRunner.java:237)
at org.testng.junit.JUnitTestRunner.start(JUnitTestRunner.java:230)
at org.testng.junit.JUnitTestRunner.run(JUnitTestRunner.java:211)
at org.testng.TestRunner$1.run(TestRunner.java:659)
at org.testng.TestRunner.runWorkers(TestRunner.java:1147)
at org.testng.TestRunner.privateRunJUnit(TestRunner.java:690)
at org.testng.TestRunner.run(TestRunner.java:597)
at org.testng.SuiteRunner.runTest(SuiteRunner.java:317)
at org.testng.SuiteRunner.runSequentially(SuiteRunner.java:312)
at org.testng.SuiteRunner.privateRun(SuiteRunner.java:274)
at org.testng.SuiteRunner.run(SuiteRunner.java:223)
at org.testng.SuiteRunnerWorker.runSuite(SuiteRunnerWorker.java:52)
at org.testng.SuiteRunnerWorker.run(SuiteRunnerWorker.java:86)
at org.testng.TestNG.runSuitesSequentially(TestNG.java:1039)
at org.testng.TestNG.runSuitesLocally(TestNG.java:964)
at org.testng.TestNG.run(TestNG.java:900)
at
org.apache.maven.surefire.testng.TestNGExecutor.run(TestNGExecutor.java:135)
at
org.apache.maven.surefire.testng.TestNGDirectoryTestSuite.executeMulti(TestNGDirectoryTestSuite.java:198)
at
org.apache.maven.surefire.testng.TestNGDirectoryTestSuite.execute(TestNGDirectoryTestSuite.java:94)
at
org.apache.maven.surefire.testng.TestNGProvider.invoke(TestNGProvider.java:146)
at
org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:373)
at
org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:334)
at
org.apache.maven.surefire.booter.ForkedBooter.execute(ForkedBooter.java:119)
at
org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:407)
Oct 14, 2018 10:41:47 PM
org.springframework.context.support.ClassPathXmlApplicationContext
prepareRefresh
INFO: Refreshing
org.springframework.context.support.ClassPathXmlApplicationContext@c67ce1:
startup date [Sun Oct 14 22:41:47 UTC 2018]; root of context hierarchy
Oct 14, 2018 10:41:47 PM
org.springframework.beans.factory.xml.XmlBeanDefinitionReader
loadBeanDefinitions
INFO: Loading XML bean definitions from class path resource
[com/opensymphony/xwork2/spring/actionContext-spring.xml]
2018-10-14 22:41:47,806 WARN [main] ognl.SecurityMemberAccess
(SecurityMemberAccess.java:118) - Access to proxy is blocked! Target class
[class com.opensymphony.xwork2.TestSubBean$$EnhancerBySpringCGLIB$$6f7a2af5] of
target [com.opensymphony.xwork2.TestSubBean@37c04b6a], member [public final
boolean
com.opensymphony.xwork2.TestSubBean$$EnhancerBySpringCGLIB$$6f7a2af5.isExposeProxy()]
Oct 14, 2018 10:41:47 PM
org.springframework.context.support.ClassPathXmlApplicationContext
prepareRefresh
INFO: Refreshing
org.springframework.context.support.ClassPathXmlApplicationContext@77093e3b:
startup date [Sun Oct 14 22:41:47 UTC 2018]; root of context hierarchy
Oct 14, 2018 10:41:47 PM
org.springframework.beans.factory.xml.XmlBeanDefinitionReader
loadBeanDefinitions
INFO: Loading XML bean definitions from class path resource
[com/opensymphony/xwork2/spring/actionContext-spring.xml]
2018-10-14 22:41:48,357 INFO [main] config.ConfigurationManager
(ConfigurationManager.java:212) - Detected container provider
[org.apache.struts2.views.jsp.ui.DebugTagTest$2@27e11f7] needs to be reloaded.
Reloading all providers.
2018-10-14 22:41:48,421 INFO [main] config.ConfigurationManager
(ConfigurationManager.java:201) - Detected package provider
[org.apache.struts2.views.jsp.ui.DebugTagTest$2@27e11f7] needs to be reloaded.
Reloading all providers.
2018-10-14 22:41:48,474 INFO [main] config.ConfigurationManager
(ConfigurationManager.java:212) - Detected container provider
[org.apache.struts2.views.jsp.ui.DebugTagTest$2@1457b937] needs to be reloaded.
Reloading all providers.
2018-10-14 22:41:48,606 INFO [main] config.ConfigurationManager
(ConfigurationManager.java:201) - Detected package provider
[org.apache.struts2.views.jsp.ui.DebugTagTest$2@1457b937] needs to be reloaded.
Reloading all providers.
2018-10-14 22:41:48,650 INFO [main] config.ConfigurationManager
(ConfigurationManager.java:212) - Detected container provider
[org.apache.struts2.views.jsp.ui.DebugTagTest$2@631eed80] needs to be reloaded.
Reloading all providers.
2018-10-14 22:41:48,731 INFO [main] config.ConfigurationManager
(ConfigurationManager.java:201) - Detected package provider
[org.apache.struts2.views.jsp.ui.DebugTagTest$2@631eed80] needs to be reloaded.
Reloading all providers.
2018-10-14 22:41:48,774 INFO [main] config.ConfigurationManager
(ConfigurationManager.java:212) - Detected container provider
[org.apache.struts2.views.jsp.ui.DebugTagTest$2@6654dd24] needs to be reloaded.
Reloading all providers.
2018-10-14 22:41:48,875 INFO [main] config.ConfigurationManager
(ConfigurationManager.java:201) - Detected package provider
[org.apache.struts2.views.jsp.ui.DebugTagTest$2@6654dd24] needs to be reloaded.
Reloading all providers.
[INFO] Tests run: 1802, Failures: 0, Errors: 0, Skipped: 0, Time elapsed:
95.368 s - in TestSuite
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 1802, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-core ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 61 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 1572 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated:
0, approved: 1565 licenses.
[INFO]
[INFO] --- maven-jar-plugin:3.1.0:jar (default-jar) @ struts2-core ---
[INFO] Building jar:
<https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/core/target/struts2-core-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @
struts2-core >>>
[INFO]
[INFO] --- maven-enforcer-plugin:1.4.1:enforce (enforce-maven-version) @
struts2-core ---
[INFO]
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @
struts2-core <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-core ---
[INFO] Building jar:
<https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/core/target/struts2-core-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @
struts2-core ---
[INFO] Skipping because packaging 'jar' is not pom.
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-core ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (175 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (2 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (5 seconds)
[WARNING]
One or more dependencies were identified with known vulnerabilities in Struts 2
Core:
spring-core-4.3.13.RELEASE.jar
(cpe:/a:pivotal_software:spring_framework:4.3.13,
cpe:/a:pivotal:spring_framework:4.3.13,
org.springframework:spring-core:4.3.13.RELEASE) : CVE-2018-1270, CVE-2018-1271,
CVE-2018-1199, CVE-2018-1272, CVE-2018-11039, CVE-2018-1257, CVE-2018-11040,
CVE-2018-1275
bsh-2.0b4.jar (org.beanshell:bsh:2.0b4,
cpe:/a:beanshell_project:beanshell:2.0.b4) : CVE-2016-2510
See the dependency-check report for more details.
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [ 1.750 s]
[INFO] Struts 2 2.6-SNAPSHOT .............................. SUCCESS [11:16 min]
[INFO] Struts 2 Core ...................................... FAILURE [02:19 min]
[INFO] Struts Plugins ..................................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Sitemesh Plugin ........................... SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] Struts 2 DWR Plugin ................................ SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly 2.6-SNAPSHOT ..................... SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 13:40 min
[INFO] Finished at: 2018-10-14T22:42:03Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check
(default) on project struts2-core:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have
a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] spring-core-4.3.13.RELEASE.jar: CVE-2018-1270, CVE-2018-1275
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e
switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please
read the following articles:
[ERROR] [Help 1]
http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR] mvn <goals> -rf :struts2-core
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail: dev-h...@struts.apache.org
