[JIRA] (JENKINS-14616) Corrupted plugin updates leads to plugin uninstall and lost job configuration

2013-03-20 Thread jgl...@cloudbees.com (JIRA)














































Jesse Glick
 commented on  JENKINS-14616


Corrupted plugin updates leads to plugin uninstall and lost job configuration















Also observed when the download starts off with valid file, but it gets truncated.

Trying java.util.jar.JarFile.init might suffice to validate it.



























This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira







-- 
You received this message because you are subscribed to the Google Groups Jenkins Issues group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.




[JIRA] (JENKINS-14616) Corrupted plugin updates leads to plugin uninstall and lost job configuration

2013-03-20 Thread recampb...@java.net (JIRA)














































recampbell
 commented on  JENKINS-14616


Corrupted plugin updates leads to plugin uninstall and lost job configuration















Could be done from an implementation of hudson.model.UpdateCenter.UpdateCenterConfiguration's postValidate(DownloadJob job, File src)



























This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira







-- 
You received this message because you are subscribed to the Google Groups Jenkins Issues group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.




[JIRA] (JENKINS-14616) Corrupted plugin updates leads to plugin uninstall and lost job configuration

2012-08-03 Thread forde...@gmail.com (JIRA)














































Fredrik Orderud
 created  JENKINS-14616


Corrupted plugin updates leads to plugin uninstall and lost job configuration















Issue Type:


Bug



Affects Versions:


current



Assignee:


Unassigned


Attachments:


error_log.txt



Components:


plugin, update-center



Created:


28/Jul/12 3:44 PM



Description:


From mailing-list entry "Verify downloaded jpi-files":
https://groups.google.com/forum/?fromgroups#!topic/jenkinsci-users/2v8csoO0cxE

Jenkins does not seem to verify the integrity of downloaded plugins right after the download has completed. Rather, the verification is only done when attempting to install/upgrade the plugin.

This concequence of this is that corrupted plugin updates will trigger a plugin uninstall instead of upgrade. Any job-configuration related to the accidentally uninstalled plugin is then also deleted, which is pretty serious.

Steps to reproduce:
1: Create a job with a subversion working-copy workspace.
2: Configure plugin manager with invalid PROXY settings, so that non-intranet HTTP-requests returns a HTML error webpage (instead of connection refused).
3: Upgrade the subversion plugin.
4: Jenkins will download a corrupted subversion.jpi file containing HTML content without any error message.
5: Restart Jenkins.
6: Loading of subversion.jpi will fail (error log attached).
7: The subversion plugin will be uninstalled.
8. Subversion-related configuration in all jobs will be deleted!




Environment:


Windows 7 x64.

Java HotSpot(TM) 64-Bit Server VM (build 14.0-b16, mixed mode).




Project:


Jenkins



Priority:


Critical



Reporter:


Fredrik Orderud

























This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira






[JIRA] (JENKINS-14616) Corrupted plugin updates leads to plugin uninstall and lost job configuration

2012-08-03 Thread jgl...@cloudbees.com (JIRA)














































jglick
 commented on  JENKINS-14616


Corrupted plugin updates leads to plugin uninstall and lost job configuration















More: https://groups.google.com/forum/?fromgroups#!topic/jenkinsci-dev/ueaAOGrtVDI



























This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira