pjfanning commented on PR #1748:
URL: https://github.com/apache/pekko/pull/1748#issuecomment-2614404818

   Looks like we have some more old java files in our tests (distributed data). 
Affects 2 tests.
   
   ```
   - test TwoPhaseSetSerializer *** FAILED *** (16 milliseconds)
   [01-26 12:42:24.795] [info]   java.lang.UnsupportedOperationException: As of 
2022/09/29 (release 21.7) makeExtensionsImmutable should not be called from 
protobuf gencode. If you are seeing this message, your gencode is vulnerable to 
a denial of service attack. You should regenerate your code using protobuf 25.6 
or later. Use the latest version that meets your needs. However, if you 
understand the risks and wish to continue with vulnerable gencode, you can set 
the system property `-Dcom.google.protobuf.use_unsafe_pre22_gencode` on the 
command line. See security vulnerability: 
https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-h4h5-3hr4-j3g2
   [01-26 12:42:24.795] [info]   at 
org.apache.pekko.protobufv3.internal.GeneratedMessage.warnPre22Gencode(GeneratedMessage.java:327)
   [01-26 12:42:24.795] [info]   at 
org.apache.pekko.protobufv3.internal.GeneratedMessageV3.makeExtensionsImmutable(GeneratedMessageV3.java:531)
   [01-26 12:42:24.795] [info]   at 
docs.ddata.protobuf.msg.TwoPhaseSetMessages$TwoPhaseSet.<init>(TwoPhaseSetMessages.java:172)
   [01-26 12:42:24.795] [info]   at 
docs.ddata.protobuf.msg.TwoPhaseSetMessages$TwoPhaseSet.<init>(TwoPhaseSetMessages.java:87)
   [01-26 12:42:24.795] [info]   at 
docs.ddata.protobuf.msg.TwoPhaseSetMessages$TwoPhaseSet$1.parsePartialFrom(TwoPhaseSetMessages.java:863)
   [01-26 12:42:24.795] [info]   at 
docs.ddata.protobuf.msg.TwoPhaseSetMessages$TwoPhaseSet$1.parsePartialFrom(TwoPhaseSetMessages.java:857)
   [01-26 12:42:24.795] [info]   at 
org.apache.pekko.protobufv3.internal.AbstractParser.parsePartialFrom(AbstractParser.java:135)
   [01-26 12:42:24.795] [info]   at 
org.apache.pekko.protobufv3.internal.AbstractParser.parseFrom(AbstractParser.java:168)
   [01-26 12:42:24.795] [info]   at 
org.apache.pekko.protobufv3.internal.AbstractParser.parseFrom(AbstractParser.java:180)
   [01-26 12:42:24.795] [info]   at 
org.apache.pekko.protobufv3.internal.AbstractParser.parseFrom(AbstractParser.java:185)
   [01-26 12:42:24.795] [info]   at 
org.apache.pekko.protobufv3.internal.AbstractParser.parseFrom(AbstractParser.java:25)
   [01-26 12:42:24.795] [info]   at 
docs.ddata.protobuf.msg.TwoPhaseSetMessages$TwoPhaseSet.parseFrom(TwoPhaseSetMessages.java:370)
   [01-26 12:42:24.795] [info]   at 
docs.ddata.protobuf.TwoPhaseSetSerializer.twoPhaseSetFromBinary(TwoPhaseSetSerializer.scala:62)
   [01-26 12:42:24.796] [info]   at 
docs.ddata.protobuf.TwoPhaseSetSerializer.fromBinary(TwoPhaseSetSerializer.scala:40)
   [01-26 12:42:24.796] [info]   at 
docs.ddata.DistributedDataDocSpec.$anonfun$new$20(DistributedDataDocSpec.scala:407)
   [01-26 12:42:24.796] [info]   at 
org.scalatest.OutcomeOf.outcomeOf(OutcomeOf.scala:85)
   [01-26 12:42:24.796] [info]   at 
org.scalatest.OutcomeOf.outcomeOf$(OutcomeOf.scala:83)
   [01-26 12:42:24.796] [info]   at 
org.scalatest.OutcomeOf$.outcomeOf(OutcomeOf.scala:104)
   [01-26 12:42:24.796] [info]   at 
org.scalatest.Transformer.apply(Transformer.scala:22)
   [01-26 12:42:24.796] [info]   at 
org.scalatest.Transformer.apply(Transformer.scala:20)
   [01-26 12:42:24.796] [info]   at 
org.scalatest.wordspec.AnyWordSpecLike$$anon$3.apply(AnyWordSpecLike.scala:1240)
   [01-26 12:42:24.796] [info]   at 
org.scalatest.TestSuite.withFixture(TestSuite.scala:196)
   [01-26 12:42:24.796] [info]   at 
org.scalatest.TestSuite.withFixture$(TestSuite.scala:195)
   [01-26 12:42:24.796] [info]   at 
org.apache.pekko.testkit.PekkoSpec.withFixture(PekkoSpec.scala:79)
   [01-26 12:42:24.796] [info]   at 
org.scalatest.wordspec.AnyWordSpecLike.invokeWithFixture$1(AnyWordSpecLike.scala:1238)
   [01-26 12:42:24.796] [info]   at 
org.scalatest.wordspec.AnyWordSpecLike.$anonfun$runTest$1(AnyWordSpecLike.scala:1250)
   [01-26 12:42:24.796] [info]   at 
org.scalatest.SuperEngine.runTestImpl(Engine.scala:306)
   [01-26 12:42:24.796] [info]   at 
org.scalatest.wordspec.AnyWordSpecLike.runTest(AnyWordSpecLike.scala:1250)
   [01-26 12:42:24.796] [info]   at 
org.scalatest.wordspec.AnyWordSpecLike.runTest$(AnyWordSpecLike.scala:1232)
   [01-26 12:42:24.796] [info]   at 
org.apache.pekko.testkit.PekkoSpec.runTest(PekkoSpec.scala:79)
   [01-26 12:42:24.796] [info]   at 
org.scalatest.wordspec.AnyWordSpecLike.$anonfun$runTests$1(AnyWordSpecLike.scala:1309)
   [01-26 12:42:24.796] [info]   at 
org.scalatest.SuperEngine.$anonfun$runTestsInBranch$1(Engine.scala:413)
   [01-26 12:42:24.796] [info]   at 
scala.collection.immutable.List.foreach(List.scala:334)
   [01-26 12:42:24.796] [info]   at 
org.scalatest.SuperEngine.traverseSubNodes$1(Engine.scala:401)
   [01-26 12:42:24.796] [info]   at 
org.scalatest.SuperEngine.runTestsInBranch(Engine.scala:396)
   [01-26 12:42:24.796] [info]   at 
org.scalatest.SuperEngine.runTestsImpl(Engine.scala:475)
   [01-26 12:42:24.796] [info]   at 
org.scalatest.wordspec.AnyWordSpecLike.runTests(AnyWordSpecLike.scala:1309)
   [01-26 12:42:24.797] [info]   at 
org.scalatest.wordspec.AnyWordSpecLike.runTests$(AnyWordSpecLike.scala:1308)
   [01-26 12:42:24.797] [info]   at 
org.apache.pekko.testkit.PekkoSpec.runTests(PekkoSpec.scala:79)
   [01-26 12:42:24.797] [info]   at org.scalatest.Suite.run(Suite.scala:1114)
   [01-26 12:42:24.797] [info]   at org.scalatest.Suite.run$(Suite.scala:1096)
   [01-26 12:42:24.797] [info]   at 
org.apache.pekko.testkit.PekkoSpec.org$scalatest$wordspec$AnyWordSpecLike$$super$run(PekkoSpec.scala:79)
   [01-26 12:42:24.797] [info]   at 
org.scalatest.wordspec.AnyWordSpecLike.$anonfun$run$1(AnyWordSpecLike.scala:1354)
   [01-26 12:42:24.797] [info]   at 
org.scalatest.SuperEngine.runImpl(Engine.scala:535)
   [01-26 12:42:24.797] [info]   at 
org.scalatest.wordspec.AnyWordSpecLike.run(AnyWordSpecLike.scala:1354)
   [01-26 12:42:24.797] [info]   at 
org.scalatest.wordspec.AnyWordSpecLike.run$(AnyWordSpecLike.scala:1352)
   [01-26 12:42:24.797] [info]   at 
org.apache.pekko.testkit.PekkoSpec.org$scalatest$BeforeAndAfterAll$$super$run(PekkoSpec.scala:79)
   [01-26 12:42:24.797] [info]   at 
org.scalatest.BeforeAndAfterAll.liftedTree1$1(BeforeAndAfterAll.scala:213)
   [01-26 12:42:24.797] [info]   at 
org.scalatest.BeforeAndAfterAll.run(BeforeAndAfterAll.scala:210)
   [01-26 12:42:24.797] [info]   at 
org.scalatest.BeforeAndAfterAll.run$(BeforeAndAfterAll.scala:208)
   [01-26 12:42:24.797] [info]   at 
org.apache.pekko.testkit.PekkoSpec.run(PekkoSpec.scala:79)
   [01-26 12:42:24.797] [info]   at 
org.scalatest.tools.Framework.org$scalatest$tools$Framework$$runSuite(Framework.scala:321)
   [01-26 12:42:24.797] [info]   at 
org.scalatest.tools.Framework$ScalaTestTask.execute(Framework.scala:517)
   [01-26 12:42:24.797] [info]   at 
sbt.ForkMain$Run.lambda$runTest$1(ForkMain.java:414)
   [01-26 12:42:24.797] [info]   at 
java.util.concurrent.FutureTask.run(FutureTask.java:266)
   [01-26 12:42:24.797] [info]   at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
   [01-26 12:42:24.797] [info]   at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
   [01-26 12:42:24.797] [info]   at java.lang.Thread.run(Thread.java:750)
   [01-26 12:42:24.798] [info] - test japi.TwoPhaseSetSerializer *** FAILED *** 
(0 milliseconds)
   [01-26 12:42:24.798] [info]   java.lang.RuntimeException: As of 2022/09/29 
(release 21.7) makeExtensionsImmutable should not be called from protobuf 
gencode. If you are seeing this message, your gencode is vulnerable to a denial 
of service attack. You should regenerate your code using protobuf 25.6 or 
later. Use the latest version that meets your needs. However, if you understand 
the risks and wish to continue with vulnerable gencode, you can set the system 
property `-Dcom.google.protobuf.use_unsafe_pre22_gencode` on the command line. 
See security vulnerability: 
https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-h4h5-3hr4-j3g2
   [01-26 12:42:24.798] [info]   at 
jdocs.ddata.protobuf.TwoPhaseSetSerializer.twoPhaseSetFromBinary(TwoPhaseSetSerializer.java:94)
   [01-26 12:42:24.798] [info]   at 
jdocs.ddata.protobuf.TwoPhaseSetSerializer.fromBinaryJava(TwoPhaseSetSerializer.java:61)
   [01-26 12:42:24.798] [info]   at 
org.apache.pekko.serialization.JSerializer.fromBinary(Serializer.scala:296)
   [01-26 12:42:24.798] [info]   at 
docs.ddata.DistributedDataDocSpec.$anonfun$new$21(DistributedDataDocSpec.scala:417)
   [01-26 12:42:24.798] [info]   at 
org.scalatest.OutcomeOf.outcomeOf(OutcomeOf.scala:85)
   [01-26 12:42:24.798] [info]   at 
org.scalatest.OutcomeOf.outcomeOf$(OutcomeOf.scala:83)
   [01-26 12:42:24.798] [info]   at 
org.scalatest.OutcomeOf$.outcomeOf(OutcomeOf.scala:104)
   [01-26 12:42:24.799] [info]   at 
org.scalatest.Transformer.apply(Transformer.scala:22)
   [01-26 12:42:24.799] [info]   at 
org.scalatest.Transformer.apply(Transformer.scala:20)
   [01-26 12:42:24.799] [info]   at 
org.scalatest.wordspec.AnyWordSpecLike$$anon$3.apply(AnyWordSpecLike.scala:1240)
   [01-26 12:42:24.799] [info]   at 
org.scalatest.TestSuite.withFixture(TestSuite.scala:196)
   [01-26 12:42:24.799] [info]   at 
org.scalatest.TestSuite.withFixture$(TestSuite.scala:195)
   [01-26 12:42:24.799] [info]   at 
org.apache.pekko.testkit.PekkoSpec.withFixture(PekkoSpec.scala:79)
   [01-26 12:42:24.799] [info]   at 
org.scalatest.wordspec.AnyWordSpecLike.invokeWithFixture$1(AnyWordSpecLike.scala:1238)
   [01-26 12:42:24.799] [info]   at 
org.scalatest.wordspec.AnyWordSpecLike.$anonfun$runTest$1(AnyWordSpecLike.scala:1250)
   [01-26 12:42:24.799] [info]   at 
org.scalatest.SuperEngine.runTestImpl(Engine.scala:306)
   [01-26 12:42:24.799] [info]   at 
org.scalatest.wordspec.AnyWordSpecLike.runTest(AnyWordSpecLike.scala:1250)
   [01-26 12:42:24.799] [info]   at 
org.scalatest.wordspec.AnyWordSpecLike.runTest$(AnyWordSpecLike.scala:1232)
   [01-26 12:42:24.799] [info]   at 
org.apache.pekko.testkit.PekkoSpec.runTest(PekkoSpec.scala:79)
   [01-26 12:42:24.800] [info]   at 
org.scalatest.wordspec.AnyWordSpecLike.$anonfun$runTests$1(AnyWordSpecLike.scala:1309)
   [01-26 12:42:24.800] [info]   at 
org.scalatest.SuperEngine.$anonfun$runTestsInBranch$1(Engine.scala:413)
   [01-26 12:42:24.801] [info]   at 
scala.collection.immutable.List.foreach(List.scala:334)
   [01-26 12:42:24.802] [info]   at 
org.scalatest.SuperEngine.traverseSubNodes$1(Engine.scala:401)
   [01-26 12:42:24.803] [info]   at 
org.scalatest.SuperEngine.runTestsInBranch(Engine.scala:396)
   [01-26 12:42:24.803] [info]   at 
org.scalatest.SuperEngine.runTestsImpl(Engine.scala:475)
   [01-26 12:42:24.803] [info]   at 
org.scalatest.wordspec.AnyWordSpecLike.runTests(AnyWordSpecLike.scala:1309)
   [01-26 12:42:24.803] [info]   at 
org.scalatest.wordspec.AnyWordSpecLike.runTests$(AnyWordSpecLike.scala:1308)
   [01-26 12:42:24.804] [info]   at 
org.apache.pekko.testkit.PekkoSpec.runTests(PekkoSpec.scala:79)
   [01-26 12:42:24.804] [info]   at org.scalatest.Suite.run(Suite.scala:1114)
   [01-26 12:42:24.804] [info]   at org.scalatest.Suite.run$(Suite.scala:1096)
   [01-26 12:42:24.804] [info]   at 
org.apache.pekko.testkit.PekkoSpec.org$scalatest$wordspec$AnyWordSpecLike$$super$run(PekkoSpec.scala:79)
   [01-26 12:42:24.804] [info]   at 
org.scalatest.wordspec.AnyWordSpecLike.$anonfun$run$1(AnyWordSpecLike.scala:1354)
   [01-26 12:42:24.805] [info]   at 
org.scalatest.SuperEngine.runImpl(Engine.scala:535)
   [01-26 12:42:24.805] [info]   at 
org.scalatest.wordspec.AnyWordSpecLike.run(AnyWordSpecLike.scala:1354)
   [01-26 12:42:24.805] [info]   at 
org.scalatest.wordspec.AnyWordSpecLike.run$(AnyWordSpecLike.scala:1352)
   [01-26 12:42:24.805] [info]   at 
org.apache.pekko.testkit.PekkoSpec.org$scalatest$BeforeAndAfterAll$$super$run(PekkoSpec.scala:79)
   [01-26 12:42:24.805] [info]   at 
org.scalatest.BeforeAndAfterAll.liftedTree1$1(BeforeAndAfterAll.scala:213)
   [01-26 12:42:24.806] [info]   at 
org.scalatest.BeforeAndAfterAll.run(BeforeAndAfterAll.scala:210)
   [01-26 12:42:24.806] [info]   at 
org.scalatest.BeforeAndAfterAll.run$(BeforeAndAfterAll.scala:208)
   [01-26 12:42:24.806] [info]   at 
org.apache.pekko.testkit.PekkoSpec.run(PekkoSpec.scala:79)
   [01-26 12:42:24.806] [info]   at 
org.scalatest.tools.Framework.org$scalatest$tools$Framework$$runSuite(Framework.scala:321)
   [01-26 12:42:24.806] [info]   at 
org.scalatest.tools.Framework$ScalaTestTask.execute(Framework.scala:517)
   [01-26 12:42:24.806] [info]   at 
sbt.ForkMain$Run.lambda$runTest$1(ForkMain.java:414)
   [01-26 12:42:24.807] [info]   at 
java.util.concurrent.FutureTask.run(FutureTask.java:266)
   [01-26 12:42:24.807] [info]   at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
   [01-26 12:42:24.808] [info]   at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
   [01-26 12:42:24.808] [info]   at java.lang.Thread.run(Thread.java:750)
   [01-26 12:42:24.808] [info]   Cause: 
java.lang.UnsupportedOperationException: As of 2022/09/29 (release 21.7) 
makeExtensionsImmutable should not be called from protobuf gencode. If you are 
seeing this message, your gencode is vulnerable to a denial of service attack. 
You should regenerate your code using protobuf 25.6 or later. Use the latest 
version that meets your needs. However, if you understand the risks and wish to 
continue with vulnerable gencode, you can set the system property 
`-Dcom.google.protobuf.use_unsafe_pre22_gencode` on the command line. See 
security vulnerability: 
https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-h4h5-3hr4-j3g2
   [01-26 12:42:24.808] [info]   at 
org.apache.pekko.protobufv3.internal.GeneratedMessage.warnPre22Gencode(GeneratedMessage.java:327)
   [01-26 12:42:24.808] [info]   at 
org.apache.pekko.protobufv3.internal.GeneratedMessageV3.makeExtensionsImmutable(Ge
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscr...@pekko.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscr...@pekko.apache.org
For additional commands, e-mail: notifications-h...@pekko.apache.org

Reply via email to