You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@dubbo.apache.org by GitBox <gi...@apache.org> on 2022/11/21 11:35:03 UTC
[GitHub] [dubbo] YoungHu opened a new issue, #10975: [3.x] hessian upgrade infactor
YoungHu opened a new issue, #10975:
URL: https://github.com/apache/dubbo/issues/10975
<!-- If you need to report a security issue please visit https://github.com/apache/dubbo/security/policy -->
- [x] I have searched the [issues](https://github.com/apache/dubbo/issues) of this repository and believe that this is not a duplicate.
### Environment
* Dubbo version: 3.0.12
* Operating System version: Mac OS
* Java version: JDK8
### Steps to reproduce this issue
1. POJO which name `com.xxx.dto.response.RowResponse` without implement java.io.Serializable
2. invoke provider which return this POJO
3. get warning log with below message and invoke result return HashMap class type.
```
com.alibaba.com.caucho.hessian.io.SerializerFactory.getDeserializer 679: Hessian/Burlap: 'com.xxx.dto.response.RowResponse' is an unknown class in sun.misc.Launcher$AppClassLoader@18b4aac2:
java.lang.IllegalStateException: Serialized class com.xxx.dto.response.RowResponse must implement java.io.Serializable
```
Pls. provide [GitHub address] to reproduce this issue.
### Expected Behavior
invoke result return type is `com.xxx.dto.response.RowResponse`
### Actual Behavior
return HashMap
### Cause By
this problem cause by hessian version upgrade from 3.2.12 to 3.2.13.
this is the change log link: https://github.com/apache/dubbo-hessian-lite/compare/v3.2.12...v3.2.13
new version hessian add limitation for deserializer method, it require POJO implement java.io.Serializable
it seems not reasonable for this block upgrade, can we remove this limitation?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For additional commands, e-mail: notifications-help@dubbo.apache.org
[GitHub] [dubbo] AlbumenJ commented on issue #10975: [3.x] hessian upgrade infactor
Posted by GitBox <gi...@apache.org>.
AlbumenJ commented on issue #10975:
URL: https://github.com/apache/dubbo/issues/10975#issuecomment-1323235161
Object pass in Dubbo should implement java.io.Serializable interface. This should be a programming specification, and this can prevent send unexpected object to remote, which may cause a lot of serious leaks.
If you want to send the object, which not implement java.io.Serializable interface, please add `-Ddubbo.hessian.allowNonSerializable=true` to jvm arguments.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For additional commands, e-mail: notifications-help@dubbo.apache.org
[GitHub] [dubbo] YoungHu closed issue #10975: [3.x] hessian upgrade infactor
Posted by GitBox <gi...@apache.org>.
YoungHu closed issue #10975: [3.x] hessian upgrade infactor
URL: https://github.com/apache/dubbo/issues/10975
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For additional commands, e-mail: notifications-help@dubbo.apache.org