[COLLECTIONS-717] ObjectInputFilter REJECTED: class org.apache.commons.collections.functors.InstantiateFactory

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 4.1
• Component/s: Functor

Environment

WebLogic 12.2.1.3 server

• Assignee: Unassigned
• Reporter: kirubakaran
• Created: 20/May/19 13:31
• Updated: 05/Jul/19 15:24

Description

we have an object rejection issue with latest version of common collection for the class InstantiateFactory

we have set system property to enable unsafe serialization= true but still we have object rejection for org.apache.commons.collections.functors.InstantiateFactory.

can you please help us to resolve the issue.

Error log:

DOMAIN] > <BEA-000000> <ObjectInputFilter REJECTED: class org.apache.commons.collections.functors.InstantiateFactory, array length: -1, nRefs: 3, depth: 2, bytes: 229, ex: n/a>

####<May 8, 2019 1:08:43,859 PM EDT> <Error> <RJVM> <nygindapnp613.us.db.com> <MS1> <ExecuteThread: '2' for queue: 'weblogic.socket.Muxer'> <<WLS Kernel>> <> <a8f22bc1-d077-4f1b-be08-7677cfc592c6-00000005> <1557335323859> <[severity-value: 8] [rid: 0] [partition-id: 0] [partition-name: DOMAIN] > <BEA-000503> <Incoming message header or abbreviation processing failed.

 java.io.InvalidClassException: filter status: REJECTED

java.io.InvalidClassException: filter status: REJECTED

        at java.io.ObjectInputStream.filterCheck(ObjectInputStream.java:1255)

        at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1878)

        at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1751)

        at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1560)

        at java.io.ObjectInputStream.readObject(ObjectInputStream.java:431)

        at weblogic.rjvm.ClassTableEntry.readExternal(ClassTableEntry.java:106)

        at java.io.ObjectInputStream.readExternalData(ObjectInputStream.java:2118)

        at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:2067)

        at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1573)

        at java.io.ObjectInputStream.readObject(ObjectInputStream.java:431)

        at weblogic.rjvm.InboundMsgAbbrev.readObject(InboundMsgAbbrev.java:73)

        at weblogic.rjvm.InboundMsgAbbrev.read(InboundMsgAbbrev.java:45)

        at weblogic.rjvm.MsgAbbrevJVMConnection.readMsgAbbrevs(MsgAbbrevJVMConnection.java:324)

        at weblogic.rjvm.MsgAbbrevInputStream.init(MsgAbbrevInputStream.java:219)

        at weblogic.rjvm.MsgAbbrevJVMConnection.dispatch(MsgAbbrevJVMConnection.java:556)

        at weblogic.rjvm.t3.MuxableSocketT3.dispatch(MuxableSocketT3.java:658)

        at weblogic.socket.BaseAbstractMuxableSocket.dispatch(BaseAbstractMuxableSocket.java:397)

        at weblogic.socket.SocketMuxer.readReadySocketOnce(SocketMuxer.java:981)

        at weblogic.socket.SocketMuxer.readReadySocket(SocketMuxer.java:917)

        at weblogic.socket.PosixSocketMuxer.processSockets(PosixSocketMuxer.java:171)

        at weblogic.socket.SocketReaderRequest.run(SocketReaderRequest.java:30)

        at weblogic.socket.SocketReaderRequest.execute(SocketReaderRequest.java:43)

        at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:147)

      at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:119)