[CXF-8027] illegal reflective access operation in EndpointReferenceUtils

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 3.3.1
• Fix Version/s: 3.3.2
• Component/s: WS-* Components

Environment

OpenJDK 11.0.2

Tomcat 9.0.16

OSX 10.14.4

• Estimated Complexity: Unknown
• Assignee: Colm O hEigeartaigh
• Reporter: Steven Pearce
• Created: 18/Apr/19 22:04
• Updated: 13/May/19 18:08
• Resolved: 19/Apr/19 10:42

Description

During some testing today, we noticed this message appearing in the logs.

WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by org.apache.cxf.ws.addressing.EndpointReferenceUtils (file:/opt/dev/intellij/rodgers_api/reseller.transactions_10/target/reseller.transactions_10-10/WEB-INF/lib/cxf-core-3.3.1.jar) to method com.sun.org.apache.xerces.internal.dom.ElementImpl.setReadOnly(boolean,boolean)
WARNING: Please consider reporting this to the maintainers of org.apache.cxf.ws.addressing.EndpointReferenceUtils
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release

Now I see a number of similar issues with ReflectionUtils, but nothing for EndpointReferenceUtils.

The line that is causing the issue seems to be https://github.com/apache/cxf/blob/master/core/src/main/java/org/apache/cxf/ws/addressing/EndpointReferenceUtils.java#L645
or specifically in v3.3.1 this line https://github.com/apache/cxf/blob/7ce7ab3e718dd25df39b3e337a5d890e4bcf1ba9/core/src/main/java/org/apache/cxf/ws/addressing/EndpointReferenceUtils.java#L651

 with --illegal-access=debug the following exception is generated

WARNING: Illegal reflective access by org.apache.cxf.ws.addressing.EndpointReferenceUtils (file:/opt/dev/intellij/rodgers_api/reseller.transactions_10/target/reseller.transactions_10-10/WEB-INF/lib/cxf-core-3.3.1.jar) to method com.sun.org.apache.xerces.internal.dom.ElementImpl.setReadOnly(boolean,boolean)
at org.apache.cxf.ws.addressing.EndpointReferenceUtils.unsetReadonly(EndpointReferenceUtils.java:651)
at org.apache.cxf.ws.addressing.EndpointReferenceUtils.createSchema(EndpointReferenceUtils.java:570)
at org.apache.cxf.ws.addressing.EndpointReferenceUtils.getSchema(EndpointReferenceUtils.java:668)
at org.apache.cxf.interceptor.AbstractInDatabindingInterceptor.setDataReaderValidation(AbstractInDatabindingInterceptor.java:116)
at org.apache.cxf.interceptor.AbstractInDatabindingInterceptor.getDataReader(AbstractInDatabindingInterceptor.java:90)
at org.apache.cxf.interceptor.AbstractInDatabindingInterceptor.getDataReader(AbstractInDatabindingInterceptor.java:95)
at org.apache.cxf.wsdl.interceptors.DocLiteralInInterceptor.handleMessage(DocLiteralInInterceptor.java:92)
at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:308)
at org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)
at org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:267)
at org.apache.cxf.transport.servlet.ServletController.invokeDestination(ServletController.java:234)
at org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:208)
at org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:160)
at org.apache.cxf.transport.servlet.CXFNonSpringServlet.invoke(CXFNonSpringServlet.java:216)
at org.apache.cxf.transport.servlet.AbstractHTTPServlet.handleRequest(AbstractHTTPServlet.java:301)
at org.apache.cxf.transport.servlet.AbstractHTTPServlet.doPost(AbstractHTTPServlet.java:220)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:660)
at org.apache.cxf.transport.servlet.AbstractHTTPServlet.service(AbstractHTTPServlet.java:276)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:200)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:490)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:139)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92)
at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:668)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343)
at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:408)

 

 

 

Issue Links

• relates to: CXF-3331 Schema validation breaks with multiple Instances of Java first JAX-WS service