[jackson-databind] 03/04: Fix FTBFS due to missing helper method.
Markus Koschany
apo at moszumanska.debian.org
Fri Oct 20 13:04:52 UTC 2017
This is an automated email from the git hooks/post-receive script.
apo pushed a commit to branch jessie
in repository jackson-databind.
commit 384df1fc06dcc90b9d4271f7faf05c34d00c19ae
Author: Markus Koschany <apo at debian.org>
Date: Thu Oct 19 02:07:28 2017 +0200
Fix FTBFS due to missing helper method.
Work around the issue by just throwing the exception without it.
---
debian/patches/CVE-2017-7525.patch | 13 ++++++-------
debian/patches/fix-using-bundle.diff | 8 ++++++++
2 files changed, 14 insertions(+), 7 deletions(-)
diff --git a/debian/patches/CVE-2017-7525.patch b/debian/patches/CVE-2017-7525.patch
index 5c5531f..d864b43 100644
--- a/debian/patches/CVE-2017-7525.patch
+++ b/debian/patches/CVE-2017-7525.patch
@@ -6,13 +6,13 @@ Bug-Upstream: https://github.com/FasterXML/jackson-databind/issues/1599
Bug-Debian: https://bugs.debian.org/870848
Origin: https://github.com/FasterXML/jackson-databind/commit/60d459cedcf079c6106ae7da2ac562bc32dcabe1
---
- .../databind/deser/BeanDeserializerFactory.java | 50 ++++++++++++++++++++++
- .../databind/interop/IllegalTypesCheckTest.java | 40 +++++++++++++++++
- 2 files changed, 90 insertions(+)
+ .../databind/deser/BeanDeserializerFactory.java | 49 ++++++++++++++++++++++
+ .../databind/interop/IllegalTypesCheckTest.java | 40 ++++++++++++++++++
+ 2 files changed, 89 insertions(+)
create mode 100644 src/test/java/com/fasterxml/jackson/databind/interop/IllegalTypesCheckTest.java
diff --git a/src/main/java/com/fasterxml/jackson/databind/deser/BeanDeserializerFactory.java b/src/main/java/com/fasterxml/jackson/databind/deser/BeanDeserializerFactory.java
-index a10cc45..f45b1b4 100644
+index a10cc45..d092a39 100644
--- a/src/main/java/com/fasterxml/jackson/databind/deser/BeanDeserializerFactory.java
+++ b/src/main/java/com/fasterxml/jackson/databind/deser/BeanDeserializerFactory.java
@@ -44,6 +44,36 @@ public class BeanDeserializerFactory
@@ -61,7 +61,7 @@ index a10cc45..f45b1b4 100644
// Use generic bean introspection to build deserializer
return buildBeanDeserializer(ctxt, type, beanDesc);
}
-@@ -875,4 +907,22 @@ public class BeanDeserializerFactory
+@@ -875,4 +907,21 @@ public class BeanDeserializerFactory
}
return status;
}
@@ -78,8 +78,7 @@ index a10cc45..f45b1b4 100644
+ String full = type.getRawClass().getName();
+
+ if (_cfgIllegalClassNames.contains(full)) {
-+ ctxt.reportBadTypeDefinition(beanDesc,
-+ "Illegal type (%s) to deserialize: prevented for security reasons", full);
++ throw new JsonMappingException("Illegal type (" + full + ") to deserialize: prevented for security reasons");
+ }
+ }
+
diff --git a/debian/patches/fix-using-bundle.diff b/debian/patches/fix-using-bundle.diff
index acee1b0..aafd3e2 100644
--- a/debian/patches/fix-using-bundle.diff
+++ b/debian/patches/fix-using-bundle.diff
@@ -1,3 +1,11 @@
+From: Debian Java Maintainers <pkg-java-maintainers at lists.alioth.debian.org>
+Date: Thu, 19 Oct 2017 01:52:47 +0200
+Subject: fix-using-bundle
+
+---
+ pom.xml | 6 ++++++
+ 1 file changed, 6 insertions(+)
+
diff --git a/pom.xml b/pom.xml
index f801efc..b2019a2 100644
--- a/pom.xml
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-java/jackson-databind.git
More information about the pkg-java-commits
mailing list