geofence-server imports obsolete asm dep

Description

As a race condition, if the old asm jar is loaded, it causes errors in various modules: for instance the getcapa document fails

 

<OnlineResource xmlns:xlink="http://www.w3.org/1999/xlink" xlink:type="simple" xlink:href="https://_xxx_/geoserver/ows?service=WMS&amp;version=1.3.0&amp;request=GetLegendGraphic <?xml version="1.0" encoding="UTF-8"?> <ServiceExceptionReport version="1.3.0" xmlns="http://www.opengis.net/ogc" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.opengis.net/ogc https://_xxx_/geoserver/schemas/wms/1.3.0/exceptions_1_3_0.xsd"> <ServiceException> java.lang.IncompatibleClassChangeError: class org.objectweb.asm.tree.ClassNode has interface org.objectweb.asm.ClassVisitor as super class class org.objectweb.asm.tree.ClassNode has interface org.objectweb.asm.ClassVisitor as super class </ServiceException> </ServiceExceptionReport>

Errors have been reported also when using the css module.

This error is similar to https://osgeo-org.atlassian.net/browse/GEOS-8524

asm version 3.1, that is included in Geofence, is very old:

[INFO] +- org.geoserver.extension:gs-geofence-server:jar:2.27-SNAPSHOT:compile [INFO] | +- com.googlecode.genericdao:dao:jar:1.1.0:compile [INFO] | | \- com.googlecode.genericdao:search:jar:1.1.0:compile [INFO] | +- com.googlecode.genericdao:search-jpa-hibernate:jar:1.1.0:compile [INFO] | | \- com.googlecode.genericdao:search-hibernate:jar:1.1.0:compile [INFO] | +- org.hibernate:hibernate-entitymanager:jar:3.6.9.Final:compile [INFO] | | +- cglib:cglib:jar:2.2:compile [INFO] | | | \- asm:asm:jar:3.1:compile

The CSS module is using version 9.2.
Also, Geoserver already ships with cglib 3.3

Environment

None

Activity

Fixed

Details

Assignee

Reporter

Fix versions

Affects versions

Components

Priority

Created November 15, 2024 at 3:58 PM
Updated November 25, 2024 at 2:28 PM
Resolved November 25, 2024 at 2:28 PM