Backport #3275 in 2.12 (proposing micro-release 2.12.7.2) (#4509)

Author: millems

release-notes/CREDITS-2.x

@@ -1324,3 +1324,8 @@ Jelle Voost (jellevoost@github)
 JoeWoo (xJoeWoo@github)
   * Reported #3139: Deserialization of "empty" subtype with DEDUCTION failed
    (2.12.4)
+
+Jason Harper (jsharper@github)
+  * Reported #3275: JDK 16 Illegal reflective access for `Throwable.setCause()` with
+   `PropertyNamingStrategy.UPPER_CAMEL_CASE`
+  (2.12.7.2)

release-notes/VERSION-2.x

@@ -4,6 +4,12 @@ Project: jackson-databind
 === Releases === 
 ------------------------------------------------------------------------
 
+2.12.7.2 (not yet released)
+
+#3275: JDK 16 Illegal reflective access for `Throwable.setCause()` with
+  `PropertyNamingStrategy.UPPER_CAMEL_CASE`
+ (reported by Jason H)
+
 2.12.7.1 (12-Oct-2022)
 
 #3582: Add check in `BeanDeserializer._deserializeFromArray()` to prevent

src/main/java/com/fasterxml/jackson/databind/deser/BeanDeserializerFactory.java

@@ -425,6 +425,17 @@ public JsonDeserializer<Object> buildThrowableDeserializer(DeserializationContex
 
         // But then let's decorate things a bit
         // Need to add "initCause" as setter for exceptions (sub-classes of Throwable).
+        // 26-May-2022, tatu: [databind#3275] Looks like JDK 12 added "setCause()"
+        //    which can wreak havoc, at least with NamingStrategy
+        Iterator<SettableBeanProperty> it = builder.getProperties();
+        while (it.hasNext()) {
+            SettableBeanProperty prop = it.next();
+            if ("setCause".equals(prop.getMember().getName())) {
+                // For now this is allowed as we are returned "live" Iterator...
+                it.remove();
+                break;
+            }
+        }
         AnnotatedMethod am = beanDesc.findMethod("initCause", INIT_CAUSE_PARAMS);
         if (am != null) { // should never be null
             SimpleBeanPropertyDefinition propDef = SimpleBeanPropertyDefinition.construct(ctxt.getConfig(), am,
@@ -454,10 +465,9 @@ public JsonDeserializer<Object> buildThrowableDeserializer(DeserializationContex
             }
         }
         JsonDeserializer<?> deserializer = builder.build();
-        
-        /* At this point it ought to be a BeanDeserializer; if not, must assume
-         * it's some other thing that can handle deserialization ok...
-         */
+
+        // At this point it ought to be a BeanDeserializer; if not, must assume
+        // it's some other thing that can handle deserialization ok...
         if (deserializer instanceof BeanDeserializer) {
             deserializer = new ThrowableDeserializer((BeanDeserializer) deserializer);
         }

src/test/java/com/fasterxml/jackson/databind/exc/ExceptionDeserializationTest.java

@@ -172,7 +172,7 @@ public void testLineNumberAsString() throws IOException
         assertNotNull(exc);
     }
 
-    // [databind#1842]:
+    // [databind#1842]
     public void testNullAsMessage() throws IOException
     {
         Exception exc = MAPPER.readValue(aposToQuotes(

src/test/java/com/fasterxml/jackson/databind/exc/ExceptionSerializationTest.java

@@ -6,6 +6,7 @@
 import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
 import com.fasterxml.jackson.core.JsonParser;
 import com.fasterxml.jackson.databind.*;
+import com.fasterxml.jackson.databind.json.JsonMapper;
 
 /**
  * Unit tests for verifying that simple exceptions can be serialized.
@@ -132,4 +133,15 @@ public void testJsonMappingExceptionSerialization() throws IOException {
             fail("Exception should contain '"+MATCH+"', does not: '"+msg+"'");
         }
     }
+
+    // [databind#3275]
+    public void testSerializeWithNamingStrategy() throws IOException {
+        final ObjectMapper mapper = JsonMapper.builder()
+                .propertyNamingStrategy(PropertyNamingStrategies.UPPER_CAMEL_CASE)
+                .build();
+        String json = mapper.writeValueAsString(new Exception("message!"));
+        Map<?,?> map = mapper.readValue(json, Map.class);
+        assertEquals(new HashSet<>(Arrays.asList("Cause", "StackTrace", "Message", "Suppressed", "LocalizedMessage")),
+                map.keySet());
+    }
 }