IBM Support

PH43113: java.lang.ClassNotFoundException for SecureSerializedViewCollection during Session Persistence

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • The application can fail with the following exception:
    java.lang.ClassNotFoundException: org.apache.myfaces.applicatio
    n.viewstate.SecureSerializedViewCollection
    

Local fix

  • N/A
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  Users of JSF with either PH34711 or         *
    *                  PH36923 applied on IBM WebSphere            *
    *                  Application Server versions                 *
    *                  8.5.5.5-8.5.5.21 and 8.0.0.15.              *
    *                  Users of the jsf-2.0 feature on WebSphere   *
    *                  Liberty 21.0.0.4 through 22.0.0.2.          *
    *                  Users of the jsf-2.0 feature on WebSphere   *
    *                  Liberty with either PH34711 or PH36923      *
    *                  applied.                                    *
    *                  Note: IBM WebSphere Application Server      *
    *                  version 9.0 is unaffected by this error.    *
    ****************************************************************
    * PROBLEM DESCRIPTION: java.lang.ClassNotFoundException:       *
    *                      org.apache.myfaces.application.viewstat *
    *                      e.SecureSerializedViewCollection        *
    *                      occurs with session persistence         *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    Following PH34711 and PH36923 for jsf-2.0, an export was
    missed, which will cause a ClassNotFoundException if session
    persistence is enabled. Both database and memory-to-memory
    persistence are affected. This exception is encountered during
    session deserialization as the class is looked up.  The
    resulting stack trace will look similar to:
    Websphere:
    java.lang.ClassNotFoundException:
    org.apache.myfaces.application.viewstate.SecureSerializedViewCol
    lection at java.lang.Class.forNameImpl(Native Method) at
    java.lang.Class.forName(Class.java:333) at
    com.ibm.ws.util.WsObjectInputStream.loadClass(WsObjectInputStrea
    m.java:229) at
    ...
    at
    java.io.ObjectInputStream.readObject(ObjectInputStream.java:517)
    at
    com.ibm.ws.session.utils.SessionLoader$1.run(SessionLoader.java:
    112) at
    java.security.AccessController.doPrivileged(AccessController.jav
    a:738) at
    com.ibm.ws.session.utils.SessionLoader.loadObject(SessionLoader.
    java:106)
    Liberty:
    SESN0051E: An attempt to deserialize a session object from the
    backend has resulted in a ClassNotFoundException
    Exception is:java.lang.ClassNotFoundException:
    org.apache.myfaces.application.viewstate.SecureSerializedViewCol
    lection    at
    ...
    java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:522)
    at
    com.ibm.ws.serialization.DeserializationObjectInputStream.loadCl
    ass(DeserializationObjectInputStream.java:62)    at
    com.ibm.ws.serialization.internal.DeserializationObjectInputStre
    amImpl.loadClass(DeserializationObjectInputStreamImpl.java:48)
    at
    com.ibm.ws.serialization.DeserializationObjectInputStream.resolv
    eClass(DeserializationObjectInputStream.java:133)    at
    com.ibm.ws.serialization.DeserializationObjectInputStream.resolv
    eClass(DeserializationObjectInputStream.java:171)   ...
    com.ibm.ws.session.utils.SessionLoader.loadObject(SessionLoader.
    java:62)    at
    com.ibm.ws.session.store.db.DatabaseHashMap.getValue(DatabaseHas
    hMap.java:1613)    at
    com.ibm.ws.session.store.db.DatabaseSession.getSingleRowAppData(
    DatabaseSession.java:168)    at
    com.ibm.ws.session.store.db.DatabaseSession.getSwappableData(Dat
    abaseSession.java:81)
    

Problem conclusion

  • JSF was updated to avoid this ClassNotFoundException. The fix
    for this APAR is targeted for inclusion in fix packs 8.5.5.22
    and Liberty 22.0.0.3.
    
    For more information, see 'Recommended Updates for
    WebSphere Application Server':
    https://www.ibm.com/support/pages/node/715553
    

Temporary fix

Comments

APAR Information

  • APAR number

    PH43113

  • Reported component name

    WEBS APP SERV N

  • Reported component ID

    5724H8800

  • Reported release

    850

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2022-01-04

  • Closed date

    2022-02-11

  • Last modified date

    2022-02-28

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBS APP SERV N

  • Fixed component ID

    5724H8800

Applicable component levels

  • R800 PSY

       UP

  • R850 PSY

       UP

  • R900 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.5","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
03 May 2022