PH57888: Process containing Manual Task step with secure property may result in UCD server running into OutOfMemoryError: Java heap space

APAR status

• Closed as program error.

Error description

• Process containing Manual Task step with secure property may
  result in UCD server running into OutOfMemoryError: Java heap
  space
  
  Steps to reproduce
  
  1. Create a generic process. Add manual task. Add secure type
  property with a default value. Save process.
  2. Edit manual task, click ok without modification. Save process
  2a. Same behavior if manual task box is moved to another
  position (design view), and saved.
  3. Repeat
  4. The VC record will grow exponentially, eventually it will
  lead to the OutOfMemoryError
  
  com.urbancode.commons.web.filter.ExceptionHandlingFilter","msg":
  "org.glassfish.jersey.server.ContainerException:
  java.lang.OutOfMemoryError: Java heap
  space","ex_typ":"org.glassfish.jersey.server.ContainerException"
  ,"ex_msg":"java.lang.OutOfMemoryError: Java heap
  space","ex_trc":"org.glassfish.jersey.server.ContainerException:
  java.lang.OutOfMemoryError: Java heap space
  at
  com.urbancode.commons.util.crypto.algs.Crypt1Alg.split(Crypt1Alg
  .java:178)
  at
  com.urbancode.commons.util.crypto.algs.Crypt1Alg.decode(Crypt1Al
  g.java:117)
  at
  com.urbancode.commons.util.crypto.CryptStringUtil.decryptValueOn
  ce(CryptStringUtil.java:440)
  at
  com.urbancode.commons.util.crypto.CryptStringUtil.getDecryptedVa
  lue(CryptStringUtil.java:265)
  at
  com.urbancode.commons.util.crypto.CryptStringUtil.decrypt(CryptS
  tringUtil.java:131)
  at
  com.urbancode.air.property.prop_def.PropDef.decryptValue(PropDef
  .java:757)
  at
  com.urbancode.air.property.prop_def.PropDef.getDefaultValue(Prop
  Def.java:453)
  at
  com.urbancode.ds.web.cli.rest.deploy.PropDefAPIHelper.setValuesF
  romJSON(PropDefAPIHelper.java:310)
  at
  com.urbancode.ds.web.cli.rest.deploy.PropDefAPIHelper.importProp
  ertyDefs(PropDefAPIHelper.java:392)
  at
  com.urbancode.air.property.web.rest.PropDefResource.importProper
  tyDefs(PropDefResource.java:77)
  at
  com.urbancode.ds.subsys.task.domain.activity.AbstractTaskActivit
  y.getPropSheetDef(AbstractTaskActivity.java:268)
  at
  com.urbancode.ds.subsys.deploy.config.HttpUpdateUtil.updateManua
  lOrApprovalTaskResolveUrl(HttpUpdateUtil.java:57)
  at
  com.urbancode.ds.subsys.deploy.config.component_process.Componen
  tProcessVCHelper.toObject(ComponentProcessVCHelper.java:103)
  at
  com.urbancode.ds.subsys.deploy.config.component_process.Componen
  tProcessVCHelper.toObject(ComponentProcessVCHelper.java:31)
  at
  com.urbancode.commons.xml.marshall.BaseXMLHelper.toObject(BaseXM
  LHelper.java:55)
  at
  com.urbancode.air.vc.xml.XMLVCHelper.restore(XMLVCHelper.java:47
  0)
  at
  com.urbancode.air.vc.PersistentReader.restore(PersistentReader.j
  ava:871)
  at
  com.urbancode.air.vc.PersistentReader.restore(PersistentReader.j
  ava:837)
  at
  com.urbancode.air.vc.PersistentReader.restore(PersistentReader.j
  ava:892)
  at
  com.urbancode.air.vc.PersistentReader.readPersistentForHandle(Pe
  rsistentReader.java:674)
  at com.urbancode.air.vc.Session.restore(Session.java:382)
  at
  com.urbancode.ds.persistence.versioned.VCFactory.restore(VCFacto
  ry.java:46)
  at
  com.urbancode.ds.subsys.deploy.config.component_process.Componen
  tProcessFactory.getComponentProcessForId(ComponentProcessFactory
  .java:852)
  at
  com.urbancode.ds.subsys.deploy.config.component_process.Componen
  tProcessFactory.getComponentProcessForId(ComponentProcessFactory
  .java:848)
  at
  com.urbancode.ds.subsys.deploy.workflow.activity.RunComponentPro
  cessActivity.getComponentProcessLatestVersion(RunComponentProces
  sActivity.java:343)
  at
  com.urbancode.ds.subsys.deploy.workflow.activity.RunComponentPro
  cessActivity.getUnfilledSecrets(RunComponentProcessActivity.java
  :433)
  at
  com.urbancode.ds.subsys.deploy.config.application_process.Applic
  ationProcess.getUnfilledSecrets(ApplicationProcess.java:502)
  at
  com.urbancode.ds.web.rest.config.ApplicationProcessResource.getU
  nfilledSecrets(ApplicationProcessResource.java:1290)
  at
  com.urbancode.ds.web.rest.config.ApplicationProcessResource.getU
  nfilledSecrets(ApplicationProcessResource.java:1281)
  at
  com.urbancode.ds.web.rest.config.ApplicationProcessResource_$$_j
  vstb9a_9._d61getUnfilledSecrets(ApplicationProcessResource_$$_jv
  stb9a_9.java)
  at
  jdk.internal.reflect.GeneratedMethodAccessor521.invoke(Unknown
  Source)
  at
  java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invo
  ke(Unknown Source)
  at java.base/java.lang.reflect.Method.invoke(Unknown Source)
  at
  org.glassfish.hk2.utilities.reflection.ReflectionHelper.invoke(R
  eflectionHelper.java:1264)
  

Local fix

• Work Around
  
  1. Edit Manual Task step and remove any secure properties that
  were added on the Manual Task step in an application process /
  component process or generic process. Save the process
  
  2. Alternatively delete the complete Manual Task step from the
  process and save the process.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * UrbanCode Deploy Web UI Users                                *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Process containing Manual Task step with secure property may *
  * result in UCD server running into OutOfMemoryError: Java     *
  * heap space                                                   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Fix is provided in IBM UrbanCode Deploy 8.0.0.1              *
  ****************************************************************
  

Problem conclusion

• Fix is provided in IBM UrbanCode Deploy 8.0.0.1
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  UC DEPLOY

• Fixed component ID

  5725M5400

Applicable component levels