I see this warning message. An illegal reflective access operation has occurred

Adrian Hodgson5 years ago

I had a chance to get hold of a 64 bit machine today so installed the 64 bit version 4.2 Linux install on a ubuntu 18.04 server operating system. I do not get this in the 32 bit computer running traccar. on ubuntu 16.04

The only differences I can think of is the version of java between the two, this 64 bit will ahve the version as installed with the install package and on the 32 bit machine I install from ubuntu.
Have added the mysql database, apache2 and made it https: all from following the installation guide, no devices yetone thing I noticed is the above warning message when I run:
sudo systemctl status traccar I get:-

● traccar.service - traccar
   Loaded: loaded (/etc/systemd/system/traccar.service; enabled; vendor preset: enabled)
  Drop-In: /etc/systemd/system/traccar.service.d
           └─run-as-user.conf
   Active: active (running) since Fri 2019-01-18 19:00:43 GMT; 11min ago
 Main PID: 712 (java)
    Tasks: 32 (limit: 2017)
   CGroup: /system.slice/traccar.service
           └─712 /opt/traccar/jre/bin/java -jar tracker-server.jar conf/traccar.xml

Jan 18 19:00:43 traccar systemd[1]: Started traccar.
Jan 18 19:01:09 traccar traccar[712]: WARNING: An illegal reflective access operation has occurred
Jan 18 19:01:09 traccar traccar[712]: WARNING: Illegal reflective access by com.google.inject.internal.cglib.core.$ReflectUtils$1 (file:/opt/traccar/lib/guice-4.2.1.jar) to method java.lang.ClassLoader.
Jan 18 19:01:09 traccar traccar[712]: WARNING: Please consider reporting this to the maintainers of com.google.inject.internal.cglib.core.$ReflectUtils$1
Jan 18 19:01:09 traccar traccar[712]: WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
Jan 18 19:01:09 traccar traccar[712]: WARNING: All illegal access operations will be denied in a future release

I have run update and upgrade to make sure all is the latest patches. can anyone assist?

The server is working although I have not tried attaching any devices yet.

Here is a section of the tracker-server.log file in case it helps provide some information.
2019-01-18 19:01:03  INFO: UPDATE traccardb.DATABASECHANGELOG SET MD5SUM = '8:3974bfe5a2e962c0cd663433c832c16a' WHERE ID = 'changelog-4.0-pre' AND AUTHOR = 'author' AND FILENAME = 'changelog-4.0'
2019-01-18 19:01:04  INFO: UPDATE traccardb.DATABASECHANGELOG SET MD5SUM = '8:65fb49c5be37693183708351c507dd50' WHERE ID = 'changelog-4.0-common' AND AUTHOR = 'author' AND FILENAME = 'changelog-4.0'
2019-01-18 19:01:04  INFO: UPDATE traccardb.DATABASECHANGELOG SET MD5SUM = '8:9831511507d8ae1d6759c8ccf506a27a' WHERE ID = 'changelog-4.0-pg' AND AUTHOR = 'author' AND FILENAME = 'changelog-4.0'
2019-01-18 19:01:04  INFO: UPDATE traccardb.DATABASECHANGELOG SET MD5SUM = '8:ac63c4153f5b2ee5c7a07056da269571' WHERE ID = 'changelog-4.0' AND AUTHOR = 'author' AND FILENAME = 'changelog-4.0'
2019-01-18 19:01:04  INFO: UPDATE traccardb.DATABASECHANGELOG SET MD5SUM = '8:90aedfa378aa717f8d8ae541f97b87b2' WHERE ID = 'changelog-4.0-renaming' AND AUTHOR = 'author' AND FILENAME = 'changelog-4.0'
2019-01-18 19:01:04  INFO: UPDATE traccardb.DATABASECHANGELOG SET MD5SUM = '8:b148f52efe9c6a3e74a56e33e257a3e2' WHERE ID = 'changelog-4.1-mssql' AND AUTHOR = 'author' AND FILENAME = 'changelog-4.1'
2019-01-18 19:01:04  INFO: SELECT COUNT(*) FROM traccardb.DATABASECHANGELOG
2019-01-18 19:01:04  INFO: Reading from traccardb.DATABASECHANGELOG
2019-01-18 19:01:04  INFO: SELECT * FROM traccardb.DATABASECHANGELOG ORDER BY DATEEXECUTED ASC, ORDEREXECUTED ASC
2019-01-18 19:01:04  INFO: Successfully released change log lock
2019-01-18 19:01:05  INFO: Logging initialized @14494ms to org.eclipse.jetty.util.log.Slf4jLog
2019-01-18 19:01:09  INFO: Operating system name: Linux version: 4.15.0-43-generic architecture: amd64
2019-01-18 19:01:09  INFO: Java runtime name: OpenJDK 64-Bit Server VM vendor: Oracle Corporation version: 10.0.2-ojdkbuild+13
2019-01-18 19:01:09  INFO: Memory limit heap: 421mb non-heap: 0mb
2019-01-18 19:01:09  INFO: Character encoding: UTF-8 charset: UTF-8
2019-01-18 19:01:09  INFO: Version: 4.2-SNAPSHOT
2019-01-18 19:01:09  INFO: Starting server...
2019-01-18 19:01:10  INFO: jetty-9.4.12.v20180830; built: 2018-08-30T13:59:14.071Z; git: 27208684755d94a92186989f695db2d7b21ebc51; jvm 10.0.2-ojdkbuild+13
2019-01-18 19:01:11  INFO: Started o.t.w.@307cf964{/,null,AVAILABLE}
2019-01-18 19:01:11  INFO: DefaultSessionIdManager workerName=node0
2019-01-18 19:01:11  INFO: No SessionScavenger set, using defaults
2019-01-18 19:01:11  INFO: node0 Scavenging every 600000ms
2019-01-18 19:01:13  INFO: Started o.e.j.s.ServletContextHandler@4c2bea52{/,null,AVAILABLE}
2019-01-18 19:01:13  INFO: Started ServerConnector@6ae42248{HTTP/1.1,[http/1.1]}{0.0.0.0:8082}
2019-01-18 19:01:13  INFO: Started @22659ms

If one needs anymore information I will try to get it.

Adrian

Anton Tananaev5 years ago

You can ignore those warnings.

Adrian Hodgson5 years ago

Ok that is good to know, can I ask what it is causing it? It looks a bit like google prying?

I am not using google for geocoding, the default is openstreetmap, so just wondering?
I should also ask how to stop it is it install default-jre and point to that?

Adrian

Anton Tananaev5 years ago

We use Google Guice (injection library) in some places in the code. It has nothing to do with mapping.

Adrian Hodgson5 years ago

Is that a difference between the 32 bit and 64 bit installs, just wondering why I do not see the error on the 32 bit machine only on the 64.

Adrian

Anton Tananaev5 years ago

There is no 32-bit installer.

Adrian Hodgson5 years ago

On the manual install where one has to unzip the files and place them in to a directory on the computer.

Anton Tananaev5 years ago

Manual doesn't come with Java VM, which means it uses VM available on your system and it likely doesn't report those warnings. Probably because older Java versions don't report them.

Adrian Hodgson5 years ago

OK, as normal just trying to understand a bit more on the where and why things happen.

I often think I have made an error.

Thank you

Adrian

Przemyslaw3 years ago

Hello @Anton, I have also see that warning after I install mod_security, mod_evasive and mod_qos. I also see that in logs:

Feb  2 18:06:15 OpenVPN systemd[1]: traccar.service: Watchdog timeout (limit 10min)!
Feb  2 18:06:16 OpenVPN systemd[1]: traccar.service: Killing process 22735 (java) with signal SIGABRT.
Feb  2 18:06:16 OpenVPN systemd[1]: traccar.service: Main process exited, code=killed, status=6/ABRT
Feb  2 18:06:16 OpenVPN systemd[1]: traccar.service: Failed with result 'watchdog'.
Feb  2 18:06:26 OpenVPN systemd[1]: traccar.service: Service RestartSec=10s expired, scheduling restart.
Feb  2 18:06:26 OpenVPN systemd[1]: traccar.service: Scheduled restart job, restart counter is at 131.
Feb  2 18:06:26 OpenVPN systemd[1]: Stopped traccar.
Feb  2 18:06:26 OpenVPN systemd[1]: Started traccar.
Feb  2 18:06:27 OpenVPN traccar[22885]: Loading class `com.mysql.jdbc.Driver'. This is deprecated. The new driver class is `com.mysql.cj.jdbc.Driver'. The driver is automatically registered via the SPI and manual loading of the driver class is generally unnecessary.
Feb  2 18:06:37 OpenVPN traccar[22885]: WARNING: An illegal reflective access operation has occurred
Feb  2 18:06:37 OpenVPN traccar[22885]: WARNING: Illegal reflective access by com.google.inject.internal.cglib.core.$ReflectUtils$1 (file:/opt/traccar/lib/guice-4.2.3.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int,java.security.ProtectionDomain)
Feb  2 18:06:37 OpenVPN traccar[22885]: WARNING: Please consider reporting this to the maintainers of com.google.inject.internal.cglib.core.$ReflectUtils$1
Feb  2 18:06:37 OpenVPN traccar[22885]: WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
Feb  2 18:06:37 OpenVPN traccar[22885]: WARNING: All illegal access operations will be denied in a future release
Feb  2 18:26:47 OpenVPN systemd[1]: traccar.service: Service RestartSec=10s expired, scheduling restart.
Feb  2 18:26:47 OpenVPN systemd[1]: traccar.service: Scheduled restart job, restart counter is at 133.
Feb  2 18:26:47 OpenVPN systemd[1]: Stopped traccar.
Feb  2 18:26:47 OpenVPN systemd[1]: Started traccar.

[Tue Feb 02 18:53:34.186881 2021] [:error] [pid 27588:tid 140254052849408] [client 207.46.13.211:37195] [client 207.46.13.211] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "792"] [id "920350"] [msg "Host header is a numeric IP address"] [data "217.61.63.183"] [severity "WARNING"] [ver "OWASP_CRS/3.1.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "217.61.63.183"] [uri "/robots.txt"] [unique_id "YBmfrgokaFEeE44wp6fUDQAAAAo"]
[Tue Feb 02 18:53:34.580116 2021] [:error] [pid 27588:tid 140253927024384] [client 207.46.13.211:37195] [client 207.46.13.211] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "792"] [id "920350"] [msg "Host header is a numeric IP address"] [data "217.61.63.183"] [severity "WARNING"] [ver "OWASP_CRS/3.1.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "217.61.63.183"] [uri "/robots.txt"] [unique_id "YBmfrgokaFEeE44wp6fUDgAAABA"]
[Tue Feb 02 18:53:39.176552 2021] [:error] [pid 27588:tid 140253868275456] [client 13.66.139.146:65408] [client 13.66.139.146] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "792"] [id "920350"] [msg "Host header is a numeric IP address"] [data "217.61.63.183"] [severity "WARNING"] [ver "OWASP_CRS/3.1.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "217.61.63.183"] [uri "/"] [unique_id "YBmfswokaFEeE44wp6fUDwAAABc"]

Can You tell me do I have to worry?
Regards Przemek