RuntimePermission issue - ("java.lang.RuntimePermission" "accessDeclaredMembers")

[GregoryIvo]

Hi AWS Team,

I am trying to leverage your plugin, and I seem to be running into a very strange Runtime Permission issue at the line linked below.

aws-iot-device-sdk-java-v2/sdk/src/main/java/software/amazon/awssdk/iot/discovery/DiscoveryClient.java

Line 97 in 472d0ec

return GSON.fromJson(new StringReader(responseString), DiscoverResponse.class);

The Issue

"java.util.concurrent.ExecutionException: java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "accessDeclaredMembers")"

We suspect it has something to do with the new StringReader created and passed to the GSON in the line. Wondering if this is an issue anyone on your team has experienced? Wondering if this StringReader is even necessary here?

We are using openJDK 8.

Thank you 😃,
Greg

[jmklix]

Are you just running the BasicDiscovery greengrass sample when you run into this error? also what OS are you running this on?

[GregoryIvo]

no. But the script is very similar to the sample (I know that's probably not very helpful). Running RaspberryPi os 32bit.

[jmklix]

Can you include more info from the logs? and a minimal code sample that reproduces this error?

If you haven't already look at this issue where adding one line seems to fix their problem.

[nicolatimeus]

Hi,

The issue is likely caused by the fact that

aws-iot-device-sdk-java-v2/sdk/src/main/java/software/amazon/awssdk/iot/discovery/DiscoveryClient.java

Line 97 in 472d0ec

return GSON.fromJson(new StringReader(responseString), DiscoverResponse.class);

is executed through CompletableFuture.supplyAsync() using the Fork Join Pool common pool.

Quoting from ForkJoinPool Javadoc, If a SecurityManager is present and no factory is specified, then the default pool uses a factory supplying threads that have no Permissions enabled..

The DiscoveryClient should be probably modified to allow customizing the execution facility.

[nicolatimeus]

I've created issue #320 to track this

[GregoryIvo]

can confirm, this helped solve my issue. Thank you.

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.