Upgrade to CGLIB 3.2.2 [SPR-13934]

[spring-projects-issues]

Rodrigo Ezequiel Merino opened SPR-13934 and commented

The next patch version of cglib has been requested (cglib/cglib#61) which provides a fix (cglib/cglib#50) for a permgen memory leak.

It would be great if this upgrade can also be done in the 4.1.x line.

Ref:

• CGLIB PermGen memory leaks under Karaf [SPR-10573] #15202
• http://forum.spring.io/forum/spring-projects/container/12267-java-lang-outofmemoryerror-permgen-space

---

Affects: 4.2.4

Reference URL: #15202

Issue Links:

• CGLIB PermGen memory leaks under Karaf [SPR-10573] #15202 CGLIB PermGen memory leaks under Karaf
• Upgrade to CGLIB 3.2 [SPR-13353] #17937 Upgrade to CGLIB 3.2
• Upgrade to ASM 5.1 [SPR-14037] #18609 Upgrade to ASM 5.1
• Upgrade to CGLIB 3.2.4 [SPR-14385] #18958 Upgrade to CGLIB 3.2.4
• Upgrade to CGLIB 3.2.5 [SPR-15147] #19713 Upgrade to CGLIB 3.2.5

Referenced from: commits dc7ec44, 2b6ec6a

[spring-projects-issues]

Juergen Hoeller commented

Our CGLIB 3.2 upgrade only happened in 4.2.3, so I'm afraid that any further upgrades are bound to 4.2.x and higher. 4.2.5 is scheduled for Feb 18 which is a bit tight; if CGLIB 3.2.1 won't be released in time for that, the next opportunity will be 4.2.6 in early May.

Please note that there won't be any further 4.1.x releases in any case; 4.1.9 in December was the last one in that branch. We expect everybody to upgrade to 4.2.5+ from there. Likewise, 4.2.9 will be released in late 2016, with us expecting everybody to upgrade to 4.3.x from there.

Juergen

[spring-projects-issues]

Juergen Hoeller commented

Stéphane Nicoll, according to the release request on GitHub, the CGLIB 3.2.1 release is imminent, so let's aim for getting it repackaged into 4.2.5... even if it means delaying our release for a few days. Aiming for Feb 22 at the moment, just in time for Boot 1.3.3 / 1.4.0 M1.

[spring-projects-issues]

Juergen Hoeller commented

It looks like the CGLIB won't be happening in time, due to API compatibility concerns (cglib/cglib#61 (comment)), and we're not going to delay beyond Feb 22 on our end. Scheduling for 4.3 instead; it remains to be seen whether we can backport this to a later 4.2.x release but it can certainly make 4.3 at least.

[spring-projects-issues]

Juergen Hoeller commented

And one more update: As posted on the CGLIB ticket last night, CGLIB 3.2.1 is likely to be released today, so we're waiting until tomorrow (Feb 23) now.

[spring-projects-issues]

Juergen Hoeller commented

Unfortunately, CGLIB 3.2.1 is not a seamless upgrade: Our tests for the reuse of generated proxy classes break now. I'll see what I can find out tomorrow morning.

[spring-projects-issues]

Juergen Hoeller commented

Moving this one back to 4.3, as per the discussion on cglib/cglib#61, waiting for CGLIB 3.2.2 to fix the CallbackFilter equality regression.