[Bug] The 14837 bug has not been fixed

[mcck]

Pre-check

• I am sure that all the content I provide is in English.

Search before asking

• I had searched in the issues and found no similar issues.

Apache Dubbo Component

Java SDK (apache/dubbo)

Dubbo Version

Dubbo Java 3.3.3
dubbo-spring-boot-starter 3.3.3
jdk21

Steps to reproduce this issue

I saw in the releases that dubbo-3.3.2 resolved #14837 , but I did not see the modified code in the application.

What you expected to happen

In pom.xml, we see org.apache.dubbo:dubbo:3.3.3 used org. Apache. Dubbo: Hessian lite: 4.0.3, Hesian lite has not been updated.

Anything else

Need to update Hessian lite version

Are you willing to submit a pull request to fix on your own?

• Yes I am willing to submit a pull request on my own!

Code of Conduct

• I agree to follow this project's Code of Conduct

[AlbumenJ]

Fix in dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/Hessian2SerializerFactory.java

[mcck]

Fix in dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/Hessian2SerializerFactory.java

Need to merge dubbo-hessian-lite #76 and release dubbo-hessian-lite version

[AlbumenJ]

I still remember I have tested on #14837 and it worked

[mcck]

In Dubbo, the dubbo-hessian-lite tool is used for serialization. In the file dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/Hessian2SerializerFactory.java, only this line of code was added:

if (InputStream.class.equals(cl)) {
    return InputStreamDeserializer.DESER;
}

However, the InputStreamDeserializer class is in the dubbo-hessian-lite module, and it has not been updated yet because the commits have not been merged: commits

[zrlw]

you'd better migrate to fastjson2 since it is not recommended to continue using hessian-lite, hessina-lite might not be maintained anymore.