- core-libs-dev - openjdk.org

Withdrawn: 8362268: NPE thrown from SASL GSSAPI impl when TLS is used with QOP auth-int against Active Directory
by duke 03 Mar '26

03 Mar '26

On Wed, 30 Jul 2025 20:20:33 GMT, Weibing Xiao <wxiao(a)openjdk.org> wrote: > [webrev.zip](https://github.com/user-attachments/files/22605072/webrev.zip) > NPE thrown from SASL GSSAPI impl when TLS is used with QOP auth-int against Active Directory. > > When the exception is triggered, LDAP Connection will do "clean-up" operation and output stream get flushed and closed the context while GssKrb5Client is still wrapping the message, and tried to send the abandoned info to the client at line https://github.com/openjdk/jdk/blob/master/src/jdk.security.jgss/share/clas…. That's the reason to throw NPE. > > The change is going to close socket and output stream in LdapClient.java. It would allow SASL client code to send the abandoned request to client; then dispose GSS context. This will avoid NPE to thrown at line 140 of GssKrb5Base.java. > > No test file is attached for this MR since it needs Sasl LDAP server with security setup. Attached the updated webrev for the reference. This pull request has been closed without being integrated. ------------- PR: https://git.openjdk.org/jdk/pull/26566

1 0

RFR: 8378877: jpackage: improve rebranding of exe files on Windows
by Alexey Semenyuk 03 Mar '26

03 Mar '26

Change how jpackage embeds icons, version and other properties in .exe files. Don't print Warning: Windows Defender may prevent jpackage from functioning. If there is an issue, it can be addressed by either disabling realtime monitoring, or adding an exclusion for the directory <TMPDIR>. warning. Instead, run the operation with retries. Additionally, throw JPackageException instead of RuntimeException to report errors; fail if invalid data is passed in the ctor instead of logging and ignoring it. ------------- Commit messages: - ExecutableRebrander: replace the warning about Windows defender with running the rebrander with retries - ExecutableRebrander: throw JPackageException instead of RuntimeException to report errors; fail if invalid data is passed in ctor instead of logging and ignoring it Changes: https://git.openjdk.org/jdk/pull/29906/files Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=29906&range=00 Issue: https://bugs.openjdk.org/browse/JDK-8378877 Stats: 293 lines in 4 files changed: 37 ins; 208 del; 48 mod Patch: https://git.openjdk.org/jdk/pull/29906.diff Fetch: git fetch https://git.openjdk.org/jdk.git pull/29906/head:pull/29906 PR: https://git.openjdk.org/jdk/pull/29906

2 5

RFR: 8378873: jpackage: remove macOS-specific code from jdk.jpackage.internal.ModuleInfo
by Alexey Semenyuk 03 Mar '26

03 Mar '26

$subj. Move macOS-specific logic to MacFromOptions class. ------------- Commit messages: - Pass the path to the directory with the standard Java runtime structure into LauncherStartupInfoBuilder#predefinedRuntimeImage() Changes: https://git.openjdk.org/jdk/pull/29963/files Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=29963&range=00 Issue: https://bugs.openjdk.org/browse/JDK-8378873 Stats: 30 lines in 2 files changed: 16 ins; 11 del; 3 mod Patch: https://git.openjdk.org/jdk/pull/29963.diff Fetch: git fetch https://git.openjdk.org/jdk.git pull/29963/head:pull/29963 PR: https://git.openjdk.org/jdk/pull/29963

2 3

RFR: 8378723: Locale variant delimiter is unclear
by Justin Lu 03 Mar '26

03 Mar '26

Locale APIs which accept BCP 47 tags use hyphen for multiple variant subtags. Locale APIs that accept multiple (non BCP 47 subtag) variants use underscores. For example, `Locale.of` supports multiple variants separated by underscore. `Locale.forLanguageTag` supports multiple variants separated by hyphen. `Locale.Builder.setLanguageTag` supports multiple variants separated by hyphen. `Locale.Builder.setVariant` supports multiple variants separated by either underscore or hyphen. The current wording is not detailed enough and implies both formats are interchangeable within `Locale`. This PR updates the wording to make this more apparent. Note that I left the constructor behavior out in the new wording as to not call attention to it. ------------- Commit messages: - init Changes: https://git.openjdk.org/jdk/pull/29970/files Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=29970&range=00 Issue: https://bugs.openjdk.org/browse/JDK-8378723 Stats: 5 lines in 1 file changed: 3 ins; 0 del; 2 mod Patch: https://git.openjdk.org/jdk/pull/29970.diff Fetch: git fetch https://git.openjdk.org/jdk.git pull/29970/head:pull/29970 PR: https://git.openjdk.org/jdk/pull/29970

2 4

RFR: 8369181: InflaterOutputStream: writing after finish() results in IllegalStateException instead of an IOException
by Jaikiran Pai 03 Mar '26

03 Mar '26

Can I please get a review of this change which addresses the issue noted in https://bugs.openjdk.org/browse/JDK-8369181? As noted in that issue, if `finish()` is called on a `InflaterOutputStream` that was constructed without passing a `Inflater`, then any subsequent `write()`s on that `InflaterOutputStream` result in an `IllegalStateException`, because we close the `Inflater` in `finish()`. The commit in this PR, fixes the issue by throwing the specified `IOException` in place of the `IllegalStateException`. At the same time, the documentation of `finish()` has been enhanced to clarify the current behaviour, through a `@implSpec`. Alternative approaches of deprecating finish() and/or not closing the default Inflater were considered, but given the current long standing implementation of finish(), it was decided to merely specify the current behaviour of closing the default Inflater in finish(). A new jtreg test has been added to reproduce the issue and verify the fix. tier1, tier2, tier3 testing of this change completed without any related issues. I'll file a CSR shortly for this change. ------------- Commit messages: - 8369181 (v1): InflaterOutputStream: writing after finish() results in a NullPointerException (NPE) instead of an IOException Changes: https://git.openjdk.org/jdk/pull/29935/files Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=29935&range=00 Issue: https://bugs.openjdk.org/browse/JDK-8369181 Stats: 220 lines in 2 files changed: 196 ins; 4 del; 20 mod Patch: https://git.openjdk.org/jdk/pull/29935.diff Fetch: git fetch https://git.openjdk.org/jdk.git pull/29935/head:pull/29935 PR: https://git.openjdk.org/jdk/pull/29935

6 17

RFR: 8377903: ArraysSupport::mismatch should document that they return the smallest index
by Raffaello Giulietti 03 Mar '26

03 Mar '26

A doc only change to clarify that the _smallest_ of many possible mismatch indices is returned. ------------- Commit messages: - 8377903: ArraysSupport::mismatch should document that they return the smallest index. Changes: https://git.openjdk.org/jdk/pull/29997/files Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=29997&range=00 Issue: https://bugs.openjdk.org/browse/JDK-8377903 Stats: 7 lines in 1 file changed: 0 ins; 0 del; 7 mod Patch: https://git.openjdk.org/jdk/pull/29997.diff Fetch: git fetch https://git.openjdk.org/jdk.git pull/29997/head:pull/29997 PR: https://git.openjdk.org/jdk/pull/29997

3 7

RFR: 8377102: cacerts jlink plugin
by Sean Mullan 03 Mar '26

03 Mar '26

This is a new `jlink` plugin which allows the user to specify the CA certificates it wants to include in the `cacerts` keystore in a custom runtime image. This can be very useful for creating runtimes that only contain the CA certificates that are necessary. The command-line syntax takes one or more `cacert` keystore aliases as an option, separated by a comma. For example: `jlink --cacerts "letsencryptisrgx1 [jdk]"` or `jlink --cacerts "letsencryptisrgx1 [jdk],digicertglobalrootca [jdk]"` ------------- Commit messages: - Initial revision. Changes: https://git.openjdk.org/jdk/pull/29700/files Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=29700&range=00 Issue: https://bugs.openjdk.org/browse/JDK-8377102 Stats: 250 lines in 4 files changed: 247 ins; 0 del; 3 mod Patch: https://git.openjdk.org/jdk/pull/29700.diff Fetch: git fetch https://git.openjdk.org/jdk.git pull/29700/head:pull/29700 PR: https://git.openjdk.org/jdk/pull/29700

3 6

RFR: 8367761: [VectorAPI] AssertionError with several vector API mathlib tests with MaxVectorSize=32
by Jatin Bhateja 03 Mar '26

03 Mar '26

Strict assertion added to jdk.incubator.vector.CPUFeatures does not take into account MaxVectorSize settings. As a result we observer serval VectorAPI VectorMathLibrary test failures when MaxVectorSize is smaller than vector size supported by target. Patch removes these assertions, all vector API tests are passing with smaller MaxVectorSize with assertions enabled (-ea -es). Kindly review and share your feedback. Best Regards, Jatin ------------- Commit messages: - 8367761: [VectorAPI] AssertionError with several vector API mathlib tests with MaxVectorSize=32 Changes: https://git.openjdk.org/jdk/pull/30015/files Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=30015&range=00 Issue: https://bugs.openjdk.org/browse/JDK-8367761 Stats: 3 lines in 1 file changed: 0 ins; 3 del; 0 mod Patch: https://git.openjdk.org/jdk/pull/30015.diff Fetch: git fetch https://git.openjdk.org/jdk.git pull/30015/head:pull/30015 PR: https://git.openjdk.org/jdk/pull/30015

1 0

RFR: 8378867: jpackage references non-existing "message.app-image-requires-identifier" l10n key
by Alexey Semenyuk 03 Mar '26

03 Mar '26

Fix missing l10n key. Add a test to cover the fix. ------------- Commit messages: - MacApplicationBuilder: fix missing "message.app-image-requires-identifier" key Changes: https://git.openjdk.org/jdk/pull/29905/files Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=29905&range=00 Issue: https://bugs.openjdk.org/browse/JDK-8378867 Stats: 40 lines in 4 files changed: 34 ins; 3 del; 3 mod Patch: https://git.openjdk.org/jdk/pull/29905.diff Fetch: git fetch https://git.openjdk.org/jdk.git pull/29905/head:pull/29905 PR: https://git.openjdk.org/jdk/pull/29905

2 4

RFR: 8373243 : EnumSet.spliterator() should specify and document its characteristics
by Viktor Klang 02 Mar '26

02 Mar '26

Addresses https://bugs.openjdk.org/browse/JDK-8373243 by copying and adapting the specification from https://github.com/openjdk/jdk/blob/master/src/java.base/share/classes/java… Since EnumSet is sealed and only permits two final classes, the verbiage around "Implementations should document the reporting of additional characteristic values." may be considered to get removed from this PR. Kept, for now, for symmetry reasons. ------------- Commit messages: - Adding Javadoc and specification for EnumSet::spliterator() Changes: https://git.openjdk.org/jdk/pull/28696/files Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=28696&range=00 Issue: https://bugs.openjdk.org/browse/JDK-8373243 Stats: 19 lines in 1 file changed: 19 ins; 0 del; 0 mod Patch: https://git.openjdk.org/jdk/pull/28696.diff Fetch: git fetch https://git.openjdk.org/jdk.git pull/28696/head:pull/28696 PR: https://git.openjdk.org/jdk/pull/28696

6 19