[Bug 381] Stackoverflow error with security manager, signed jars and -Djava.security.debug set

[bugzilla-daemon at icedtea.classpath.org]

http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=381





------- Comment #16 from mark at klomp.org  2009-08-27 09:53 -------
(In reply to comment #15)
> I've posted a revised version to the i18n lists:
> 
> http://mail.openjdk.java.net/pipermail/i18n-dev/2009-August/000136.html
> 
> which does the same, but looks in tz.properties for the fix, rather than using
> a value hardcoded into either the HotSpot (mjw's fix) or JDK (keith's fix)
> sources.  This has the advantage that the value is easier to change and
> standard OpenJDK builds won't start trying to use whatever is in
> /usr/share/javazi.  As that's the version being reviewed, I'd suggest we
> replace the one in IcedTea with this.

Yes, that is nicer. But lets take it one step at a time. Lets first make sure
the current bug is fixed without needing any packaging changes. I agree it
would be nice to have a better integrated fix. But imho that shouldn't make it
necessary for a distro to replicate the whole zoneinfo as is done currently.
Please open a new bug for this.

> I haven't been able to replicate the bug though (at least as given).  I ran the
> testcase from http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=377 with
> -Djava.security.manager -Djava.security.debug=access,failure,debug and got an
> exception being thrown, but no recursion.

Yeah, that is a way to trigger readZoneInfoFile() and show at least a direct
call is sane now even with a security manager in place. The bug is specifically
that there is recursion over the x509 certificate validity date being printed
as trigger for the zoneinfo access in the AccessController. It would be good to
actually have a way to replicate that issue.


-- 
Configure bugmail: http://icedtea.classpath.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.