Fix for PR381 Stackoverflow error with SecurityManager, signed jar and debug

[Mark Wielaard]

Hi,

The following fixes PR381 Stackoverflow error with SecurityManager,
signed jar and debug. Thanks to Martin and Anil for walking me through
an instance of this issue with JBoss. That made it easy to create a
testcase (also included in the overlays). The fix is in two parts. The
first is and extension of Keith's work to get at the system installed
tzdata. Now doing everything inside an AccessController.doPrivileged
block. The second is a fix for a similar issue in Timezone when
setDefaultZone() is called, which as the testcase shows happens for any
Date.toString() call. A similar fix was also in openjdk7 b22, but
apparently lost since b22 was from "before hg", I took the jdk7 version.
I'll add it to the wiki.

2009-08-31  Mark Wielaard  <mjw at redhat.com>
            Keith Seitz  <keiths at redhat.com>

    PR381 Stackoverflow error with SecurityManager, signed jar and debug
    * patches/icedtea-use-system-tzdata.patch: Updated to initialize
    JAVAZI_DIR once and inside a AccessController.doPrivileged() block.
    * patches/icedtea-timezone-default-permission.patch: New patch.
    * overlays/openjdk/jdk/test/java/util/TimeZone/
    (TimeZoneDatePermissionCheck.java, TimeZoneDatePermissionCheck.sh):
    New test.
    * Makefile.am: Add new patch.
    * HACKING: Describe new patch.

See also the discussions in the bug report and on security-dev.

Cheers,

Mark
-------------- next part --------------
A non-text attachment was scrubbed...
Name: datetimezonepermission.patch
Type: text/x-patch
Size: 10435 bytes
Desc: not available
Url : http://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20090831/8398a1d8/datetimezonepermission.patch