Native zlib libraries

[Alan Bateman]

On 19/07/2012 14:20, Andrew Hughes wrote:
> :
>
> Hmmm... this is interesting as we've been shipping OpenJDK with system zlib the whole time.
>
> Are some of the issues resolved in newer versions?  My system copy is 1.2.7.
>
> Not only is it generally against GNU/Linux distribution policy to bundle libraries without good reason, but it also means
> we then have to rebuild OpenJDK for any security issues in those dependencies.
>
I think using the system zlib (or libz as it seems to shipped as on 
Solaris and MacOSX) would have been okay with jdk6, it's just that the 
zip64 support in jdk7 changed total_in/out to "long long".

The copy that we have in the jdk repository at this time is 1.2.5. I'm 
not aware of any updates that avoid this patch but I think the right 
thing is to change the java.util.zip code so that it works with an 
unmodified zlib. I think Sherman has ideas on this, just hasn't got to 
it yet. If you have cycles to look at it that would be great (and I 
understand that distributions would frown on attempts to bundle a 
private copy with OpenJDK).

-Alan.