[Bug 1676] New: enhance the list of secure jnlp properties to support useLegacyMergeSort

[bugzilla-daemon at icedtea.classpath.org]

http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=1676

            Bug ID: 1676
           Summary: enhance the list of secure jnlp properties to support
                    useLegacyMergeSort
           Product: IcedTea-Web
           Version: 1.4
          Hardware: x86_64
                OS: Linux
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: NetX (javaws)
          Assignee: omajid at redhat.com
          Reporter: vincent.privat at gmail.com
                CC: unassigned at icedtea.classpath.org

This is an RFE to add the property java.util.Arrays.useLegacyMergeSort to the
list of secure properties.

This has been done in Oracle's WebStart implementation through
https://bugs.openjdk.java.net/browse/JDK-7160619 and
https://bugs.openjdk.java.net/browse/JDK-2226471

We use this property as a workaround to problems caused by the new JDK7 sorting
algorithm, but it seems to work only with Oracle's VM, not IcedTea.

Here is the software version that obviously does not allow to set this
property:

Identification: Linux Debian GNU/Linux 7.4 (wheezy)
Java version: 1.7.0_25, Oracle Corporation, OpenJDK Server VM
Java package: openjdk-7-jre:i386-7u25-2.3.10-1~deb7u1
WebStart package: icedtea-netx:i386-1.4-3~deb7u2
VM arguments: [-Xbootclasspath/a:/usr/share/icedtea-web/netx.jar, -Xms8m,
-Dicedtea-web.bin.name=javaws, -Dicedtea-web.bin.location=/usr/bin/javaws,
-Djava.security.manager, -Djava.security.policy=/etc/icedtea-web/javaws.policy]

See https://josm.openstreetmap.de/ticket/8888#comment:5 and next comments for
additional info.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20140218/34911e85/attachment.html