hg: jdk/sandbox: 6913047: Long term memory leak when using PKCS11 and JCE exceeds 32 bit process address space

chris.hegarty at oracle.com chris.hegarty at oracle.com
Fri Jan 11 16:15:23 UTC 2019


Changeset: 5170dc2bcf64
Author:    mbalao
Date:      2018-11-29 13:36 -0300
URL:       http://hg.openjdk.java.net/jdk/sandbox/rev/5170dc2bcf64

6913047: Long term memory leak when using PKCS11 and JCE exceeds 32 bit process address space
Summary: Extract cryptographic keys within NSS PKCS11 software tokens for memory management purposes.
Reviewed-by: valeriep

! src/java.base/share/lib/security/default.policy
! src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11Cipher.java
! src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11DHKeyFactory.java
! src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11DSAKeyFactory.java
! src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11Digest.java
! src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11ECDHKeyAgreement.java
! src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11ECKeyFactory.java
! src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11Key.java
! src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11KeyAgreement.java
! src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11KeyStore.java
! src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11Mac.java
! src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11RSACipher.java
! src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11RSAKeyFactory.java
! src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11SecretKeyFactory.java
! src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11Signature.java
! src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11TlsKeyMaterialGenerator.java
! src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11TlsMasterSecretGenerator.java
! src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11TlsPrfGenerator.java
! src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/wrapper/PKCS11.java
! src/jdk.crypto.cryptoki/share/native/libj2pkcs11/p11_keymgmt.c
! src/jdk.crypto.cryptoki/share/native/libj2pkcs11/pkcs11t.h
! src/jdk.crypto.cryptoki/share/native/libj2pkcs11/pkcs11wrapper.h



More information about the jdk-sandbox-changes mailing list