[jdk17u-dev] Requesting backport of JDK-8308144 Uncontrolled memory consumption in SSLFlowDelegate.Reader

Tue May 14 12:59:23 UTC 2024

Hello,

we have been affected by the JDK bug "Uncontrolled memory consumption in SSLFlowDelegate.Reader" that was reported and fixed here:
https://bugs.openjdk.org/browse/JDK-8308144

This resulted in an OOM Exception and program crash for us when downloading a large file (~2Gb) running in an environment with limited heap memory (~500Mb).

Aside from documentation and tests, the patch committed last November to correct the issue was one line long.
However, the fix was only made to JDK 22 and 23:
https://github.com/openjdk/jdk/pull/16704

We did not understand the low priority of the issue (P4) as we see no way around the problem and we would have to wait until 2025 for the next LTS release with this fix.
We would greatly appreciate it if this fix could instead be backported to earlier LTS JDKs, ideally including JDK 17.

Would someone be able to do this for us? We would be uncomfortable attempting to merge this ourselves.
If so, would it plausibly make the July release?

(Sorry for the repost, the tag was missing in the thread name)

Many thanks.

MAN Energy Solutions SE
Vorsitzender des Aufsichtsrates: Gunnar Kilian
Vorstand: Dr. Uwe Lauber (Vorsitzender), J?rgen Kl?pffer, Martin Oetjen, Ingrid Rieken, Dr. Gunnar Stiesch
Sitz der Gesellschaft: Augsburg
Registergericht: Amtsgericht Augsburg, HRB 22056

This e-mail (including any attachments) is confidential and may be privileged. If you have received it by mistake, please notify the sender by e-mail and delete it from your system.
Any unauthorized use or dissemination of this e-mail or its contents in whole or in part is strictly prohibited. Please note that e-mails are susceptible to change.
MAN Energy Solutions SE (including its group companies) shall not be liable for the improper or incomplete transmission of the information contained in this communication nor for any delay in its receipt.
MAN Energy Solutions SE (or its group companies) does not guarantee that the integrity of this communication has been maintained nor that this communication is free of viruses, interceptions or interference.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/jdk-updates-dev/attachments/20240514/7c368196/attachment.htm>