OpenJDK 6 build 11 source posted

[Joseph D. Darcy]

Somewhat later than planned, the OpenJDK 6 b11 source is now available at

http://download.java.net/openjdk/jdk6/

This source bundle includes all the relevant JDK security fixes that 
recently went out:

6542088 JAX-WS server allows XXE attacks
6607339 IncrementalSAXSource_Filter still allows reading of local files
6661918 Array reference changes behavior when compiled
6332953 JMX agent should bind to loopback address when starting the 
local connector server

More information about these changes is available from the Sun Alerts 
linked to from
http://sunsolve.sun.com/show.do?target=security/sec

(Some of the security fixes only affect closed code or areas otherwise 
not open sourced as part of OpenJDK 6 so not all the security fixes are 
reflected in the source bundle.)

This build also includes ports of existing fixes in various areas.  For 
HotSpot, fixes in previous 6 update releases are included:

6497639 Profiling Swing application caused JVM crash
6623167 C2 crashed in StoreCMNode::Value
6659207 access violation in CompilerThread0
6497639 Profiling Swing application caused JVM crash
6599425 OopMapCache::lookup() can cause later crash or assert() failure

as well as a build issue:

6681796 hotspot build failure on gcc 4.2.x (ubuntu 8.04) w/ openjdk6

and a fix for an Eclipse crash:

6614100 EXCEPTION_ACCESS_VIOLATION while running Eclipse with 1.6.0_05-ea

Library fixes:

6691328 DragSourceContext returns unexpected cursor
6608764 test/closed/java/awt/Focus/TemporaryLostComponentDeadlock fails
6624717 Corrupted combo box, GTK L&F, Ubuntu 7.10
6685178 REGRESSION: NPE in ConnectorBootstrap when 
Agent.getManagementProperties() returns null.

I'm in the process of updating the Gervill sound engine included in 
OpenJDK 6 to the current version; that work will be complete by build 
12.  In the meantime, as an initial step the spacing of the source code 
has been normalized.

6717694 Normalize src/share/classes/com/sun/media/sound

Various of the previously raised licensing/copyright and binary artifact 
concerns have been addressed.  First, I applied Andrew John Hughes's fix 
to remove jscheme.jar:

6695776 corba jscheme jar files in repository could be built from source

Kelly and Iris have fixed other licensing and binary artifact issues:

6565364 update legal notices in corba
6695765 Remove winver.exe completely from jdk sources
6705945 com.sun.tools.javac.zip files do not have valid copyright
6601384 hotspot/src/share/vm/adlc/archDesc.cpp generates files with 
incorrect legal notices
6601377 hotspot/src/share/vm/prims/jvmtiLib.xsl generates files with 
incorrect legal notices
6713083 hotspot copy.cpp and vmStructs_parNew.hpp source files contains 
proprietary sun notice
6695777 Queens.class should be built from source, not put in source repo
6710791 Remove files or build them from source: maf-1_0.jar, jlfgr-1_0.jar

There were miscellaneous other fixes, including some cleanup of the 
regression tests:

6717575 Make sanity prints duplicated BUILD_JDK messages
6665028 native code of method j*.text.Bidi.nativeBidiChars is using the 
contents of a primitive array direct
6589868 transition to Mercurial: need to eliminate dependencies on SCCS 
keywords

6621691 (dc) test/java/nio/channels/DatagramChannel/NotBound.java 
missing public modifier
6596323 (fc) ClosedByInterruptException not thrown by the interrupt 
method (lnx)
6710579 (ch) test/java/nio/channels/AsyncCloseAndInterrupt fails (lnx)

I'd expect b12 to be available within two weeks and to include the 
Gervill update and probably a few more licensing/artifact fixes.

Going forward, I plan to get the OpenJDK 6 sources into a public 
Mercurial repository by the end of the summer; that will allow fixes put 
there to be shared more quickly and should also allow more work to go on 
directly in the upstream code base.

-Joe