Request for phase 2 approval for CR 7099399 - cannot deal with CRL file larger than 16MB

[Weijun Wang]

Hi All

This is a request to backport a jdk8 fix into jdk7u2 phase 2.

7099399: cannot deal with CRL file larger than 16MB
http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=7099399

Description:

This is a regression in JDK 7. When a CRL is bigger than 16M (2^24), the 
X.509 CertificateFactory cannot load it. For example, DoD has a CRL of 33MB.

The fix is already included in jdk8 as:

    http://hg.openjdk.java.net/jdk8/tl/jdk/rev/6cb07b35acf5

reviewed by Sean Mullan (the component lead) and Xuelei Fan at

 
http://mail.openjdk.java.net/pipermail/security-dev/2011-October/thread.html#3888

The fix is trivial and adds a new block to parse a CRL up to the size of 
2^31 (2GB) bytes. A new regression test is added. I've also used JPRT to 
run other jdk regression tests on all supported platforms.

Change for jdk7u is identical to that of jdk8.

I intend to push it to

    ssh://hg.openjdk.java.net/jdk7u/jdk7u2-dev-gate/jdk

Thanks
Weijun