Request for approval for CR 7049079 - NTSYSTEM CLASS IS LEAKING 3 WINDOWS TOKENS

Seán Coffey sean.coffey at oracle.com
Mon Sep 5 03:43:20 PDT 2011


This is a forward port of a fix already in jdk5 & jdk6.

NTSystem() obtains a native Token instance for each constructor call.
This is unnecessary and Token instances should only be requested when
called for, i.e. at getImpersonationToken() time.

No auto testcase but fix has been verified though use of the MS handle
tool and a simple java testcase.

Jdk 8 code review thread : 
http://mail.openjdk.java.net/pipermail/security-dev/2011-September/003736.html

Fix has just gone into jdk8 also and changeset will be identical to that :
http://hg.openjdk.java.net/jdk8/tl-gate/jdk/rev/946e3b786d2d

regards,
Sean.







More information about the jdk7u-dev mailing list