From gnu.andrew at redhat.com Tue Nov 3 14:47:52 2015 From: gnu.andrew at redhat.com (gnu.andrew at redhat.com) Date: Tue, 03 Nov 2015 14:47:52 +0000 Subject: hg: jdk7u/jdk7u: 2 new changesets Message-ID: <201511031447.tA3ElqAR020618@aojmv0008.oracle.com> Changeset: 03b03194afbe Author: andrew Date: 2015-10-19 09:41 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/rev/03b03194afbe Added tag jdk7u91-b00 for changeset 63d687368ce5 ! .hgtags Changeset: 2be0ab1a24b2 Author: andrew Date: 2015-10-20 23:03 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/rev/2be0ab1a24b2 Added tag jdk7u91-b01 for changeset 03b03194afbe ! .hgtags From gnu.andrew at redhat.com Tue Nov 3 14:47:58 2015 From: gnu.andrew at redhat.com (gnu.andrew at redhat.com) Date: Tue, 03 Nov 2015 14:47:58 +0000 Subject: hg: jdk7u/jdk7u/corba: 5 new changesets Message-ID: <201511031447.tA3ElwER020711@aojmv0008.oracle.com> Changeset: e334f8704edd Author: msheppar Date: 2015-06-25 13:56 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/e334f8704edd 8076383: Better CORBA exception handling Reviewed-by: rriggs, coffeys, skoivu, ahgross ! src/share/classes/sun/rmi/rmic/iiop/StubGenerator.java Changeset: 6518e1969ae1 Author: msheppar Date: 2015-07-14 18:03 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/6518e1969ae1 8076387: Better CORBA value handling Reviewed-by: rriggs, coffeys, skoivu, ahgross ! src/share/classes/com/sun/corba/se/impl/io/IIOPInputStream.java ! src/share/classes/com/sun/corba/se/impl/io/IIOPOutputStream.java Changeset: f9630ed441a0 Author: msheppar Date: 2015-07-14 16:49 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/f9630ed441a0 8076392: Improve IIOPInputStream consistency Reviewed-by: rriggs, coffeys, skoivu, ahgross ! src/share/classes/com/sun/corba/se/impl/io/IIOPInputStream.java Changeset: 34be12b4b6ea Author: andrew Date: 2015-10-19 09:41 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/34be12b4b6ea Added tag jdk7u91-b00 for changeset f9630ed441a0 ! .hgtags Changeset: e3a6331d136e Author: andrew Date: 2015-10-20 23:03 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/e3a6331d136e Added tag jdk7u91-b01 for changeset 34be12b4b6ea ! .hgtags From gnu.andrew at redhat.com Tue Nov 3 14:48:06 2015 From: gnu.andrew at redhat.com (gnu.andrew at redhat.com) Date: Tue, 03 Nov 2015 14:48:06 +0000 Subject: hg: jdk7u/jdk7u/jaxp: 8 new changesets Message-ID: <201511031448.tA3Em6Th020868@aojmv0008.oracle.com> Changeset: 35dc0af3c933 Author: aefimov Date: 2015-04-28 15:04 +0300 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jaxp/rev/35dc0af3c933 8068842: Better JAXP data handling Reviewed-by: joehw, dfuchs, lancea ! src/com/sun/org/apache/xalan/internal/lib/ExsltSets.java ! src/com/sun/org/apache/xalan/internal/lib/Extensions.java ! src/com/sun/org/apache/xalan/internal/xslt/EnvironmentCheck.java ! src/com/sun/org/apache/xalan/internal/xsltc/DOM.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/ApplyTemplates.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/AttributeSet.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/AttributeValueTemplate.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/CastExpr.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/Choose.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/ForEach.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/FunctionCall.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/Import.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/Include.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/Key.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/LiteralElement.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/Mode.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/Parser.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/Stylesheet.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/SymbolTable.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/SyntaxTreeNode.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/Template.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/TestSeq.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/UnsupportedElement.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/XSLTC.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/XslAttribute.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/XslElement.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/util/MethodGenerator.java ! src/com/sun/org/apache/xalan/internal/xsltc/compiler/util/MultiHashtable.java ! src/com/sun/org/apache/xalan/internal/xsltc/dom/AdaptiveResultTreeImpl.java ! src/com/sun/org/apache/xalan/internal/xsltc/dom/DOMAdapter.java ! src/com/sun/org/apache/xalan/internal/xsltc/dom/DOMWSFilter.java ! src/com/sun/org/apache/xalan/internal/xsltc/dom/DocumentCache.java ! src/com/sun/org/apache/xalan/internal/xsltc/dom/KeyIndex.java ! src/com/sun/org/apache/xalan/internal/xsltc/dom/MultiDOM.java ! src/com/sun/org/apache/xalan/internal/xsltc/dom/SAXImpl.java ! src/com/sun/org/apache/xalan/internal/xsltc/dom/SimpleResultTreeImpl.java ! src/com/sun/org/apache/xalan/internal/xsltc/runtime/AbstractTranslet.java ! src/com/sun/org/apache/xalan/internal/xsltc/runtime/BasisLibrary.java ! src/com/sun/org/apache/xalan/internal/xsltc/trax/DOM2SAX.java ! src/com/sun/org/apache/xalan/internal/xsltc/trax/StAXEvent2SAX.java ! src/com/sun/org/apache/xalan/internal/xsltc/trax/StAXStream2SAX.java ! src/com/sun/org/apache/xalan/internal/xsltc/trax/TemplatesImpl.java ! src/com/sun/org/apache/xalan/internal/xsltc/trax/TransformerFactoryImpl.java ! src/com/sun/org/apache/xalan/internal/xsltc/trax/TransformerImpl.java ! src/com/sun/org/apache/xerces/internal/dom/CoreDocumentImpl.java ! src/com/sun/org/apache/xerces/internal/dom/DeferredDocumentImpl.java ! src/com/sun/org/apache/xerces/internal/dom/DocumentImpl.java ! src/com/sun/org/apache/xerces/internal/dom/DocumentTypeImpl.java ! src/com/sun/org/apache/xerces/internal/dom/LCount.java ! src/com/sun/org/apache/xerces/internal/dom/NodeImpl.java ! src/com/sun/org/apache/xerces/internal/dom/ParentNode.java ! src/com/sun/org/apache/xerces/internal/impl/XMLEntityManager.java ! src/com/sun/org/apache/xerces/internal/impl/XMLErrorReporter.java ! src/com/sun/org/apache/xerces/internal/impl/XMLStreamReaderImpl.java ! src/com/sun/org/apache/xerces/internal/impl/dtd/DTDGrammar.java ! src/com/sun/org/apache/xerces/internal/impl/dtd/DTDGrammarBucket.java ! src/com/sun/org/apache/xerces/internal/impl/dv/DTDDVFactory.java ! src/com/sun/org/apache/xerces/internal/impl/dv/dtd/DTDDVFactoryImpl.java ! src/com/sun/org/apache/xerces/internal/impl/dv/dtd/XML11DTDDVFactoryImpl.java ! src/com/sun/org/apache/xerces/internal/impl/xpath/XPath.java ! src/com/sun/org/apache/xerces/internal/impl/xpath/regex/ParserForXMLSchema.java ! src/com/sun/org/apache/xerces/internal/impl/xpath/regex/Token.java ! src/com/sun/org/apache/xerces/internal/impl/xs/SubstitutionGroupHandler.java ! src/com/sun/org/apache/xerces/internal/impl/xs/XMLSchemaLoader.java ! src/com/sun/org/apache/xerces/internal/impl/xs/XMLSchemaValidator.java ! src/com/sun/org/apache/xerces/internal/impl/xs/XSGrammarBucket.java ! src/com/sun/org/apache/xerces/internal/impl/xs/traversers/XSAttributeChecker.java ! src/com/sun/org/apache/xerces/internal/impl/xs/traversers/XSDHandler.java ! src/com/sun/org/apache/xerces/internal/jaxp/DocumentBuilderFactoryImpl.java ! src/com/sun/org/apache/xerces/internal/jaxp/DocumentBuilderImpl.java ! src/com/sun/org/apache/xerces/internal/jaxp/SAXParserFactoryImpl.java ! src/com/sun/org/apache/xerces/internal/jaxp/SAXParserImpl.java ! src/com/sun/org/apache/xerces/internal/parsers/XMLGrammarPreparser.java ! src/com/sun/org/apache/xerces/internal/util/AugmentationsImpl.java ! src/com/sun/org/apache/xerces/internal/util/DOMErrorHandlerWrapper.java ! src/com/sun/org/apache/xerces/internal/util/DOMUtil.java ! src/com/sun/org/apache/xerces/internal/util/EncodingMap.java ! src/com/sun/org/apache/xerces/internal/util/SymbolHash.java ! src/com/sun/org/apache/xerces/internal/util/SymbolTable.java ! src/com/sun/org/apache/xerces/internal/util/XMLAttributesImpl.java ! src/com/sun/org/apache/xml/internal/dtm/ref/CustomStringPool.java ! src/com/sun/org/apache/xml/internal/dtm/ref/sax2dtm/SAX2DTM.java ! src/com/sun/org/apache/xml/internal/resolver/Catalog.java ! src/com/sun/org/apache/xml/internal/resolver/CatalogEntry.java ! src/com/sun/org/apache/xml/internal/resolver/helpers/BootstrapResolver.java ! src/com/sun/org/apache/xml/internal/resolver/readers/DOMCatalogReader.java ! src/com/sun/org/apache/xml/internal/resolver/readers/SAXCatalogReader.java ! src/com/sun/org/apache/xml/internal/serialize/BaseMarkupSerializer.java ! src/com/sun/org/apache/xml/internal/serialize/ElementState.java ! src/com/sun/org/apache/xml/internal/serialize/Encodings.java ! src/com/sun/org/apache/xml/internal/serialize/HTMLSerializer.java ! src/com/sun/org/apache/xml/internal/serialize/HTMLdtd.java ! src/com/sun/org/apache/xml/internal/serialize/SerializerFactory.java ! src/com/sun/org/apache/xml/internal/serialize/XMLSerializer.java ! src/com/sun/org/apache/xml/internal/serializer/AttributesImplSerializer.java ! src/com/sun/org/apache/xml/internal/serializer/EmptySerializer.java ! src/com/sun/org/apache/xml/internal/serializer/SerializerFactory.java ! src/com/sun/org/apache/xml/internal/serializer/utils/Utils.java ! src/com/sun/org/apache/xml/internal/utils/DOMHelper.java ! src/com/sun/org/apache/xml/internal/utils/ElemDesc.java ! src/com/sun/org/apache/xpath/internal/compiler/Keywords.java ! src/com/sun/xml/internal/stream/XMLEntityStorage.java ! src/com/sun/xml/internal/stream/dtd/nonvalidating/DTDGrammar.java ! src/org/xml/sax/helpers/NamespaceSupport.java Changeset: 7fb0bb6f3bd0 Author: aefimov Date: 2015-04-28 16:07 +0300 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jaxp/rev/7fb0bb6f3bd0 8078822: 8068842 fix missed one new file PrimeNumberSequenceGenerator.java Reviewed-by: joehw, dfuchs, lancea - src/com/sun/org/apache/xalan/internal/xsltc/runtime/Hashtable.java + src/com/sun/org/apache/xerces/internal/util/PrimeNumberSequenceGenerator.java - src/com/sun/org/apache/xerces/internal/util/TypeInfoImpl.java - src/com/sun/org/apache/xml/internal/serializer/Utils.java - src/com/sun/org/apache/xml/internal/utils/NamespaceSupport2.java Changeset: ba508fc2eeb6 Author: aefimov Date: 2015-06-03 17:05 +0300 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jaxp/rev/ba508fc2eeb6 8078427: More supportive home environment Reviewed-by: dfuchs, lancea, skoivu ! src/com/sun/org/apache/xml/internal/resolver/Catalog.java ! src/com/sun/org/apache/xml/internal/serializer/TreeWalker.java ! src/com/sun/org/apache/xml/internal/utils/TreeWalker.java Changeset: fe931343ad6a Author: aefimov Date: 2015-07-12 22:35 +0300 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jaxp/rev/fe931343ad6a 8086733: Improve namespace handling Reviewed-by: dfuchs, lancea, ahgross ! src/com/sun/org/apache/xalan/internal/utils/XMLSecurityManager.java ! src/com/sun/org/apache/xerces/internal/impl/XML11DocumentScannerImpl.java ! src/com/sun/org/apache/xerces/internal/impl/XML11EntityScanner.java ! src/com/sun/org/apache/xerces/internal/impl/XML11NSDocumentScannerImpl.java ! src/com/sun/org/apache/xerces/internal/impl/XMLDTDScannerImpl.java ! src/com/sun/org/apache/xerces/internal/impl/XMLDocumentFragmentScannerImpl.java ! src/com/sun/org/apache/xerces/internal/impl/XMLEntityManager.java ! src/com/sun/org/apache/xerces/internal/impl/XMLEntityScanner.java ! src/com/sun/org/apache/xerces/internal/impl/XMLNSDocumentScannerImpl.java ! src/com/sun/org/apache/xerces/internal/impl/XMLScanner.java ! src/com/sun/org/apache/xerces/internal/impl/XMLVersionDetector.java ! src/com/sun/org/apache/xerces/internal/impl/msg/XMLMessages.properties ! src/com/sun/org/apache/xerces/internal/impl/msg/XMLSchemaMessages.properties ! src/com/sun/org/apache/xerces/internal/impl/xs/models/CMNodeFactory.java ! src/com/sun/org/apache/xerces/internal/impl/xs/traversers/XSAttributeChecker.java ! src/com/sun/org/apache/xerces/internal/utils/XMLLimitAnalyzer.java ! src/com/sun/org/apache/xerces/internal/utils/XMLSecurityManager.java ! src/com/sun/xml/internal/stream/Entity.java Changeset: ab72c17cd492 Author: aefimov Date: 2015-07-15 18:40 +0300 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jaxp/rev/ab72c17cd492 8130078: Document better processing Reviewed-by: dfuchs, lancea, ahgross ! src/com/sun/org/apache/xerces/internal/impl/XMLDTDScannerImpl.java ! src/com/sun/org/apache/xerces/internal/impl/XMLDocumentScannerImpl.java ! src/com/sun/org/apache/xerces/internal/xni/parser/XMLDTDScanner.java Changeset: e95e9042c8f3 Author: aefimov Date: 2015-05-15 11:24 +0300 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jaxp/rev/e95e9042c8f3 8079323: Serialization compatibility for Templates: need to exclude Hashtable from serialization Reviewed-by: dfuchs, lancea, hawtin ! src/com/sun/org/apache/xalan/internal/xsltc/trax/TemplatesImpl.java Changeset: 9f5bcd95c8d5 Author: andrew Date: 2015-10-19 09:41 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jaxp/rev/9f5bcd95c8d5 Added tag jdk7u91-b00 for changeset e95e9042c8f3 ! .hgtags Changeset: 6d9a19297633 Author: andrew Date: 2015-10-20 23:03 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jaxp/rev/6d9a19297633 Added tag jdk7u91-b01 for changeset 9f5bcd95c8d5 ! .hgtags From gnu.andrew at redhat.com Tue Nov 3 14:48:13 2015 From: gnu.andrew at redhat.com (gnu.andrew at redhat.com) Date: Tue, 03 Nov 2015 14:48:13 +0000 Subject: hg: jdk7u/jdk7u/jaxws: 2 new changesets Message-ID: <201511031448.tA3EmDdE021057@aojmv0008.oracle.com> Changeset: 3862008078f8 Author: andrew Date: 2015-10-19 09:41 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jaxws/rev/3862008078f8 Added tag jdk7u91-b00 for changeset 8206da0912d3 ! .hgtags Changeset: 2230b8f8e03a Author: andrew Date: 2015-10-20 23:03 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jaxws/rev/2230b8f8e03a Added tag jdk7u91-b01 for changeset 3862008078f8 ! .hgtags From gnu.andrew at redhat.com Tue Nov 3 14:48:19 2015 From: gnu.andrew at redhat.com (gnu.andrew at redhat.com) Date: Tue, 03 Nov 2015 14:48:19 +0000 Subject: hg: jdk7u/jdk7u/langtools: 2 new changesets Message-ID: <201511031448.tA3EmJx9021213@aojmv0008.oracle.com> Changeset: 1a9e2dcc91dc Author: andrew Date: 2015-10-19 09:41 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/langtools/rev/1a9e2dcc91dc Added tag jdk7u91-b00 for changeset 2741575d96f3 ! .hgtags Changeset: 08e99c45e470 Author: andrew Date: 2015-10-20 23:03 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/langtools/rev/08e99c45e470 Added tag jdk7u91-b01 for changeset 1a9e2dcc91dc ! .hgtags From gnu.andrew at redhat.com Tue Nov 3 14:48:26 2015 From: gnu.andrew at redhat.com (gnu.andrew at redhat.com) Date: Tue, 03 Nov 2015 14:48:26 +0000 Subject: hg: jdk7u/jdk7u/hotspot: 3 new changesets Message-ID: <201511031448.tA3EmQas021346@aojmv0008.oracle.com> Changeset: cce125604308 Author: asaha Date: 2015-04-01 12:55 -0700 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/hotspot/rev/cce125604308 8076506: Increment minor version of HSx for 7u91 and initialize the build number Reviewed-by: katleman ! make/hotspot_version Changeset: 5eaaa63440c4 Author: andrew Date: 2015-10-19 09:41 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/hotspot/rev/5eaaa63440c4 Added tag jdk7u91-b00 for changeset cce125604308 ! .hgtags Changeset: 2f2d431ace96 Author: andrew Date: 2015-10-20 23:03 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/hotspot/rev/2f2d431ace96 Added tag jdk7u91-b01 for changeset 5eaaa63440c4 ! .hgtags From gnu.andrew at redhat.com Tue Nov 3 14:48:40 2015 From: gnu.andrew at redhat.com (gnu.andrew at redhat.com) Date: Tue, 03 Nov 2015 14:48:40 +0000 Subject: hg: jdk7u/jdk7u/jdk: 32 new changesets Message-ID: <201511031448.tA3EmfEt021505@aojmv0008.oracle.com> Changeset: 276da990e386 Author: igerasim Date: 2015-08-03 22:36 +0300 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/276da990e386 6854417: TESTBUG: java/util/regex/RegExTest.java fails intermittently Reviewed-by: sherman ! test/java/util/regex/RegExTest.java Changeset: 2e19c3812aa4 Author: igerasim Date: 2015-07-31 00:48 +0300 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/2e19c3812aa4 8076339: Better handling of remote object invocation Reviewed-by: asmotrak, igerasim, skoivu ! src/share/classes/java/rmi/server/RemoteObjectInvocationHandler.java Changeset: 4d9ce055f3ed Author: igerasim Date: 2015-05-16 02:04 +0300 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/4d9ce055f3ed 8076413: Better JRMP message handling Reviewed-by: smarks ! src/share/classes/sun/rmi/transport/DGCClient.java Changeset: 7970533c0ce5 Author: prr Date: 2015-07-24 09:46 -0700 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/7970533c0ce5 8103675: Better Binary searches Reviewed-by: srl, serb, mschoene ! src/share/native/sun/font/layout/LookupTables.cpp Changeset: 20a2e0bba042 Author: michaelm Date: 2015-07-09 13:23 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/20a2e0bba042 8130193: Improve HTTP connections Reviewed-by: alanb ! src/share/classes/sun/net/www/protocol/http/HttpURLConnection.java Changeset: ef180dadb94f Author: igerasim Date: 2015-07-31 17:18 +0300 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/ef180dadb94f 8005226: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java fails intermittently Reviewed-by: rriggs, smarks ! test/java/rmi/testlibrary/TestLibrary.java ! test/java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java Changeset: 48bbb605fcd6 Author: jdn Date: 2015-10-16 15:41 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/48bbb605fcd6 8014097: add doPrivileged methods with limited privilege scope Summary: Backport new limited privilege doPrivileged using SharedSecrets Reviewed-by: mchung, omajid ! src/share/classes/java/security/AccessControlContext.java ! src/share/classes/java/security/AccessController.java ! src/share/classes/java/security/ProtectionDomain.java ! src/share/classes/sun/misc/JavaSecurityAccess.java + test/java/security/AccessController/LimitedDoPrivileged.java Changeset: e78b8cfe9db2 Author: mullan Date: 2013-10-22 08:03 -0400 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/e78b8cfe9db2 8021191: Add isAuthorized check to limited doPrivileged methods Reviewed-by: weijun, xuelei ! src/share/classes/java/security/AccessControlContext.java ! src/share/classes/java/security/AccessController.java Changeset: 6d723c53eeae Author: kevinw Date: 2015-10-16 15:58 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/6d723c53eeae 8064331: JavaSecurityAccess.doIntersectionPrivilege() drops the information about the domain combiner of the stack ACC Reviewed-by: jbachorik, mullan ! src/share/classes/java/security/AccessControlContext.java ! src/share/classes/java/security/ProtectionDomain.java + test/java/security/ProtectionDomain/PreserveCombinerTest.java Changeset: aee5fcdcc13e Author: weijun Date: 2015-10-16 02:49 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/aee5fcdcc13e 6966259: Make PrincipalName and Realm immutable Reviewed-by: xuelei ! src/share/classes/javax/security/auth/kerberos/KerberosPrincipal.java ! src/share/classes/sun/security/jgss/krb5/Krb5NameElement.java ! src/share/classes/sun/security/krb5/Credentials.java ! src/share/classes/sun/security/krb5/KrbApReq.java ! src/share/classes/sun/security/krb5/KrbAppMessage.java ! src/share/classes/sun/security/krb5/KrbAsRep.java ! src/share/classes/sun/security/krb5/KrbAsReq.java ! src/share/classes/sun/security/krb5/KrbAsReqBuilder.java ! src/share/classes/sun/security/krb5/KrbCred.java ! src/share/classes/sun/security/krb5/KrbException.java ! src/share/classes/sun/security/krb5/KrbKdcRep.java ! src/share/classes/sun/security/krb5/KrbPriv.java ! src/share/classes/sun/security/krb5/KrbSafe.java ! src/share/classes/sun/security/krb5/KrbTgsRep.java ! src/share/classes/sun/security/krb5/KrbTgsReq.java ! src/share/classes/sun/security/krb5/PrincipalName.java ! src/share/classes/sun/security/krb5/Realm.java ! src/share/classes/sun/security/krb5/RealmException.java - src/share/classes/sun/security/krb5/ServiceName.java ! src/share/classes/sun/security/krb5/internal/ASRep.java ! src/share/classes/sun/security/krb5/internal/Authenticator.java ! src/share/classes/sun/security/krb5/internal/CredentialsUtil.java ! src/share/classes/sun/security/krb5/internal/EncASRepPart.java ! src/share/classes/sun/security/krb5/internal/EncKDCRepPart.java ! src/share/classes/sun/security/krb5/internal/EncTGSRepPart.java ! src/share/classes/sun/security/krb5/internal/EncTicketPart.java ! src/share/classes/sun/security/krb5/internal/KDCRep.java ! src/share/classes/sun/security/krb5/internal/KDCReqBody.java ! src/share/classes/sun/security/krb5/internal/KRBError.java ! src/share/classes/sun/security/krb5/internal/KrbCredInfo.java ! src/share/classes/sun/security/krb5/internal/TGSRep.java ! src/share/classes/sun/security/krb5/internal/Ticket.java ! src/share/classes/sun/security/krb5/internal/ccache/CCacheInputStream.java ! src/share/classes/sun/security/krb5/internal/ccache/Credentials.java ! src/share/classes/sun/security/krb5/internal/ccache/CredentialsCache.java ! src/share/classes/sun/security/krb5/internal/ccache/FileCredentialsCache.java ! src/share/classes/sun/security/krb5/internal/ccache/MemoryCredentialsCache.java ! src/share/classes/sun/security/krb5/internal/ktab/KeyTabInputStream.java ! src/share/classes/sun/security/ssl/krb5/KerberosClientKeyExchangeImpl.java ! src/windows/classes/sun/security/krb5/internal/tools/Kinit.java ! src/windows/classes/sun/security/krb5/internal/tools/KinitOptions.java ! src/windows/classes/sun/security/krb5/internal/tools/Ktab.java ! src/windows/native/sun/security/krb5/NativeCreds.c - test/sun/security/krb5/ServiceNameClone.java ! test/sun/security/krb5/auto/KDC.java + test/sun/security/krb5/name/Constructors.java + test/sun/security/krb5/name/empty.conf + test/sun/security/krb5/name/krb5.conf Changeset: 6cc1fcddea86 Author: weijun Date: 2015-10-16 03:14 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/6cc1fcddea86 8028780: JDK KRB5 module throws OutOfMemoryError when CCache is corrupt Reviewed-by: xuelei ! src/share/classes/sun/security/krb5/internal/ccache/CCacheInputStream.java ! src/share/classes/sun/security/krb5/internal/ccache/FileCCacheConstants.java + test/sun/security/jgss/GssMemoryIssues.java - test/sun/security/krb5/TimeInCCache.java + test/sun/security/krb5/ccache/CorruptedCC.java + test/sun/security/krb5/ccache/TimeInCCache.java Changeset: c28fc5539220 Author: weijun Date: 2015-10-16 16:18 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/c28fc5539220 8048030: Expectations should be consistent Reviewed-by: valeriep, mullan, ahgross ! src/share/classes/javax/security/auth/kerberos/KerberosPrincipal.java ! src/share/classes/javax/security/auth/kerberos/ServicePermission.java ! src/share/classes/sun/security/jgss/krb5/Krb5NameElement.java ! src/share/classes/sun/security/jgss/wrapper/GSSNameElement.java ! src/share/classes/sun/security/krb5/KrbServiceLocator.java ! src/share/classes/sun/security/krb5/PrincipalName.java ! src/share/classes/sun/security/krb5/Realm.java ! src/share/classes/sun/security/krb5/internal/ccache/CCacheInputStream.java ! test/sun/security/krb5/auto/KDC.java ! test/sun/security/krb5/name/Constructors.java Changeset: c3f7837442fe Author: prr Date: 2015-10-16 18:48 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/c3f7837442fe 8086092: More palette improvements Reviewed-by: bae, serb ! make/sun/cmm/lcms/Makefile Changeset: 0fa7065bb921 Author: xuelei Date: 2015-07-23 09:51 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/0fa7065bb921 8081760: Better group dynamics Reviewed-by: coffeys, mullan, weijun, jnimeh, ahgross, asmotrak ! src/share/classes/sun/security/ssl/DHCrypt.java ! src/share/classes/sun/security/util/AbstractAlgorithmConstraints.java ! src/share/lib/security/java.security-linux ! src/share/lib/security/java.security-macosx ! src/share/lib/security/java.security-solaris ! src/share/lib/security/java.security-windows Changeset: 47ad7e6d23a5 Author: aefimov Date: 2015-06-03 17:06 +0300 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/47ad7e6d23a5 8078427: More supportive home environment Reviewed-by: dfuchs, lancea, skoivu ! src/share/lib/security/java.security-linux ! src/share/lib/security/java.security-macosx ! src/share/lib/security/java.security-solaris ! src/share/lib/security/java.security-windows ! test/java/lang/SecurityManager/CheckPackageAccess.java Changeset: 701e84955503 Author: sjiang Date: 2015-05-07 09:37 +0200 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/701e84955503 8078440: Safer managed types Reviewed-by: dfuchs, ahgross ! src/share/classes/javax/management/openmbean/OpenMBeanAttributeInfoSupport.java Changeset: d1171cfa66a8 Author: serb Date: 2015-05-23 02:49 +0300 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/d1171cfa66a8 8080541: More direct property handling Reviewed-by: prr, alexsch ! src/share/classes/java/beans/PropertyDescriptor.java Changeset: 9006b8e45e6d Author: smarks Date: 2015-06-25 16:44 -0700 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/9006b8e45e6d 8080688: Service for DGC services Reviewed-by: skoivu, igerasim, jeff ! src/share/classes/sun/rmi/transport/DGCImpl.java Changeset: 6964c084c898 Author: aefimov Date: 2015-06-11 10:33 +0300 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/6964c084c898 8087118: Remove missing package from java.security files Reviewed-by: joehw ! src/share/lib/security/java.security-linux ! src/share/lib/security/java.security-macosx ! src/share/lib/security/java.security-solaris ! src/share/lib/security/java.security-windows ! test/java/lang/SecurityManager/CheckPackageAccess.java Changeset: 8cbcdff3f3be Author: poonam Date: 2015-07-30 07:31 -0700 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/8cbcdff3f3be 8087350: Improve array conversions Reviewed-by: jbachorik, kevinw ! src/share/classes/javax/management/openmbean/OpenMBeanAttributeInfoSupport.java Changeset: 91ca9662221d Author: igerasim Date: 2015-06-30 15:53 +0300 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/91ca9662221d 8103671: More objective stream classes Reviewed-by: rriggs, igerasim ! src/share/classes/java/io/ObjectStreamClass.java Changeset: 274ffe976dd5 Author: igerasim Date: 2015-07-03 17:50 +0300 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/274ffe976dd5 8130253: ObjectStreamClass.getFields too restrictive Reviewed-by: igerasim, skoivu ! src/share/classes/java/io/ObjectStreamClass.java Changeset: 666241daf19c Author: xuelei Date: 2015-07-13 13:37 +0000 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/666241daf19c 8130864: Better server identity handling Reviewed-by: jnimeh, asmotrak, ahgross ! src/share/classes/sun/security/ssl/ClientHandshaker.java Changeset: fcdc53161daa Author: bpb Date: 2015-08-06 10:13 -0700 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/fcdc53161daa 8130891: (bf) More direct buffering Summary: Improve non-byte direct buffering. Reviewed-by: alanb, jeff, ahgross, robm, rriggs ! src/share/classes/java/nio/Direct-X-Buffer.java.template Changeset: fe651d1bc5a9 Author: igerasim Date: 2015-08-10 18:21 +0300 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/fe651d1bc5a9 8131291: Perfect parameter patterning Reviewed-by: mullan ! src/share/classes/sun/security/provider/certpath/AlgorithmChecker.java Changeset: f61b0ce49ba9 Author: prr Date: 2015-07-29 11:18 -0700 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/f61b0ce49ba9 8132042: Preserve layout presentation Reviewed-by: mschoene, srl, serb ! src/share/native/sun/font/layout/IndicRearrangementProcessor.cpp ! src/share/native/sun/font/layout/IndicRearrangementProcessor.h ! src/share/native/sun/font/layout/IndicRearrangementProcessor2.cpp ! src/share/native/sun/font/layout/IndicRearrangementProcessor2.h ! src/share/native/sun/font/layout/MorphTables.cpp ! src/share/native/sun/font/layout/MorphTables2.cpp ! src/share/native/sun/font/layout/SegmentArrayProcessor.cpp ! src/share/native/sun/font/layout/SegmentArrayProcessor2.cpp ! src/share/native/sun/font/layout/SegmentSingleProcessor2.cpp ! src/share/native/sun/font/layout/SimpleArrayProcessor2.cpp ! src/share/native/sun/font/layout/SingleTableProcessor.cpp Changeset: d96acbda20f9 Author: igerasim Date: 2015-09-08 22:31 +0300 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/d96acbda20f9 8135043: ObjectStreamClass.getField(String) too restrictive Reviewed-by: igerasim, chegar ! src/share/classes/java/io/ObjectStreamClass.java + test/java/io/ObjectInputStream/TestObjectStreamClass.java Changeset: 614293ac4e81 Author: aefimov Date: 2015-06-30 17:19 +0300 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/614293ac4e81 8098547: (tz) Support tzdata2015e Reviewed-by: coffeys, okutsu ! make/sun/javazic/tzdata/VERSION ! make/sun/javazic/tzdata/africa ! make/sun/javazic/tzdata/iso3166.tab ! make/sun/javazic/tzdata/northamerica ! make/sun/javazic/tzdata/southamerica Changeset: 295856e8680f Author: aefimov Date: 2015-08-18 14:43 +0300 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/295856e8680f 8133321: (tz) Support tzdata2015f Reviewed-by: okutsu ! make/sun/javazic/tzdata/VERSION ! make/sun/javazic/tzdata/africa ! make/sun/javazic/tzdata/asia ! make/sun/javazic/tzdata/europe ! make/sun/javazic/tzdata/leapseconds ! make/sun/javazic/tzdata/northamerica ! make/sun/javazic/tzdata/southamerica ! make/sun/javazic/tzdata/zone.tab Changeset: 7b060f76bf18 Author: andrew Date: 2015-10-19 09:40 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/7b060f76bf18 Added tag jdk7u91-b00 for changeset 295856e8680f ! .hgtags Changeset: 9fc5d7338840 Author: kevinw Date: 2015-03-04 13:41 +0000 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/9fc5d7338840 8072932: Test fails with java.security.AccessControlException: access denied ("java.security.SecurityPermission" "getDomainCombiner") Reviewed-by: jbachorik ! src/share/classes/java/security/ProtectionDomain.java Changeset: 12d1f39ed743 Author: andrew Date: 2015-10-20 23:03 +0100 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/12d1f39ed743 Added tag jdk7u91-b01 for changeset 9fc5d7338840 ! .hgtags From gnu.andrew at redhat.com Tue Nov 3 17:19:14 2015 From: gnu.andrew at redhat.com (Andrew Hughes) Date: Tue, 3 Nov 2015 12:19:14 -0500 (EST) Subject: [PATCH] jdk7u91-b01 retro-active security patch review In-Reply-To: <20151029133648.GA18617@redhat.com> References: <1531261414.38378527.1446067802816.JavaMail.zimbra@redhat.com> <1159927443.38378747.1446067933510.JavaMail.zimbra@redhat.com> <20151029133648.GA18617@redhat.com> Message-ID: <1582101472.2055877.1446571154920.JavaMail.zimbra@redhat.com> ----- Original Message ----- > * Andrew Hughes [2015-10-28 17:32]: > > We have a new release of IcedTea [0] and a new OpenJDK 7 release, u91-b01, > > to go with it. This is made from the current state of the OpenJDK 7u > > repositories plus backports of the new security fixes included in 8u65. > > Assuming this matches what was pushed into IcedTea, okay from me. > > Thanks, > Omair > > -- > PGP Key: 66484681 (http://pgp.mit.edu/) > Fingerprint = F072 555B 0A17 3957 4E95 0056 F286 F14F 6648 4681 > Pushed. The 7u tree can always be retrieved from the IcedTea trees by checking out the appropriate tag (jdk7u91-b01 in this case). This is worth bearing in mind if an updated raw OpenJDK tree is required before this upstream review process completes. Thanks, -- Andrew :) Senior Free Java Software Engineer Red Hat, Inc. (http://www.redhat.com) PGP Key: ed25519/35964222 (hkp://keys.gnupg.net) Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222 PGP Key: rsa4096/248BDC07 (hkp://keys.gnupg.net) Fingerprint = EC5A 1F5E C0AD 1D15 8F1F 8F91 3B96 A578 248B DC07 From martinrb at google.com Tue Nov 3 18:44:41 2015 From: martinrb at google.com (Martin Buchholz) Date: Tue, 3 Nov 2015 10:44:41 -0800 Subject: [PATCH] jdk7u91-b01 retro-active security patch review In-Reply-To: <1582101472.2055877.1446571154920.JavaMail.zimbra@redhat.com> References: <1531261414.38378527.1446067802816.JavaMail.zimbra@redhat.com> <1159927443.38378747.1446067933510.JavaMail.zimbra@redhat.com> <20151029133648.GA18617@redhat.com> <1582101472.2055877.1446571154920.JavaMail.zimbra@redhat.com> Message-ID: > > > The 7u tree can always be retrieved from the IcedTea trees by checking out > the appropriate tag (jdk7u91-b01 in this case). This is worth bearing in > mind > if an updated raw OpenJDK tree is required before this upstream review > process > completes. Thanks - that's useful to know. If this is general IcedTea policy ("whenever openjdk and icedtea trees share tags, they refer to identical trees") that should be published somewhere on icedtea.classpath.org (and on https://wiki.openjdk.java.net/display/jdk7u/Main ?). From gnu.andrew at redhat.com Fri Nov 6 02:33:25 2015 From: gnu.andrew at redhat.com (Andrew Hughes) Date: Thu, 5 Nov 2015 21:33:25 -0500 (EST) Subject: [PATCH] jdk7u91-b01 retro-active security patch review In-Reply-To: References: <1531261414.38378527.1446067802816.JavaMail.zimbra@redhat.com> <1159927443.38378747.1446067933510.JavaMail.zimbra@redhat.com> <20151029133648.GA18617@redhat.com> <1582101472.2055877.1446571154920.JavaMail.zimbra@redhat.com> Message-ID: <1102145033.4068051.1446777205211.JavaMail.zimbra@redhat.com> ----- Original Message ----- > > > > > > The 7u tree can always be retrieved from the IcedTea trees by checking out > > the appropriate tag (jdk7u91-b01 in this case). This is worth bearing in > > mind > > if an updated raw OpenJDK tree is required before this upstream review > > process > > completes. > > > Thanks - that's useful to know. If this is general IcedTea policy > ("whenever openjdk and icedtea trees share tags, they refer to identical > trees") that should be published somewhere on icedtea.classpath.org (and on > https://wiki.openjdk.java.net/display/jdk7u/Main ?). > Well, it's a by-product of how the repositories work; IcedTea is a superset of the changesets in a particular version of OpenJDK, and the two are combined by merge changesets which bring in the latest OpenJDK changesets. It is worth an explicit mention on the IcedTea page though, I guess. I'll look into it. Thanks, -- Andrew :) Senior Free Java Software Engineer Red Hat, Inc. (http://www.redhat.com) PGP Key: ed25519/35964222 (hkp://keys.gnupg.net) Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222 PGP Key: rsa4096/248BDC07 (hkp://keys.gnupg.net) Fingerprint = EC5A 1F5E C0AD 1D15 8F1F 8F91 3B96 A578 248B DC07 From mail at alexkasko.com Tue Nov 10 10:57:33 2015 From: mail at alexkasko.com (Alex Kashchenko) Date: Tue, 10 Nov 2015 10:57:33 +0000 Subject: RFR [7] 8133206: "java.lang.OutOfMemoryError: unable to create new native thread" caused by upgrade to zlib 1.2.8 In-Reply-To: <5627B1B8.6080307@azulsystems.com> References: <561E7C96.9010207@azulsystems.com> <5627B1B8.6080307@azulsystems.com> Message-ID: <5641CD9D.8080208@alexkasko.com> Hi, On 10/21/2015 04:39 PM, Nikolay Gorshkov wrote: > Hi Sherman, > > Thank you for your reply! My answers are inlined. > > > Can you be more specific about the "class loading cases" above? Sounds > > more like we have a memory leaking here (the real root cause)? for > example > > the inflateEnd() never gets called? > > I agree, the real root cause is probably the following issue that exists > since the end of 2002: > https://bugs.openjdk.java.net/browse/JDK-4797189 > "Finalizers not called promptly enough" > And it is "the absence of a general solution to the non-heap resource > exhaustion problem". > > zlib's inflateEnd() function is called by > void java.util.zip.Inflater.end(long addr) > native method only, and this method, in turn, is called only by > void java.util.zip.Inflater.end() > and > void java.util.zip.Inflater.finalize() > methods. According to the experiments, the typical stack trace for > instantiating java.util.zip.Inflater is: > > java.util.zip.Inflater.(Inflater.java:116) > java.util.zip.ZipFile.getInflater(ZipFile.java:450) > java.util.zip.ZipFile.getInputStream(ZipFile.java:369) > java.util.jar.JarFile.getInputStream(JarFile.java:412) > org.jboss.virtual.plugins.context.zip.ZipFileWrapper.openStream(ZipFileWrapper.java:222) > > > org.jboss.classloader.spi.base.BaseClassLoader$2.run(BaseClassLoader.java:592) > > java.security.AccessController.doPrivileged(Native Method) > org.jboss.classloader.spi.base.BaseClassLoader.loadClassLocally(BaseClassLoader.java:591) > > > org.jboss.classloader.spi.base.BaseClassLoader.loadClass(BaseClassLoader.java:447) > > java.lang.ClassLoader.loadClass(ClassLoader.java:358) > java.lang.Class.forName0(Native Method) > java.lang.Class.forName(Class.java:278) > org.jboss.deployers.plugins.annotations.WeakClassLoaderHolder.loadClass(WeakClassLoaderHolder.java:72) > > > > It's quite hard to understand who is responsible for not calling > Inflater.end() > method explicitly; probably, it is the jboss/application's code. > Unfortunately, > we were in "it worked before and is broken now" customer situation here, so > needed to fix it anyway. > > > From the doc/impl in inflate() it appears the proposed change should be > > fine, though it's a little hacky, as you never know if it starts to > return > > Z_OK from some future release(s). Since the "current" implementation > > never returns Z_OK, it might be worth considering to keep the Z_OK logic > > asis in Inflater.c, together with the Z_BUF_ERROR, just in case? > > OK, I added handling of Z_OK code back. > > > I would be desired to add some words in Inflater.c to remind the > > future maintainer why we switched from partial to finish and why to > > check z_buf_error. > > I agree, added a comment. > > The updated webrev is available here: > > http://cr.openjdk.java.net/~nikgor/8133206/jdk7u-dev/webrev.01/ > The change looks good to me (not a Reviewer/Committer). Patched jdk7u also passes JCK-7 on RHEL 7.1. I forward-ported this patch to jdk9 (consulted with Nikolay Gorshkov first), jtreg reproducer for jdk9 also works with jdk7u - http://mail.openjdk.java.net/pipermail/jdk9-dev/2015-November/003036.html -- -Alex From rasbold at google.com Thu Nov 12 19:46:45 2015 From: rasbold at google.com (Chuck Rasbold) Date: Thu, 12 Nov 2015 11:46:45 -0800 Subject: Patch for JDK-8142882: rebinding of a DirectMethodHandle Message-ID: Proposed fix for: https://bugs.openjdk.java.net/browse/JDK-8142882 http://cr.openjdk.java.net/~rasbold/8142882/webrev.00/ Don't pre-dispatch the receiver of a DirectMethodHandle, as it may allow a protected method to be accessed. This fix is a subset of the change for JDK-8050166 , which is already in jdk8 and jdk9. The change causes the an NPE to be thrown when a protected MethodHandle is called via invoke(). An additional backport of JDK-8016839 is needed, if it is desired to that a proper IllegalAccessError is thrown instead of an NPE, as happens with jdk8 / jdk9. From john.r.rose at oracle.com Thu Nov 12 20:39:18 2015 From: john.r.rose at oracle.com (John Rose) Date: Thu, 12 Nov 2015 12:39:18 -0800 Subject: Patch for JDK-8142882: rebinding of a DirectMethodHandle In-Reply-To: References: Message-ID: Yes, it is safe to remove those overrides from DMH. You can count me as a reviewer. I like the test; it should be forward-ported to 9 if we don't already have something like it. ? John > On Nov 12, 2015, at 11:46 AM, Chuck Rasbold wrote: > > Proposed fix for: https://bugs.openjdk.java.net/browse/JDK-8142882 > > http://cr.openjdk.java.net/~rasbold/8142882/webrev.00/ > > Don't pre-dispatch the receiver of a DirectMethodHandle, as it may allow a > protected method to be accessed. > > This fix is a subset of the change for JDK-8050166 > , which is already in > jdk8 and jdk9. > > The change causes the an NPE to be thrown when a protected MethodHandle is > called via invoke(). > An additional backport of JDK-8016839 > is needed, if it is > desired to that a proper IllegalAccessError is thrown instead of an NPE, as > happens with jdk8 / jdk9. From gnu.andrew at redhat.com Fri Nov 13 02:13:39 2015 From: gnu.andrew at redhat.com (gnu.andrew at redhat.com) Date: Fri, 13 Nov 2015 02:13:39 +0000 Subject: hg: jdk7u/jdk7u/jdk: 8142882: rebinding of the receiver of a DirectMethodHandle may allow a protected method to be accessed Message-ID: <201511130213.tAD2DdVf008573@aojmv0008.oracle.com> Changeset: c434c67b8189 Author: rasbold Date: 2015-11-13 01:42 +0000 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/c434c67b8189 8142882: rebinding of the receiver of a DirectMethodHandle may allow a protected method to be accessed Reviewed-by: jrose, andrew ! src/share/classes/java/lang/invoke/DirectMethodHandle.java + test/java/lang/invoke/ProtectedMethodHandleTest.java From gnu.andrew at redhat.com Fri Nov 13 04:46:14 2015 From: gnu.andrew at redhat.com (gnu.andrew at redhat.com) Date: Fri, 13 Nov 2015 04:46:14 +0000 Subject: hg: jdk7u/jdk7u: Added tag jdk7u91-b02 for changeset 2be0ab1a24b2 Message-ID: <201511130446.tAD4kEHj018889@aojmv0008.oracle.com> Changeset: a28bc539342e Author: andrew Date: 2015-11-13 02:43 +0000 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/rev/a28bc539342e Added tag jdk7u91-b02 for changeset 2be0ab1a24b2 ! .hgtags From gnu.andrew at redhat.com Fri Nov 13 04:46:20 2015 From: gnu.andrew at redhat.com (gnu.andrew at redhat.com) Date: Fri, 13 Nov 2015 04:46:20 +0000 Subject: hg: jdk7u/jdk7u/corba: Added tag jdk7u91-b02 for changeset e3a6331d136e Message-ID: <201511130446.tAD4kKH5018949@aojmv0008.oracle.com> Changeset: 96b735f85c61 Author: andrew Date: 2015-11-13 02:43 +0000 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/96b735f85c61 Added tag jdk7u91-b02 for changeset e3a6331d136e ! .hgtags From gnu.andrew at redhat.com Fri Nov 13 04:46:26 2015 From: gnu.andrew at redhat.com (gnu.andrew at redhat.com) Date: Fri, 13 Nov 2015 04:46:26 +0000 Subject: hg: jdk7u/jdk7u/jaxp: Added tag jdk7u91-b02 for changeset 6d9a19297633 Message-ID: <201511130446.tAD4kQqq019005@aojmv0008.oracle.com> Changeset: 41c6f1e54d42 Author: andrew Date: 2015-11-13 02:43 +0000 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jaxp/rev/41c6f1e54d42 Added tag jdk7u91-b02 for changeset 6d9a19297633 ! .hgtags From gnu.andrew at redhat.com Fri Nov 13 04:46:32 2015 From: gnu.andrew at redhat.com (gnu.andrew at redhat.com) Date: Fri, 13 Nov 2015 04:46:32 +0000 Subject: hg: jdk7u/jdk7u/jaxws: Added tag jdk7u91-b02 for changeset 2230b8f8e03a Message-ID: <201511130446.tAD4kWlG019071@aojmv0008.oracle.com> Changeset: 3427b35ce5a1 Author: andrew Date: 2015-11-13 02:43 +0000 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jaxws/rev/3427b35ce5a1 Added tag jdk7u91-b02 for changeset 2230b8f8e03a ! .hgtags From gnu.andrew at redhat.com Fri Nov 13 04:46:38 2015 From: gnu.andrew at redhat.com (gnu.andrew at redhat.com) Date: Fri, 13 Nov 2015 04:46:38 +0000 Subject: hg: jdk7u/jdk7u/langtools: Added tag jdk7u91-b02 for changeset 08e99c45e470 Message-ID: <201511130446.tAD4kc8O019153@aojmv0008.oracle.com> Changeset: 057733ea4f82 Author: andrew Date: 2015-11-13 02:43 +0000 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/langtools/rev/057733ea4f82 Added tag jdk7u91-b02 for changeset 08e99c45e470 ! .hgtags From gnu.andrew at redhat.com Fri Nov 13 04:46:44 2015 From: gnu.andrew at redhat.com (gnu.andrew at redhat.com) Date: Fri, 13 Nov 2015 04:46:44 +0000 Subject: hg: jdk7u/jdk7u/hotspot: Added tag jdk7u91-b02 for changeset 2f2d431ace96 Message-ID: <201511130446.tAD4kiCf019208@aojmv0008.oracle.com> Changeset: d61a34c5c764 Author: andrew Date: 2015-11-13 02:43 +0000 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/hotspot/rev/d61a34c5c764 Added tag jdk7u91-b02 for changeset 2f2d431ace96 ! .hgtags From gnu.andrew at redhat.com Fri Nov 13 04:46:52 2015 From: gnu.andrew at redhat.com (gnu.andrew at redhat.com) Date: Fri, 13 Nov 2015 04:46:52 +0000 Subject: hg: jdk7u/jdk7u/jdk: Added tag jdk7u91-b02 for changeset c434c67b8189 Message-ID: <201511130446.tAD4kqcP019270@aojmv0008.oracle.com> Changeset: ab44843d5891 Author: andrew Date: 2015-11-13 02:43 +0000 URL: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/ab44843d5891 Added tag jdk7u91-b02 for changeset c434c67b8189 ! .hgtags From gnu.andrew at redhat.com Fri Nov 13 04:46:55 2015 From: gnu.andrew at redhat.com (Andrew Hughes) Date: Thu, 12 Nov 2015 23:46:55 -0500 (EST) Subject: Patch for JDK-8142882: rebinding of a DirectMethodHandle In-Reply-To: References: Message-ID: <348166113.7876356.1447390015579.JavaMail.zimbra@redhat.com> ----- Original Message ----- > Proposed fix for: https://bugs.openjdk.java.net/browse/JDK-8142882 > FWIW, the bug isn't visible. > http://cr.openjdk.java.net/~rasbold/8142882/webrev.00/ > > Don't pre-dispatch the receiver of a DirectMethodHandle, as it may allow a > protected method to be accessed. > > This fix is a subset of the change for JDK-8050166 > , which is already in > jdk8 and jdk9. > This looks good to me too. I've pushed the change with John and I listed as reviewers. I've also tagged the result as jdk7u91-b02 and uploaded a tarball release for this version: 4cb174c87289a020f2280570560240e38fc18529f951c72f9512a1ebc6962672 openjdk7u91-b02.tar.xz https://java.net/projects/openjdk7/downloads/download/openjdk7u91-b02.tar.xz > The change causes the an NPE to be thrown when a protected MethodHandle is > called via invoke(). > An additional backport of JDK-8016839 > is needed, if it is > desired to that a proper IllegalAccessError is thrown instead of an NPE, as > happens with jdk8 / jdk9. > This potentially seems like a good idea, but I'm wary of it causing compatibility issues. I'll look into a backport in time for the next release in January (u95?) Thanks, -- Andrew :) Senior Free Java Software Engineer Red Hat, Inc. (http://www.redhat.com) PGP Key: ed25519/35964222 (hkp://keys.gnupg.net) Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222 PGP Key: rsa4096/248BDC07 (hkp://keys.gnupg.net) Fingerprint = EC5A 1F5E C0AD 1D15 8F1F 8F91 3B96 A578 248B DC07 From gnu.andrew at redhat.com Wed Nov 18 17:08:00 2015 From: gnu.andrew at redhat.com (Andrew Hughes) Date: Wed, 18 Nov 2015 12:08:00 -0500 (EST) Subject: [PATCH] jdk7u91-b01 retro-active security patch review In-Reply-To: References: <1531261414.38378527.1446067802816.JavaMail.zimbra@redhat.com> <1159927443.38378747.1446067933510.JavaMail.zimbra@redhat.com> <1505893210.38389490.1446071942374.JavaMail.zimbra@redhat.com> Message-ID: <1709685886.11286883.1447866480202.JavaMail.zimbra@redhat.com> ----- Original Message ----- > On Wed, Oct 28, 2015 at 3:39 PM, Andrew Hughes > wrote: > > > > > > > It is, but both versions of the webrev script I have produce them. Do you > > know where I can get the latest version? > > > webrev is the most forked piece of software in history. Naturally I have > my own... But today there is a canonical one: > http://hg.openjdk.java.net/code-tools/webrev/file/3ecf0f883475/webrev.ksh > webrev tries to show diffs against some reference revision. Here it seems > to think the reference revision is "0". > Just to follow up (been caught up with 6): I tried generating them using the latest version from that tree and still saw the same problem. Even explicitly specifying a comparison revision of jdk7u85 didn't seem to help. The patch is right, so I'm not sure where it is going crazy. -- Andrew :) Senior Free Java Software Engineer Red Hat, Inc. (http://www.redhat.com) PGP Key: ed25519/35964222 (hkp://keys.gnupg.net) Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222 PGP Key: rsa4096/248BDC07 (hkp://keys.gnupg.net) Fingerprint = EC5A 1F5E C0AD 1D15 8F1F 8F91 3B96 A578 248B DC07 From martinrb at google.com Wed Nov 18 22:54:21 2015 From: martinrb at google.com (Martin Buchholz) Date: Wed, 18 Nov 2015 14:54:21 -0800 Subject: [PATCH] jdk7u91-b01 retro-active security patch review In-Reply-To: <1709685886.11286883.1447866480202.JavaMail.zimbra@redhat.com> References: <1531261414.38378527.1446067802816.JavaMail.zimbra@redhat.com> <1159927443.38378747.1446067933510.JavaMail.zimbra@redhat.com> <1505893210.38389490.1446071942374.JavaMail.zimbra@redhat.com> <1709685886.11286883.1447866480202.JavaMail.zimbra@redhat.com> Message-ID: Unanswered patch on webrev-dev looks related: http://mail.openjdk.java.net/pipermail/webrev-dev/2015-November/000134.html My own old copy of webrev is working for me, so I dare not touch it! --- Thanks for your work on jdk7u91 - we are happily using it without problems! On Wed, Nov 18, 2015 at 9:08 AM, Andrew Hughes wrote: > > > ----- Original Message ----- > > On Wed, Oct 28, 2015 at 3:39 PM, Andrew Hughes > > wrote: > > > > > > > > > > > It is, but both versions of the webrev script I have produce them. Do > you > > > know where I can get the latest version? > > > > > > webrev is the most forked piece of software in history. Naturally I have > > my own... But today there is a canonical one: > > > http://hg.openjdk.java.net/code-tools/webrev/file/3ecf0f883475/webrev.ksh > > webrev tries to show diffs against some reference revision. Here it > seems > > to think the reference revision is "0". > > > > Just to follow up (been caught up with 6): > > I tried generating them using the latest version from that tree and still > saw > the same problem. Even explicitly specifying a comparison revision of > jdk7u85 > didn't seem to help. The patch is right, so I'm not sure where it is going > crazy. > -- > Andrew :) > > Senior Free Java Software Engineer > Red Hat, Inc. (http://www.redhat.com) > > PGP Key: ed25519/35964222 (hkp://keys.gnupg.net) > Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222 > > PGP Key: rsa4096/248BDC07 (hkp://keys.gnupg.net) > Fingerprint = EC5A 1F5E C0AD 1D15 8F1F 8F91 3B96 A578 248B DC07 > > From gnu.andrew at redhat.com Thu Nov 19 00:30:58 2015 From: gnu.andrew at redhat.com (Andrew Hughes) Date: Wed, 18 Nov 2015 19:30:58 -0500 (EST) Subject: [PATCH] jdk7u91-b01 retro-active security patch review In-Reply-To: References: <1531261414.38378527.1446067802816.JavaMail.zimbra@redhat.com> <1159927443.38378747.1446067933510.JavaMail.zimbra@redhat.com> <1505893210.38389490.1446071942374.JavaMail.zimbra@redhat.com> <1709685886.11286883.1447866480202.JavaMail.zimbra@redhat.com> Message-ID: <965918709.11496082.1447893058574.JavaMail.zimbra@redhat.com> ----- Original Message ----- > Unanswered patch on webrev-dev looks related: > http://mail.openjdk.java.net/pipermail/webrev-dev/2015-November/000134.html > > My own old copy of webrev is working for me, so I dare not touch it! > > --- Yep, I found the same thing digging into the script a bit myself. The semantics of --follow have indeed changed. For index.html, the script produces hg calls like: hg log --follow --rev 114 --rev 115 --rev 116 --rev 117 --rev 118 --rev 119 --rev 120 --rev 121 --rev 122 --rev 123 --template 'rev {rev} : {desc}' .hgtags which, on both Mercurial 3.4.2 (the version I had before) and 3.6.1 (the one I just upgraded to), the --follow causes it to ignore the revisions and just print the whole history of the file. Dropping it makes it work as it should and the webrevs I just posted for 6 [0] look a lot better. It was previously used to follow files across renames, and I even had it turned on by default for that reason, but they changed the semantics in Mercurial. I think I'd rather it was right for most files and the odd history from a moved file was missing. It seems unlikely someone would alter a file and then move it in the same set of changesets anyway. If it's working for you, you must have an older version of Mercurial. It may also be that it only shows up when working with committed changesets. I suspect our case of doing a webrev for tens of committed changesets is far less common than ones created for changes still in the working tree ;) I'll see if I can resurrect that thread. I didn't even realise it had its own mailing list. Good find! > Thanks for your work on jdk7u91 - we are happily using it without problems! You're welcome. This is great to hear! :-D Thanks, -- Andrew :) Senior Free Java Software Engineer Red Hat, Inc. (http://www.redhat.com) PGP Key: ed25519/35964222 (hkp://keys.gnupg.net) Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222 PGP Key: rsa4096/248BDC07 (hkp://keys.gnupg.net) Fingerprint = EC5A 1F5E C0AD 1D15 8F1F 8F91 3B96 A578 248B DC07