[8u-dev] Request for approval: 8028780: JDK KRB5 module throws OutOfMemoryError when CCache is corrupt

[Wang Weijun]

Hi All 

This is a request to backport a jdk9 fix into jdk8u-dev. 

8028780: JDK KRB5 module throws OutOfMemoryError when CCache is corrupt

   https://bugs.openjdk.java.net/browse/JDK-8028780

The bug is about that a randomized corrupted ccache file could trigger OOME. The fix checks for invalid bits and fails gracefully.

The fix is already included in jdk9 as: 

   http://hg.openjdk.java.net/jdk9/dev/jdk/rev/076738bb967d

The review thread was 

   http://mail.openjdk.java.net/pipermail/security-dev/2013-December/009992.html

The patch for jdk8u-dev is identical to the one in jdk9.

The fix is low-risk, and isolated. new regression test added. Existing tests also run fine. 

Thanks 
Weijun