From tim.bell at sun.com Sun Feb 1 19:37:48 2009 From: tim.bell at sun.com (tim.bell at sun.com) Date: Mon, 02 Feb 2009 03:37:48 +0000 Subject: [security-dev 00537]: hg: jdk7/tl: Added tag jdk7-b45 for changeset 99846f001ca2 Message-ID: <20090202033748.6815EE6C3@hg.openjdk.java.net> Changeset: e8a2a4d18777 Author: xdono Date: 2009-01-29 13:20 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/rev/e8a2a4d18777 Added tag jdk7-b45 for changeset 99846f001ca2 ! .hgtags From tim.bell at sun.com Sun Feb 1 19:40:08 2009 From: tim.bell at sun.com (tim.bell at sun.com) Date: Mon, 02 Feb 2009 03:40:08 +0000 Subject: [security-dev 00538]: hg: jdk7/tl/corba: Added tag jdk7-b45 for changeset 68814aa5b44b Message-ID: <20090202034009.A95D6E6C8@hg.openjdk.java.net> Changeset: 1691dbfc08f8 Author: xdono Date: 2009-01-29 13:20 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/corba/rev/1691dbfc08f8 Added tag jdk7-b45 for changeset 68814aa5b44b ! .hgtags From tim.bell at sun.com Sun Feb 1 19:44:33 2009 From: tim.bell at sun.com (tim.bell at sun.com) Date: Mon, 02 Feb 2009 03:44:33 +0000 Subject: [security-dev 00539]: hg: jdk7/tl/hotspot: Added tag jdk7-b45 for changeset 945bf7540697 Message-ID: <20090202034434.F3037E6CD@hg.openjdk.java.net> Changeset: 16bb38eeda35 Author: xdono Date: 2009-01-29 13:20 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/16bb38eeda35 Added tag jdk7-b45 for changeset 945bf7540697 ! .hgtags From tim.bell at sun.com Sun Feb 1 19:48:55 2009 From: tim.bell at sun.com (tim.bell at sun.com) Date: Mon, 02 Feb 2009 03:48:55 +0000 Subject: [security-dev 00540]: hg: jdk7/tl/jaxp: Added tag jdk7-b45 for changeset 0f113667880d Message-ID: <20090202034857.11A94E6D2@hg.openjdk.java.net> Changeset: b2271877894a Author: xdono Date: 2009-01-29 13:21 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jaxp/rev/b2271877894a Added tag jdk7-b45 for changeset 0f113667880d ! .hgtags From tim.bell at sun.com Sun Feb 1 19:51:18 2009 From: tim.bell at sun.com (tim.bell at sun.com) Date: Mon, 02 Feb 2009 03:51:18 +0000 Subject: [security-dev 00541]: hg: jdk7/tl/jaxws: Added tag jdk7-b45 for changeset dea7753d7139 Message-ID: <20090202035120.1E3FEE6D7@hg.openjdk.java.net> Changeset: af4a3eeb7812 Author: xdono Date: 2009-01-29 13:21 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jaxws/rev/af4a3eeb7812 Added tag jdk7-b45 for changeset dea7753d7139 ! .hgtags From tim.bell at sun.com Sun Feb 1 19:53:47 2009 From: tim.bell at sun.com (tim.bell at sun.com) Date: Mon, 02 Feb 2009 03:53:47 +0000 Subject: [security-dev 00542]: hg: jdk7/tl/jdk: 3 new changesets Message-ID: <20090202035422.799FBE6DC@hg.openjdk.java.net> Changeset: 997c6403bf2e Author: xdono Date: 2009-01-29 13:21 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/997c6403bf2e Added tag jdk7-b45 for changeset 527b426497a2 ! .hgtags Changeset: 2113813eda62 Author: tbell Date: 2009-01-29 21:46 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/2113813eda62 Merge Changeset: f9cf49b7b248 Author: tbell Date: 2009-01-30 23:27 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/f9cf49b7b248 Merge From tim.bell at sun.com Sun Feb 1 20:00:28 2009 From: tim.bell at sun.com (tim.bell at sun.com) Date: Mon, 02 Feb 2009 04:00:28 +0000 Subject: [security-dev 00543]: hg: jdk7/tl/langtools: 3 new changesets Message-ID: <20090202040032.CC5A3E6E1@hg.openjdk.java.net> Changeset: d957ceba29f9 Author: xdono Date: 2009-01-29 13:21 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/langtools/rev/d957ceba29f9 Added tag jdk7-b45 for changeset 30db5e0aaf83 ! .hgtags Changeset: be546a6c08e3 Author: tbell Date: 2009-01-29 21:48 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/langtools/rev/be546a6c08e3 Merge Changeset: 49281ea88125 Author: tbell Date: 2009-01-30 23:28 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/langtools/rev/49281ea88125 Merge From jean-christophe.collet at sun.com Mon Feb 2 07:58:01 2009 From: jean-christophe.collet at sun.com (jean-christophe.collet at sun.com) Date: Mon, 02 Feb 2009 15:58:01 +0000 Subject: [security-dev 00544]: hg: jdk7/tl/jdk: 6791927: Wrong Locale in HttpCookie::expiryDate2DeltaSeconds Message-ID: <20090202155813.E597312696@hg.openjdk.java.net> Changeset: 6c5d04d1eff4 Author: jccollet Date: 2009-02-02 16:50 +0100 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/6c5d04d1eff4 6791927: Wrong Locale in HttpCookie::expiryDate2DeltaSeconds Summary: Force Locale.US when parsing the cookie expiration date. Reviewed-by: chegar ! src/share/classes/java/net/HttpCookie.java + test/java/net/CookieHandler/B6791927.java From weijun.wang at sun.com Mon Feb 2 17:43:22 2009 From: weijun.wang at sun.com (weijun.wang at sun.com) Date: Tue, 03 Feb 2009 01:43:22 +0000 Subject: [security-dev 00545]: hg: jdk7/tl/jdk: 2 new changesets Message-ID: <20090203014346.3710F126AF@hg.openjdk.java.net> Changeset: dbb82636df41 Author: weijun Date: 2009-02-03 09:38 +0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/dbb82636df41 6552334: Enable DNS in Kerberos by default Reviewed-by: valeriep ! src/share/classes/sun/security/krb5/Config.java ! src/share/classes/sun/security/krb5/KrbServiceLocator.java ! test/sun/security/krb5/DnsFallback.java Changeset: ca32af4c0ea5 Author: weijun Date: 2009-02-03 09:38 +0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/ca32af4c0ea5 6785456: Read Kerberos setting from Windows environment variables Reviewed-by: valeriep ! src/share/classes/sun/security/krb5/Config.java From joe.darcy at sun.com Tue Feb 3 16:34:41 2009 From: joe.darcy at sun.com (joe.darcy at sun.com) Date: Wed, 04 Feb 2009 00:34:41 +0000 Subject: [security-dev 00546]: hg: jdk7/tl/jdk: 6548433: (enum spec) java.lang.Enum docs should explain about values() and valueOf(String) Message-ID: <20090204003456.E60F61270A@hg.openjdk.java.net> Changeset: 050da121df16 Author: darcy Date: 2009-02-03 16:29 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/050da121df16 6548433: (enum spec) java.lang.Enum docs should explain about values() and valueOf(String) Reviewed-by: martin ! src/share/classes/java/lang/Enum.java From Weijun.Wang at Sun.COM Wed Feb 4 01:11:07 2009 From: Weijun.Wang at Sun.COM (Weijun Wang) Date: Wed, 04 Feb 2009 17:11:07 +0800 Subject: [security-dev 00547]: Should X509Factory.engineCenerateCertificates() use is.avaiable()? Message-ID: <49895BAB.7010707@sun.com> Hi All I'm implementing new keytool commands. The following command throw an exception: $ cat req | keytool -gencert | keytool -printcert Exception in thread "main" java.lang.Exception: Empty input at sun.security.tools.KeyTool.printCertFromStream(KeyTool.java:1898) at sun.security.tools.KeyTool.doPrintCert(KeyTool.java:1998) at sun.security.tools.KeyTool.doCommands(KeyTool.java:946) at sun.security.tools.KeyTool.run(KeyTool.java:192) at sun.security.tools.KeyTool.main(KeyTool.java:186) Here keytool -printcert uses X509Factory.engineGenerateCertificates(is) to read certificates from an input stream. Unfortunately, it uses is.available() to check if there are more bytes coming. Since keytool -gencert runs slower, the pipe is empty when keytool -printcert tries to peek into it. Is this the intended behavior? Shall we block instead? Thanks Max From xuelei.fan at sun.com Wed Feb 4 03:19:41 2009 From: xuelei.fan at sun.com (xuelei.fan at sun.com) Date: Wed, 04 Feb 2009 11:19:41 +0000 Subject: [security-dev 00548]: hg: jdk7/tl/jdk: 6782783: regtest HttpsURLConnection/B6216082.java throws ClosedByInterruptException Message-ID: <20090204111952.F33C712732@hg.openjdk.java.net> Changeset: a96a1f0edeeb Author: xuelei Date: 2009-02-04 19:10 +0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/a96a1f0edeeb 6782783: regtest HttpsURLConnection/B6216082.java throws ClosedByInterruptException Summary: make the test robust Reviewed-by: weijun ! test/sun/security/ssl/sun/net/www/protocol/https/HttpsURLConnection/B6216082.java From jean-christophe.collet at sun.com Wed Feb 4 05:21:49 2009 From: jean-christophe.collet at sun.com (jean-christophe.collet at sun.com) Date: Wed, 04 Feb 2009 13:21:49 +0000 Subject: [security-dev 00549]: hg: jdk7/tl/jdk: 6585546: Please update API doc for java.net.CookieManager Message-ID: <20090204132201.5ACE91273C@hg.openjdk.java.net> Changeset: 61ee91f965ac Author: jccollet Date: 2009-02-04 14:15 +0100 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/61ee91f965ac 6585546: Please update API doc for java.net.CookieManager Summary: Trivial doc updates Reviewed-by: chegar ! src/share/classes/java/net/CookieManager.java From lars at primekey.se Thu Feb 5 04:40:14 2009 From: lars at primekey.se (=?ISO-8859-1?Q?Lars_Silv=E9n?=) Date: Thu, 05 Feb 2009 13:40:14 +0100 Subject: [security-dev 00550]: Re: ECC pkcs#11 bug In-Reply-To: <48DBF8A3.8090009@primekey.se> References: <48C93383.2070007@primekey.se> <48C9AD30.1090001@sun.com> <48CA426F.7010306@primekey.se> <48CA8EB7.5030108@sun.com> <48CE8471.4070601@primekey.se> <48CE882D.8@sun.com> <48D24372.6070607@primekey.se> <48DAEBA0.7070404@sun.com> <48DBF8A3.8090009@primekey.se> Message-ID: <498ADE2E.5020805@primekey.se> Brad, Any news about the p11 ECC bug. When will it be fixed? Best Regards, Lars Lars Silv?n wrote: > Hello, > > Thank you for taking care of this. > We want this fix in both JDK 6 and 7. I like to know the release date for the > fix in both versions if possible. > > Lars > > Brad Wetmore wrote: >> >> Lars Silv?n wrote: >>> Hi Brad, >>> >>> Do you have everything you need to fix the bug. >> I believe so. I haven't started looking at it closely yet, I'm still >> mopping up several fires. Unfortunately, I'm the chef, busboy, and >> bottle washer for several projects here. >> >>> Or is there anything more I could do to help. >>> >>> I have now also tested the nCipher HSM. To get their p11 working my >>> patch had to be applied. >>> >>> Do you have any idea when we the fix could be released? >> Are you looking for JDK7, or 6? >> >> Brad >> >>> Best Regards >>> >>> Brad Wetmore wrote: >>>> Lars Silv?n wrote: >>>>> Hi Brad, >>>>> >>>>> I have written a simple application that illustrates the problem: >>>>> http://bunny.primekey.se/~lars/sunP11Bug/src/test/Main.java >>>>> >>>>> But you need a p11 module with ECC capability to run it. Do you have >>>>> one? >>>> Yes. >>>> >>>>> If not I could investigate if one of our HSM vendors could send you >>>>> one. >>>>> Also to verify that the public key actually is usable a JCA provider >>>>> with ECC is needed. >>>> I'm going to be working on adding ECC to the JCE provider for JDK 7. >>>> >>>> Thanks for the case. >>>> >>>> Brad >>>> >>>> >>>> But for that you could use BouncyCastle. >>>>> Start running the application without parameters and then you get a >>>>> description of needed parameters. >>>>> >>>>> Lars >>>>> >>>>> >>>>> Brad Wetmore wrote: >>>>>> Great, thanks for doing so. >>>>>> >>>>>> I'll be working on this fairly soon, so I'll get a bug filed. Do you >>>>>> have a standalone test case for this already? See step 3 of the >>>>>> contribute page. If you do but you don't have it in jtreg format, >>>>>> I can >>>>>> get it into the jtreg format. >>>>>> >>>>>> Brad >>>>>> >>>>>> >>>>>> Lars Silv?n wrote: >>>>>>> Here is my SCA! >>>>>>> >>>>>>> //Lars >>>>>>> >>>>>>> >>>>>>> Brad Wetmore wrote: >>>>>>>> Hi Lars, >>>>>>>> >>>>>>>>> I have created a patch that is fixing the problem: >>>>>>>> This is Brad Wetmore, I am the Security group Moderator, and also >>>>>>>> the >>>>>>>> person who will be handling this when I get back to working on the >>>>>>>> Java >>>>>>>> ECC implementation. >>>>>>>> >>>>>>>> Unfortunately, I can't take your source contribution yet without a >>>>>>>> signed copy of the Sun Contribution Agreement in place. This is >>>>>>>> done >>>>>>>> for your protection as well as the Sun's and the OpenJDK >>>>>>>> community's. >>>>>>>> >>>>>>>> Please see the following link for more information: >>>>>>>> >>>>>>>> http://openjdk.java.net/contribute/ >>>>>>>> >>>>>>>> The Signatories of the SCA are eligible to donate code to all >>>>>>>> products >>>>>>>> and projects owned or managed by Sun: signing it once means you can >>>>>>>> contribute code to any Sun-sponsored open source project. >>>>>>>> >>>>>>>> If you have recently signed it and it hasn't yet appeared in our >>>>>>>> database yet, just let me know. >>>>>>>> >>>>>>>> Discussions of the problem is fine, it's just the source that we >>>>>>>> can't >>>>>>>> take at this point. >>>>>>>> >>>>>>>> Thanks, >>>>>>>> >>>>>>>> Brad >>>>>>> ------------------------------------------------------------------------ >>>>>>> >>>>>>> >>>>>>> > -------------- next part -------------- A non-text attachment was scrubbed... Name: lars.vcf Type: text/x-vcard Size: 322 bytes Desc: not available Url : http://mail.openjdk.java.net/pipermail/security-dev/attachments/20090205/fe700bbb/lars.vcf From Bradford.Wetmore at Sun.COM Thu Feb 5 11:34:49 2009 From: Bradford.Wetmore at Sun.COM (Brad Wetmore) Date: Thu, 05 Feb 2009 11:34:49 -0800 Subject: [security-dev 00551]: Re: ECC pkcs#11 bug In-Reply-To: <498ADE2E.5020805@primekey.se> References: <48C93383.2070007@primekey.se> <48C9AD30.1090001@sun.com> <48CA426F.7010306@primekey.se> <48CA8EB7.5030108@sun.com> <48CE8471.4070601@primekey.se> <48CE882D.8@sun.com> <48D24372.6070607@primekey.se> <48DAEBA0.7070404@sun.com> <48DBF8A3.8090009@primekey.se> <498ADE2E.5020805@primekey.se> Message-ID: <498B3F59.7020203@sun.com> Hi Lars, I was hoping that Vincent Ryan had already contacted you about this. I got redirected from ECC to work on the OpenJDK Bugzilla instance, which is rolling out very soon. Vincent took over the ECC work late last year along with your submission. The short answer is, between a lengthy customer escalation and bugzilla, I've been so heads down for the last 4 months, I'm not sure how far he's gotten. Vinnie, can you provide more info? Brad Lars Silv?n wrote: > Brad, > > Any news about the p11 ECC bug. > > When will it be fixed? > > > Best Regards, > Lars > > > > Lars Silv?n wrote: >> Hello, >> >> Thank you for taking care of this. >> We want this fix in both JDK 6 and 7. I like to know the release date for the >> fix in both versions if possible. >> >> Lars >> >> Brad Wetmore wrote: >>> Lars Silv?n wrote: >>>> Hi Brad, >>>> >>>> Do you have everything you need to fix the bug. >>> I believe so. I haven't started looking at it closely yet, I'm still >>> mopping up several fires. Unfortunately, I'm the chef, busboy, and >>> bottle washer for several projects here. >>> >>>> Or is there anything more I could do to help. >>>> >>>> I have now also tested the nCipher HSM. To get their p11 working my >>>> patch had to be applied. >>>> >>>> Do you have any idea when we the fix could be released? >>> Are you looking for JDK7, or 6? >>> >>> Brad >>> >>>> Best Regards >>>> >>>> Brad Wetmore wrote: >>>>> Lars Silv?n wrote: >>>>>> Hi Brad, >>>>>> >>>>>> I have written a simple application that illustrates the problem: >>>>>> http://bunny.primekey.se/~lars/sunP11Bug/src/test/Main.java >>>>>> >>>>>> But you need a p11 module with ECC capability to run it. Do you have >>>>>> one? >>>>> Yes. >>>>> >>>>>> If not I could investigate if one of our HSM vendors could send you >>>>>> one. >>>>>> Also to verify that the public key actually is usable a JCA provider >>>>>> with ECC is needed. >>>>> I'm going to be working on adding ECC to the JCE provider for JDK 7. >>>>> >>>>> Thanks for the case. >>>>> >>>>> Brad >>>>> >>>>> >>>>> But for that you could use BouncyCastle. >>>>>> Start running the application without parameters and then you get a >>>>>> description of needed parameters. >>>>>> >>>>>> Lars >>>>>> >>>>>> >>>>>> Brad Wetmore wrote: >>>>>>> Great, thanks for doing so. >>>>>>> >>>>>>> I'll be working on this fairly soon, so I'll get a bug filed. Do you >>>>>>> have a standalone test case for this already? See step 3 of the >>>>>>> contribute page. If you do but you don't have it in jtreg format, >>>>>>> I can >>>>>>> get it into the jtreg format. >>>>>>> >>>>>>> Brad >>>>>>> >>>>>>> >>>>>>> Lars Silv?n wrote: >>>>>>>> Here is my SCA! >>>>>>>> >>>>>>>> //Lars >>>>>>>> >>>>>>>> >>>>>>>> Brad Wetmore wrote: >>>>>>>>> Hi Lars, >>>>>>>>> >>>>>>>>>> I have created a patch that is fixing the problem: >>>>>>>>> This is Brad Wetmore, I am the Security group Moderator, and also >>>>>>>>> the >>>>>>>>> person who will be handling this when I get back to working on the >>>>>>>>> Java >>>>>>>>> ECC implementation. >>>>>>>>> >>>>>>>>> Unfortunately, I can't take your source contribution yet without a >>>>>>>>> signed copy of the Sun Contribution Agreement in place. This is >>>>>>>>> done >>>>>>>>> for your protection as well as the Sun's and the OpenJDK >>>>>>>>> community's. >>>>>>>>> >>>>>>>>> Please see the following link for more information: >>>>>>>>> >>>>>>>>> http://openjdk.java.net/contribute/ >>>>>>>>> >>>>>>>>> The Signatories of the SCA are eligible to donate code to all >>>>>>>>> products >>>>>>>>> and projects owned or managed by Sun: signing it once means you can >>>>>>>>> contribute code to any Sun-sponsored open source project. >>>>>>>>> >>>>>>>>> If you have recently signed it and it hasn't yet appeared in our >>>>>>>>> database yet, just let me know. >>>>>>>>> >>>>>>>>> Discussions of the problem is fine, it's just the source that we >>>>>>>>> can't >>>>>>>>> take at this point. >>>>>>>>> >>>>>>>>> Thanks, >>>>>>>>> >>>>>>>>> Brad >>>>>>>> ------------------------------------------------------------------------ >>>>>>>> >>>>>>>> >>>>>>>> From jonathan.gibbons at sun.com Fri Feb 6 10:26:38 2009 From: jonathan.gibbons at sun.com (jonathan.gibbons at sun.com) Date: Fri, 06 Feb 2009 18:26:38 +0000 Subject: [security-dev 00552]: hg: jdk7/tl/langtools: 6595666: fix -Werror Message-ID: <20090206182641.6878D12C81@hg.openjdk.java.net> Changeset: 9d541fd2916b Author: jjg Date: 2009-02-06 10:23 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/langtools/rev/9d541fd2916b 6595666: fix -Werror Reviewed-by: mcimadamore ! src/share/classes/com/sun/tools/javac/main/JavaCompiler.java ! src/share/classes/com/sun/tools/javac/main/Main.java ! src/share/classes/com/sun/tools/javac/main/RecognizedOptions.java ! src/share/classes/com/sun/tools/javac/resources/compiler.properties ! src/share/classes/com/sun/tools/javac/resources/javac.properties ! test/tools/javac/6304921/T6304921.out ! test/tools/javac/6758789/T6758789b.out ! test/tools/javac/T6241723.out + test/tools/javac/T6595666.java ! test/tools/javac/depDocComment/DeprecatedDocComment.out From joe.darcy at sun.com Fri Feb 6 12:54:27 2009 From: joe.darcy at sun.com (joe.darcy at sun.com) Date: Fri, 06 Feb 2009 20:54:27 +0000 Subject: [security-dev 00553]: hg: jdk7/tl/langtools: 6794071: Provide exception superclass for UnknownFooExceptions Message-ID: <20090206205429.889C0D06B@hg.openjdk.java.net> Changeset: 58fcba61a77d Author: darcy Date: 2009-02-06 12:49 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/langtools/rev/58fcba61a77d 6794071: Provide exception superclass for UnknownFooExceptions Reviewed-by: jjg + src/share/classes/javax/lang/model/UnknownEntityException.java ! src/share/classes/javax/lang/model/element/UnknownAnnotationValueException.java ! src/share/classes/javax/lang/model/element/UnknownElementException.java ! src/share/classes/javax/lang/model/type/UnknownTypeException.java + test/tools/javac/processing/model/TestExceptions.java From tim.bell at sun.com Fri Feb 6 21:31:03 2009 From: tim.bell at sun.com (tim.bell at sun.com) Date: Sat, 07 Feb 2009 05:31:03 +0000 Subject: [security-dev 00554]: hg: jdk7/tl: Added tag jdk7-b46 for changeset e8a2a4d18777 Message-ID: <20090207053104.02C30D0FB@hg.openjdk.java.net> Changeset: d7744e86dedc Author: xdono Date: 2009-02-05 16:07 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/rev/d7744e86dedc Added tag jdk7-b46 for changeset e8a2a4d18777 ! .hgtags From tim.bell at sun.com Fri Feb 6 21:34:53 2009 From: tim.bell at sun.com (tim.bell at sun.com) Date: Sat, 07 Feb 2009 05:34:53 +0000 Subject: [security-dev 00555]: hg: jdk7/tl/corba: Added tag jdk7-b46 for changeset 1691dbfc08f8 Message-ID: <20090207053454.2098CD104@hg.openjdk.java.net> Changeset: 167ad0164301 Author: xdono Date: 2009-02-05 16:07 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/corba/rev/167ad0164301 Added tag jdk7-b46 for changeset 1691dbfc08f8 ! .hgtags From tim.bell at sun.com Fri Feb 6 21:40:40 2009 From: tim.bell at sun.com (tim.bell at sun.com) Date: Sat, 07 Feb 2009 05:40:40 +0000 Subject: [security-dev 00556]: hg: jdk7/tl/hotspot: Added tag jdk7-b46 for changeset 16bb38eeda35 Message-ID: <20090207054043.28DABD109@hg.openjdk.java.net> Changeset: ba02d80fc550 Author: xdono Date: 2009-02-05 16:07 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/ba02d80fc550 Added tag jdk7-b46 for changeset 16bb38eeda35 ! .hgtags From tim.bell at sun.com Fri Feb 6 21:47:55 2009 From: tim.bell at sun.com (tim.bell at sun.com) Date: Sat, 07 Feb 2009 05:47:55 +0000 Subject: [security-dev 00557]: hg: jdk7/tl/jaxp: Added tag jdk7-b46 for changeset b2271877894a Message-ID: <20090207054757.31F9FD10F@hg.openjdk.java.net> Changeset: d711ad1954b2 Author: xdono Date: 2009-02-05 16:07 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jaxp/rev/d711ad1954b2 Added tag jdk7-b46 for changeset b2271877894a ! .hgtags From tim.bell at sun.com Fri Feb 6 21:52:06 2009 From: tim.bell at sun.com (tim.bell at sun.com) Date: Sat, 07 Feb 2009 05:52:06 +0000 Subject: [security-dev 00558]: hg: jdk7/tl/jaxws: Added tag jdk7-b46 for changeset af4a3eeb7812 Message-ID: <20090207055207.DD786D114@hg.openjdk.java.net> Changeset: 223011570edb Author: xdono Date: 2009-02-05 16:07 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jaxws/rev/223011570edb Added tag jdk7-b46 for changeset af4a3eeb7812 ! .hgtags From tim.bell at sun.com Fri Feb 6 21:57:59 2009 From: tim.bell at sun.com (tim.bell at sun.com) Date: Sat, 07 Feb 2009 05:57:59 +0000 Subject: [security-dev 00559]: hg: jdk7/tl/jdk: 31 new changesets Message-ID: <20090207060405.84E91D119@hg.openjdk.java.net> Changeset: 443db0030323 Author: peytoia Date: 2008-10-02 15:54 +0900 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/443db0030323 6645263: (cal) Calendar throw java.lang.IllegalArgumentException: WEEK_OF_MONTH Reviewed-by: okutsu ! src/share/classes/java/util/Calendar.java + test/java/util/Calendar/Bug6645263.java Changeset: 7f4488e9ba24 Author: peytoia Date: 2008-10-03 15:54 +0900 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/7f4488e9ba24 6683975: [fmt-da] Regression: Java 6 returns English DateFormatPatterns for Thai locale Reviewed-by: okutsu ! src/share/classes/sun/text/resources/FormatData_th.java + test/java/text/Format/DateFormat/Bug6683975.java Changeset: f71879c0999f Author: naoto Date: 2008-10-06 17:16 -0700 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/f71879c0999f 6706382: jdk/test/java/util/Locale/data/deflocale.sol10 has incorrect legal notice Reviewed-by: okutsu ! test/java/util/Locale/data/deflocale.sol10 Changeset: a9be64f0ad3e Author: peytoia Date: 2008-10-07 18:25 +0900 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/a9be64f0ad3e 6756569: (tz) Support tzdata2008g Reviewed-by: okutsu ! make/sun/javazic/tzdata/VERSION ! make/sun/javazic/tzdata/africa ! make/sun/javazic/tzdata/asia ! make/sun/javazic/tzdata/europe ! make/sun/javazic/tzdata/southamerica Changeset: 7560426ed283 Author: rkennke Date: 2008-10-15 15:55 +0200 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/7560426ed283 6759311: RepaintManager casts Tookit to SunToolkit without instanceof check Summary: Check type of Toolkit before casting. Reviewed-by: alexp ! src/share/classes/javax/swing/RepaintManager.java Changeset: 244f62312fec Author: peytoia Date: 2008-10-16 14:00 +0900 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/244f62312fec 6758988: (tz) Support tzdata2008h Reviewed-by: okutsu ! make/sun/javazic/tzdata/VERSION ! make/sun/javazic/tzdata/africa ! make/sun/javazic/tzdata/asia ! make/sun/javazic/tzdata/southamerica ! make/sun/javazic/tzdata/zone.tab Changeset: 8ea49fa4c2f7 Author: peytoia Date: 2008-10-17 13:34 +0900 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/8ea49fa4c2f7 6759521: Move Bidi test programs from closed to open. Reviewed-by: okutsu + test/java/text/Bidi/BidiBug.java + test/java/text/Bidi/BidiEmbeddingTest.java + test/java/text/Bidi/BidiSurrogateTest.java Changeset: 3bc97f84a8aa Author: lana Date: 2008-10-17 15:01 -0700 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/3bc97f84a8aa Merge - make/ASSEMBLY_EXCEPTION - make/LICENSE - make/README - make/README-builds.html - make/README.html - make/THIRD_PARTY_README - src/share/classes/java/nio/channels/package.html - src/share/classes/sun/nio/ch/OptionAdaptor.java - src/share/classes/sun/nio/ch/SocketOpts.java - src/share/classes/sun/nio/ch/SocketOptsImpl.java - src/share/classes/sun/nio/ch/exceptions - src/share/javavm/include/opcodes.h - src/share/javavm/include/opcodes.length - src/share/javavm/include/opcodes.list - src/share/javavm/include/opcodes.weight - src/share/javavm/include/opcodes.wide - src/share/javavm/include/sys_api.h - src/share/javavm/include/typedefs.h - src/solaris/classes/sun/awt/motif/MButtonPeer.java - src/solaris/classes/sun/awt/motif/MCanvasPeer.java - src/solaris/classes/sun/awt/motif/MCheckboxMenuItemPeer.java - src/solaris/classes/sun/awt/motif/MCheckboxPeer.java - src/solaris/classes/sun/awt/motif/MChoicePeer.java - src/solaris/classes/sun/awt/motif/MComponentPeer.java - src/solaris/classes/sun/awt/motif/MCustomCursor.java - src/solaris/classes/sun/awt/motif/MDataTransferer.java - src/solaris/classes/sun/awt/motif/MDialogPeer.java - src/solaris/classes/sun/awt/motif/MDragSourceContextPeer.java - src/solaris/classes/sun/awt/motif/MDropTargetContextPeer.java - src/solaris/classes/sun/awt/motif/MEmbedCanvasPeer.java - src/solaris/classes/sun/awt/motif/MEmbeddedFrame.java - src/solaris/classes/sun/awt/motif/MEmbeddedFramePeer.java - src/solaris/classes/sun/awt/motif/MFileDialogPeer.java - src/solaris/classes/sun/awt/motif/MFramePeer.java - src/solaris/classes/sun/awt/motif/MGlobalCursorManager.java - src/solaris/classes/sun/awt/motif/MInputMethod.java - src/solaris/classes/sun/awt/motif/MInputMethodControl.java - src/solaris/classes/sun/awt/motif/MInputMethodDescriptor.java - src/solaris/classes/sun/awt/motif/MLabelPeer.java - src/solaris/classes/sun/awt/motif/MListPeer.java - src/solaris/classes/sun/awt/motif/MMenuBarPeer.java - src/solaris/classes/sun/awt/motif/MMenuItemPeer.java - src/solaris/classes/sun/awt/motif/MMenuPeer.java - src/solaris/classes/sun/awt/motif/MMouseDragGestureRecognizer.java - src/solaris/classes/sun/awt/motif/MPanelPeer.java - src/solaris/classes/sun/awt/motif/MPopupMenuPeer.java - src/solaris/classes/sun/awt/motif/MRobotPeer.java - src/solaris/classes/sun/awt/motif/MScrollPanePeer.java - src/solaris/classes/sun/awt/motif/MScrollbarPeer.java - src/solaris/classes/sun/awt/motif/MTextAreaPeer.java - src/solaris/classes/sun/awt/motif/MTextFieldPeer.java - src/solaris/classes/sun/awt/motif/MWindowPeer.java - src/solaris/classes/sun/awt/motif/X11Clipboard.java - src/solaris/classes/sun/awt/motif/X11DragSourceContextPeer.java - src/solaris/classes/sun/awt/motif/X11DropTargetContextPeer.java - src/solaris/classes/sun/awt/motif/X11Selection.java - src/solaris/classes/sun/awt/motif/X11SelectionHolder.java - src/solaris/javavm/include/typedefs_md.h - src/solaris/native/sun/awt/awt_Button.c - src/solaris/native/sun/awt/awt_Canvas.c - src/solaris/native/sun/awt/awt_Checkbox.c - src/solaris/native/sun/awt/awt_Choice12.c - src/solaris/native/sun/awt/awt_Choice21.c - src/solaris/native/sun/awt/awt_Component.c - src/solaris/native/sun/awt/awt_Cursor.c - src/solaris/native/sun/awt/awt_DataTransferer.c - src/solaris/native/sun/awt/awt_DataTransferer.h - src/solaris/native/sun/awt/awt_FileDialog.c - src/solaris/native/sun/awt/awt_GlobalCursorManager.c - src/solaris/native/sun/awt/awt_KeyboardFocusManager.c - src/solaris/native/sun/awt/awt_Label.c - src/solaris/native/sun/awt/awt_List.c - src/solaris/native/sun/awt/awt_Menu.c - src/solaris/native/sun/awt/awt_Menu.h - src/solaris/native/sun/awt/awt_MenuBar.c - src/solaris/native/sun/awt/awt_MenuBar.h - src/solaris/native/sun/awt/awt_MenuComponent.c - src/solaris/native/sun/awt/awt_MenuItem.c - src/solaris/native/sun/awt/awt_PopupMenu.c - src/solaris/native/sun/awt/awt_ScrollPane.c - src/solaris/native/sun/awt/awt_Scrollbar.c - src/solaris/native/sun/awt/awt_Selection.c - src/solaris/native/sun/awt/awt_TextArea.c - src/solaris/native/sun/awt/awt_TextArea.h - src/solaris/native/sun/awt/awt_TextField.c - src/solaris/native/sun/awt/awt_TextField.h - src/solaris/native/sun/awt/awt_TopLevel.c - src/solaris/native/sun/awt/awt_XmDnD.c - src/solaris/native/sun/awt/awt_XmDnD.h - src/solaris/native/sun/awt/awt_dnd.c - src/solaris/native/sun/awt/awt_dnd.h - src/solaris/native/sun/awt/awt_dnd_ds.c - src/solaris/native/sun/awt/awt_dnd_dt.c - src/solaris/native/sun/awt/awt_motif.c - src/solaris/native/sun/awt/awt_motif12.c - src/solaris/native/sun/awt/awt_motif21.c - src/solaris/native/sun/awt/awt_xembed.c - src/solaris/native/sun/awt/canvas.c - src/solaris/native/sun/awt/cursor.c - src/windows/javavm/include/typedefs_md.h Changeset: f67599e0ee33 Author: peytoia Date: 2008-10-30 13:12 +0900 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/f67599e0ee33 6764308: (tz) Support tzdata2008i Reviewed-by: okutsu ! make/sun/javazic/tzdata/VERSION ! make/sun/javazic/tzdata/southamerica ! make/sun/javazic/tzdata/zone.tab ! src/share/classes/sun/util/resources/TimeZoneNames.java ! src/share/classes/sun/util/resources/TimeZoneNames_de.java ! src/share/classes/sun/util/resources/TimeZoneNames_es.java ! src/share/classes/sun/util/resources/TimeZoneNames_fr.java ! src/share/classes/sun/util/resources/TimeZoneNames_it.java ! src/share/classes/sun/util/resources/TimeZoneNames_ja.java ! src/share/classes/sun/util/resources/TimeZoneNames_ko.java ! src/share/classes/sun/util/resources/TimeZoneNames_sv.java ! src/share/classes/sun/util/resources/TimeZoneNames_zh_CN.java ! src/share/classes/sun/util/resources/TimeZoneNames_zh_TW.java Changeset: f8461a705330 Author: rupashka Date: 2008-11-17 17:36 +0300 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/f8461a705330 6771030: Code improvement and warnings removing from the com.sun.java.swing.plaf.gtk package Summary: Removed unnecessary castings and other warnings Reviewed-by: malenkov ! src/share/classes/com/sun/java/swing/plaf/gtk/GTKColorChooserPanel.java ! src/share/classes/com/sun/java/swing/plaf/gtk/GTKEngine.java ! src/share/classes/com/sun/java/swing/plaf/gtk/GTKFileChooserUI.java ! src/share/classes/com/sun/java/swing/plaf/gtk/GTKPainter.java ! src/share/classes/com/sun/java/swing/plaf/gtk/Metacity.java Changeset: 6c5781fc3818 Author: peytoia Date: 2008-11-18 13:58 +0900 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/6c5781fc3818 6769873: Regression test java/text/Date/DateFormat/Bug6683975.java started failing after DST ended. Reviewed-by: okutsu ! test/java/text/Format/DateFormat/Bug6683975.java Changeset: bdfe33408ed8 Author: peytoia Date: 2008-11-18 15:59 +0900 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/bdfe33408ed8 6772646: Regression test java/text/Date/DateFormat/Bug4823811.java started failing after DST ended. Reviewed-by: okutsu ! test/java/text/Format/DateFormat/Bug4823811.java Changeset: 63e684c4ed2f Author: rupashka Date: 2008-11-25 16:42 +0300 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/63e684c4ed2f 6698013: JFileChooser can no longer navigate non-local file systems. Summary: ShellFolder is used only if possible Reviewed-by: peterz ! src/share/classes/javax/swing/plaf/basic/BasicFileChooserUI.java ! src/share/classes/sun/swing/FilePane.java + test/javax/swing/JFileChooser/6698013/bug6698013.html + test/javax/swing/JFileChooser/6698013/bug6698013.java Changeset: be2b6b030a79 Author: rupashka Date: 2008-11-26 19:08 +0300 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/be2b6b030a79 6560349: REGRESSION :folder having ".lnk" in the name can not be opened by 5.0 and later versions Reviewed-by: alexp ! src/share/classes/javax/swing/plaf/basic/BasicFileChooserUI.java Changeset: 8b842701af50 Author: rupashka Date: 2008-11-26 19:38 +0300 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/8b842701af50 6776856: Code with useShellFolder field shuold be simplify Reviewed-by: peterz ! src/share/classes/com/sun/java/swing/plaf/windows/WindowsFileChooserUI.java ! src/share/classes/javax/swing/plaf/metal/MetalFileChooserUI.java ! src/share/classes/sun/swing/FilePane.java ! src/share/classes/sun/swing/plaf/synth/SynthFileChooserUIImpl.java Changeset: 5784f5dfe3ac Author: rupashka Date: 2008-11-27 17:55 +0300 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/5784f5dfe3ac 6776095: Code improvement and warnings removing from swing packages Reviewed-by: malenkov Contributed-by: Florian Brunner ! src/share/classes/com/sun/java/swing/plaf/gtk/GTKFileChooserUI.java ! src/share/classes/com/sun/java/swing/plaf/gtk/GTKLookAndFeel.java ! src/share/classes/javax/swing/ImageIcon.java ! src/share/classes/javax/swing/ProgressMonitor.java ! src/share/classes/javax/swing/SwingWorker.java ! src/share/classes/javax/swing/colorchooser/DefaultColorSelectionModel.java ! src/share/classes/javax/swing/table/DefaultTableColumnModel.java ! src/share/classes/javax/swing/tree/DefaultMutableTreeNode.java ! src/share/classes/javax/swing/undo/CompoundEdit.java Changeset: 50a9a4db3500 Author: malenkov Date: 2008-12-22 17:42 +0300 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/50a9a4db3500 4864117: RFE: Make XMLDecoder API more reusable Reviewed-by: peterz, loneid - src/share/classes/com/sun/beans/ObjectHandler.java + src/share/classes/com/sun/beans/decoder/AccessorElementHandler.java + src/share/classes/com/sun/beans/decoder/ArrayElementHandler.java + src/share/classes/com/sun/beans/decoder/BooleanElementHandler.java + src/share/classes/com/sun/beans/decoder/ByteElementHandler.java + src/share/classes/com/sun/beans/decoder/CharElementHandler.java + src/share/classes/com/sun/beans/decoder/ClassElementHandler.java + src/share/classes/com/sun/beans/decoder/DocumentHandler.java + src/share/classes/com/sun/beans/decoder/DoubleElementHandler.java + src/share/classes/com/sun/beans/decoder/ElementHandler.java + src/share/classes/com/sun/beans/decoder/FalseElementHandler.java + src/share/classes/com/sun/beans/decoder/FieldElementHandler.java + src/share/classes/com/sun/beans/decoder/FloatElementHandler.java + src/share/classes/com/sun/beans/decoder/IntElementHandler.java + src/share/classes/com/sun/beans/decoder/JavaElementHandler.java + src/share/classes/com/sun/beans/decoder/LongElementHandler.java + src/share/classes/com/sun/beans/decoder/MethodElementHandler.java + src/share/classes/com/sun/beans/decoder/NewElementHandler.java + src/share/classes/com/sun/beans/decoder/NullElementHandler.java + src/share/classes/com/sun/beans/decoder/ObjectElementHandler.java + src/share/classes/com/sun/beans/decoder/PropertyElementHandler.java + src/share/classes/com/sun/beans/decoder/ShortElementHandler.java + src/share/classes/com/sun/beans/decoder/StringElementHandler.java + src/share/classes/com/sun/beans/decoder/TrueElementHandler.java + src/share/classes/com/sun/beans/decoder/ValueObject.java + src/share/classes/com/sun/beans/decoder/ValueObjectImpl.java + src/share/classes/com/sun/beans/decoder/VarElementHandler.java + src/share/classes/com/sun/beans/decoder/VoidElementHandler.java + src/share/classes/com/sun/beans/finder/AbstractFinder.java ! src/share/classes/com/sun/beans/finder/ClassFinder.java + src/share/classes/com/sun/beans/finder/ConstructorFinder.java + src/share/classes/com/sun/beans/finder/FieldFinder.java + src/share/classes/com/sun/beans/finder/MethodFinder.java ! src/share/classes/com/sun/beans/finder/PrimitiveTypeMap.java + src/share/classes/com/sun/beans/finder/PrimitiveWrapperMap.java + src/share/classes/com/sun/beans/finder/Signature.java ! src/share/classes/java/beans/MetaData.java ! src/share/classes/java/beans/ReflectionUtils.java ! src/share/classes/java/beans/XMLDecoder.java ! src/share/classes/javax/swing/plaf/synth/SynthParser.java + test/java/beans/XMLDecoder/Test4864117.java ! test/java/beans/XMLDecoder/Test6341798.java + test/java/beans/XMLDecoder/spec/AbstractTest.java + test/java/beans/XMLDecoder/spec/TestArray.java + test/java/beans/XMLDecoder/spec/TestBoolean.java + test/java/beans/XMLDecoder/spec/TestByte.java + test/java/beans/XMLDecoder/spec/TestChar.java + test/java/beans/XMLDecoder/spec/TestClass.java + test/java/beans/XMLDecoder/spec/TestDouble.java + test/java/beans/XMLDecoder/spec/TestFalse.java + test/java/beans/XMLDecoder/spec/TestField.java + test/java/beans/XMLDecoder/spec/TestFloat.java + test/java/beans/XMLDecoder/spec/TestInt.java + test/java/beans/XMLDecoder/spec/TestJava.java + test/java/beans/XMLDecoder/spec/TestLong.java + test/java/beans/XMLDecoder/spec/TestMethod.java + test/java/beans/XMLDecoder/spec/TestNew.java + test/java/beans/XMLDecoder/spec/TestNull.java + test/java/beans/XMLDecoder/spec/TestObject.java + test/java/beans/XMLDecoder/spec/TestProperty.java + test/java/beans/XMLDecoder/spec/TestShort.java + test/java/beans/XMLDecoder/spec/TestString.java + test/java/beans/XMLDecoder/spec/TestTrue.java + test/java/beans/XMLDecoder/spec/TestVar.java Changeset: 2b8a0d8b5cbb Author: malenkov Date: 2008-12-25 20:43 +0300 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/2b8a0d8b5cbb 6736248: EnumEditor bug. Class check incorrect Reviewed-by: rupashka, alexp ! src/share/classes/sun/beans/editors/EnumEditor.java + test/java/beans/PropertyEditor/TestEnumSubclass.java + test/java/beans/PropertyEditor/TestEnumSubclassJava.java + test/java/beans/PropertyEditor/TestEnumSubclassNull.java + test/java/beans/PropertyEditor/TestEnumSubclassValue.java Changeset: b06c29386f63 Author: amenkov Date: 2009-01-19 20:11 +0300 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/b06c29386f63 6702956: OpenJDK: replace encumbered code (software synthesizer) 6717691: Update Gervill with post 1.0 fixes 6740210: Update Gervill with more post 1.0 fixes 6748247: Further update Gervill with still more post 1.0 fixes 6748251: Apply IcedTea midi sound patch 6758986: Gervill: Turn SoftJitterCorrector, SoftAudioPusher threads into a daemon threads Reviewed-by: ohair, darcy ! make/common/Release.gmk ! make/common/internal/BinaryPlugs.gmk ! make/javax/sound/Makefile - make/javax/sound/jsoundhs/FILES.gmk - make/javax/sound/jsoundhs/Makefile - make/javax/sound/jsoundhs/mapfile-vers ! src/share/classes/com/sun/media/sound/AbstractMidiDevice.java + src/share/classes/com/sun/media/sound/AudioFileSoundbankReader.java + src/share/classes/com/sun/media/sound/AudioFloatConverter.java + src/share/classes/com/sun/media/sound/AudioFloatFormatConverter.java + src/share/classes/com/sun/media/sound/AudioFloatInputStream.java + src/share/classes/com/sun/media/sound/AudioSynthesizer.java + src/share/classes/com/sun/media/sound/AudioSynthesizerPropertyInfo.java + src/share/classes/com/sun/media/sound/DLSInfo.java + src/share/classes/com/sun/media/sound/DLSInstrument.java + src/share/classes/com/sun/media/sound/DLSModulator.java + src/share/classes/com/sun/media/sound/DLSRegion.java + src/share/classes/com/sun/media/sound/DLSSample.java + src/share/classes/com/sun/media/sound/DLSSampleLoop.java + src/share/classes/com/sun/media/sound/DLSSampleOptions.java + src/share/classes/com/sun/media/sound/DLSSoundbank.java + src/share/classes/com/sun/media/sound/DLSSoundbankReader.java ! src/share/classes/com/sun/media/sound/DirectAudioDevice.java + src/share/classes/com/sun/media/sound/EmergencySoundbank.java + src/share/classes/com/sun/media/sound/FFT.java + src/share/classes/com/sun/media/sound/InvalidDataException.java + src/share/classes/com/sun/media/sound/InvalidFormatException.java + src/share/classes/com/sun/media/sound/JARSoundbankReader.java + src/share/classes/com/sun/media/sound/ModelAbstractChannelMixer.java + src/share/classes/com/sun/media/sound/ModelAbstractOscillator.java + src/share/classes/com/sun/media/sound/ModelByteBuffer.java + src/share/classes/com/sun/media/sound/ModelByteBufferWavetable.java + src/share/classes/com/sun/media/sound/ModelChannelMixer.java + src/share/classes/com/sun/media/sound/ModelConnectionBlock.java + src/share/classes/com/sun/media/sound/ModelDestination.java + src/share/classes/com/sun/media/sound/ModelDirectedPlayer.java + src/share/classes/com/sun/media/sound/ModelDirector.java + src/share/classes/com/sun/media/sound/ModelIdentifier.java + src/share/classes/com/sun/media/sound/ModelInstrument.java + src/share/classes/com/sun/media/sound/ModelInstrumentComparator.java + src/share/classes/com/sun/media/sound/ModelMappedInstrument.java + src/share/classes/com/sun/media/sound/ModelOscillator.java + src/share/classes/com/sun/media/sound/ModelOscillatorStream.java + src/share/classes/com/sun/media/sound/ModelPatch.java + src/share/classes/com/sun/media/sound/ModelPerformer.java + src/share/classes/com/sun/media/sound/ModelSource.java + src/share/classes/com/sun/media/sound/ModelStandardDirector.java + src/share/classes/com/sun/media/sound/ModelStandardTransform.java + src/share/classes/com/sun/media/sound/ModelTransform.java + src/share/classes/com/sun/media/sound/ModelWavetable.java ! src/share/classes/com/sun/media/sound/Platform.java + src/share/classes/com/sun/media/sound/RIFFInvalidDataException.java + src/share/classes/com/sun/media/sound/RIFFInvalidFormatException.java + src/share/classes/com/sun/media/sound/RIFFReader.java + src/share/classes/com/sun/media/sound/RIFFWriter.java ! src/share/classes/com/sun/media/sound/RealTimeSequencer.java + src/share/classes/com/sun/media/sound/SF2GlobalRegion.java + src/share/classes/com/sun/media/sound/SF2Instrument.java + src/share/classes/com/sun/media/sound/SF2InstrumentRegion.java + src/share/classes/com/sun/media/sound/SF2Layer.java + src/share/classes/com/sun/media/sound/SF2LayerRegion.java + src/share/classes/com/sun/media/sound/SF2Modulator.java + src/share/classes/com/sun/media/sound/SF2Region.java + src/share/classes/com/sun/media/sound/SF2Sample.java + src/share/classes/com/sun/media/sound/SF2Soundbank.java + src/share/classes/com/sun/media/sound/SF2SoundbankReader.java + src/share/classes/com/sun/media/sound/SimpleInstrument.java + src/share/classes/com/sun/media/sound/SimpleSoundbank.java + src/share/classes/com/sun/media/sound/SoftAbstractResampler.java + src/share/classes/com/sun/media/sound/SoftAudioBuffer.java + src/share/classes/com/sun/media/sound/SoftAudioProcessor.java + src/share/classes/com/sun/media/sound/SoftAudioPusher.java + src/share/classes/com/sun/media/sound/SoftChannel.java + src/share/classes/com/sun/media/sound/SoftChannelProxy.java + src/share/classes/com/sun/media/sound/SoftChorus.java + src/share/classes/com/sun/media/sound/SoftControl.java + src/share/classes/com/sun/media/sound/SoftCubicResampler.java + src/share/classes/com/sun/media/sound/SoftEnvelopeGenerator.java + src/share/classes/com/sun/media/sound/SoftFilter.java + src/share/classes/com/sun/media/sound/SoftInstrument.java + src/share/classes/com/sun/media/sound/SoftJitterCorrector.java + src/share/classes/com/sun/media/sound/SoftLanczosResampler.java + src/share/classes/com/sun/media/sound/SoftLimiter.java + src/share/classes/com/sun/media/sound/SoftLinearResampler.java + src/share/classes/com/sun/media/sound/SoftLinearResampler2.java + src/share/classes/com/sun/media/sound/SoftLowFrequencyOscillator.java + src/share/classes/com/sun/media/sound/SoftMainMixer.java + src/share/classes/com/sun/media/sound/SoftMidiAudioFileReader.java + src/share/classes/com/sun/media/sound/SoftMixingClip.java + src/share/classes/com/sun/media/sound/SoftMixingDataLine.java + src/share/classes/com/sun/media/sound/SoftMixingMainMixer.java + src/share/classes/com/sun/media/sound/SoftMixingMixer.java + src/share/classes/com/sun/media/sound/SoftMixingMixerProvider.java + src/share/classes/com/sun/media/sound/SoftMixingSourceDataLine.java + src/share/classes/com/sun/media/sound/SoftPerformer.java + src/share/classes/com/sun/media/sound/SoftPointResampler.java + src/share/classes/com/sun/media/sound/SoftProcess.java + src/share/classes/com/sun/media/sound/SoftProvider.java + src/share/classes/com/sun/media/sound/SoftReceiver.java + src/share/classes/com/sun/media/sound/SoftResampler.java + src/share/classes/com/sun/media/sound/SoftResamplerStreamer.java + src/share/classes/com/sun/media/sound/SoftReverb.java + src/share/classes/com/sun/media/sound/SoftShortMessage.java + src/share/classes/com/sun/media/sound/SoftSincResampler.java + src/share/classes/com/sun/media/sound/SoftSynthesizer.java + src/share/classes/com/sun/media/sound/SoftTuning.java + src/share/classes/com/sun/media/sound/SoftVoice.java + src/share/classes/com/sun/media/sound/WaveExtensibleFileReader.java + src/share/classes/com/sun/media/sound/WaveFloatFileReader.java + src/share/classes/com/sun/media/sound/WaveFloatFileWriter.java ! src/share/classes/com/sun/media/sound/services/javax.sound.midi.spi.MidiDeviceProvider ! src/share/classes/com/sun/media/sound/services/javax.sound.midi.spi.MidiFileReader ! src/share/classes/com/sun/media/sound/services/javax.sound.midi.spi.SoundbankReader ! src/share/classes/com/sun/media/sound/services/javax.sound.sampled.spi.AudioFileReader ! src/share/classes/com/sun/media/sound/services/javax.sound.sampled.spi.FormatConversionProvider ! src/share/classes/com/sun/media/sound/services/javax.sound.sampled.spi.MixerProvider - src/share/lib/audio/soundbank.gm + test/javax/sound/midi/Gervill/AudioFloatConverter/GetFormat.java + test/javax/sound/midi/Gervill/AudioFloatConverter/ToFloatArray.java + test/javax/sound/midi/Gervill/AudioFloatInputStream/Available.java + test/javax/sound/midi/Gervill/AudioFloatInputStream/Close.java + test/javax/sound/midi/Gervill/AudioFloatInputStream/GetFormat.java + test/javax/sound/midi/Gervill/AudioFloatInputStream/GetFrameLength.java + test/javax/sound/midi/Gervill/AudioFloatInputStream/MarkSupported.java + test/javax/sound/midi/Gervill/AudioFloatInputStream/Read.java + test/javax/sound/midi/Gervill/AudioFloatInputStream/ReadFloatArray.java + test/javax/sound/midi/Gervill/AudioFloatInputStream/ReadFloatArrayIntInt.java + test/javax/sound/midi/Gervill/AudioFloatInputStream/Reset.java + test/javax/sound/midi/Gervill/AudioFloatInputStream/Skip.java + test/javax/sound/midi/Gervill/DLSSoundbankReader/TestGetSoundbankFile.java + test/javax/sound/midi/Gervill/DLSSoundbankReader/TestGetSoundbankInputStream.java + test/javax/sound/midi/Gervill/DLSSoundbankReader/TestGetSoundbankInputStream2.java + test/javax/sound/midi/Gervill/DLSSoundbankReader/TestGetSoundbankUrl.java + test/javax/sound/midi/Gervill/DLSSoundbankReader/ding.dls + test/javax/sound/midi/Gervill/EmergencySoundbank/TestCreateSoundbank.java + test/javax/sound/midi/Gervill/ModelByteBuffer/GetInputStream.java + test/javax/sound/midi/Gervill/ModelByteBuffer/GetRoot.java + test/javax/sound/midi/Gervill/ModelByteBuffer/Load.java + test/javax/sound/midi/Gervill/ModelByteBuffer/LoadAll.java + test/javax/sound/midi/Gervill/ModelByteBuffer/NewModelByteBufferByteArray.java + test/javax/sound/midi/Gervill/ModelByteBuffer/NewModelByteBufferByteArrayIntInt.java + test/javax/sound/midi/Gervill/ModelByteBuffer/NewModelByteBufferFile.java + test/javax/sound/midi/Gervill/ModelByteBuffer/NewModelByteBufferFileLongLong.java + test/javax/sound/midi/Gervill/ModelByteBuffer/RandomFileInputStream/Available.java + test/javax/sound/midi/Gervill/ModelByteBuffer/RandomFileInputStream/Close.java + test/javax/sound/midi/Gervill/ModelByteBuffer/RandomFileInputStream/MarkReset.java + test/javax/sound/midi/Gervill/ModelByteBuffer/RandomFileInputStream/MarkSupported.java + test/javax/sound/midi/Gervill/ModelByteBuffer/RandomFileInputStream/Read.java + test/javax/sound/midi/Gervill/ModelByteBuffer/RandomFileInputStream/ReadByte.java + test/javax/sound/midi/Gervill/ModelByteBuffer/RandomFileInputStream/ReadByteIntInt.java + test/javax/sound/midi/Gervill/ModelByteBuffer/RandomFileInputStream/Skip.java + test/javax/sound/midi/Gervill/ModelByteBuffer/SubbufferLong.java + test/javax/sound/midi/Gervill/ModelByteBuffer/SubbufferLongLong.java + test/javax/sound/midi/Gervill/ModelByteBuffer/SubbufferLongLongBoolean.java + test/javax/sound/midi/Gervill/ModelByteBuffer/Unload.java + test/javax/sound/midi/Gervill/ModelByteBuffer/WriteTo.java + test/javax/sound/midi/Gervill/ModelByteBufferWavetable/GetAttenuation.java + test/javax/sound/midi/Gervill/ModelByteBufferWavetable/GetChannels.java + test/javax/sound/midi/Gervill/ModelByteBufferWavetable/GetLoopLength.java + test/javax/sound/midi/Gervill/ModelByteBufferWavetable/GetLoopStart.java + test/javax/sound/midi/Gervill/ModelByteBufferWavetable/GetPitchCorrection.java + test/javax/sound/midi/Gervill/ModelByteBufferWavetable/NewModelByteBufferWavetableModelByteBuffer.java + test/javax/sound/midi/Gervill/ModelByteBufferWavetable/NewModelByteBufferWavetableModelByteBufferAudioFormat.java + test/javax/sound/midi/Gervill/ModelByteBufferWavetable/NewModelByteBufferWavetableModelByteBufferAudioFormatFloat.java + test/javax/sound/midi/Gervill/ModelByteBufferWavetable/NewModelByteBufferWavetableModelByteBufferFloat.java + test/javax/sound/midi/Gervill/ModelByteBufferWavetable/Open.java + test/javax/sound/midi/Gervill/ModelByteBufferWavetable/Set8BitExtensionBuffer.java + test/javax/sound/midi/Gervill/ModelByteBufferWavetable/SetLoopType.java + test/javax/sound/midi/Gervill/ModelDestination/NewModelDestination.java + test/javax/sound/midi/Gervill/ModelDestination/NewModelDestinationModelIdentifier.java + test/javax/sound/midi/Gervill/ModelDestination/SetIdentifier.java + test/javax/sound/midi/Gervill/ModelDestination/SetTransform.java + test/javax/sound/midi/Gervill/ModelIdentifier/EqualsObject.java + test/javax/sound/midi/Gervill/ModelIdentifier/NewModelIdentifierString.java + test/javax/sound/midi/Gervill/ModelIdentifier/NewModelIdentifierStringInt.java + test/javax/sound/midi/Gervill/ModelIdentifier/NewModelIdentifierStringString.java + test/javax/sound/midi/Gervill/ModelIdentifier/NewModelIdentifierStringStringInt.java + test/javax/sound/midi/Gervill/ModelIdentifier/SetInstance.java + test/javax/sound/midi/Gervill/ModelIdentifier/SetObject.java + test/javax/sound/midi/Gervill/ModelIdentifier/SetVariable.java + test/javax/sound/midi/Gervill/ModelPerformer/GetOscillators.java + test/javax/sound/midi/Gervill/ModelPerformer/SetConnectionBlocks.java + test/javax/sound/midi/Gervill/ModelPerformer/SetDefaultConnectionsEnabled.java + test/javax/sound/midi/Gervill/ModelPerformer/SetExclusiveClass.java + test/javax/sound/midi/Gervill/ModelPerformer/SetKeyFrom.java + test/javax/sound/midi/Gervill/ModelPerformer/SetKeyTo.java + test/javax/sound/midi/Gervill/ModelPerformer/SetName.java + test/javax/sound/midi/Gervill/ModelPerformer/SetSelfNonExclusive.java + test/javax/sound/midi/Gervill/ModelPerformer/SetVelFrom.java + test/javax/sound/midi/Gervill/ModelPerformer/SetVelTo.java + test/javax/sound/midi/Gervill/ModelSource/NewModelSource.java + test/javax/sound/midi/Gervill/ModelSource/NewModelSourceModelIdentifier.java + test/javax/sound/midi/Gervill/ModelSource/NewModelSourceModelIdentifierBoolean.java + test/javax/sound/midi/Gervill/ModelSource/NewModelSourceModelIdentifierBooleanBoolean.java + test/javax/sound/midi/Gervill/ModelSource/NewModelSourceModelIdentifierBooleanBooleanInt.java + test/javax/sound/midi/Gervill/ModelSource/NewModelSourceModelIdentifierModelTransform.java + test/javax/sound/midi/Gervill/ModelSource/SetIdentifier.java + test/javax/sound/midi/Gervill/ModelSource/SetTransform.java + test/javax/sound/midi/Gervill/ModelStandardTransform/NewModelStandardTransform.java + test/javax/sound/midi/Gervill/ModelStandardTransform/NewModelStandardTransformBoolean.java + test/javax/sound/midi/Gervill/ModelStandardTransform/NewModelStandardTransformBooleanBoolean.java + test/javax/sound/midi/Gervill/ModelStandardTransform/NewModelStandardTransformBooleanBooleanInt.java + test/javax/sound/midi/Gervill/ModelStandardTransform/SetDirection.java + test/javax/sound/midi/Gervill/ModelStandardTransform/SetPolarity.java + test/javax/sound/midi/Gervill/ModelStandardTransform/SetTransform.java + test/javax/sound/midi/Gervill/ModelStandardTransform/TransformAbsolute.java + test/javax/sound/midi/Gervill/ModelStandardTransform/TransformConcave.java + test/javax/sound/midi/Gervill/ModelStandardTransform/TransformConvex.java + test/javax/sound/midi/Gervill/ModelStandardTransform/TransformLinear.java + test/javax/sound/midi/Gervill/ModelStandardTransform/TransformSwitch.java + test/javax/sound/midi/Gervill/RiffReaderWriter/Available.java + test/javax/sound/midi/Gervill/RiffReaderWriter/Close.java + test/javax/sound/midi/Gervill/RiffReaderWriter/GetFilePointer.java + test/javax/sound/midi/Gervill/RiffReaderWriter/GetSize.java + test/javax/sound/midi/Gervill/RiffReaderWriter/HasNextChunk.java + test/javax/sound/midi/Gervill/RiffReaderWriter/Read.java + test/javax/sound/midi/Gervill/RiffReaderWriter/ReadByte.java + test/javax/sound/midi/Gervill/RiffReaderWriter/ReadByteArrayIntInt.java + test/javax/sound/midi/Gervill/RiffReaderWriter/ReadInt.java + test/javax/sound/midi/Gervill/RiffReaderWriter/ReadLong.java + test/javax/sound/midi/Gervill/RiffReaderWriter/ReadShort.java + test/javax/sound/midi/Gervill/RiffReaderWriter/ReadString.java + test/javax/sound/midi/Gervill/RiffReaderWriter/ReadUnsignedByte.java + test/javax/sound/midi/Gervill/RiffReaderWriter/ReadUnsignedInt.java + test/javax/sound/midi/Gervill/RiffReaderWriter/ReadUnsignedShort.java + test/javax/sound/midi/Gervill/RiffReaderWriter/Skip.java + test/javax/sound/midi/Gervill/RiffReaderWriter/WriteOutputStream.java + test/javax/sound/midi/Gervill/SF2SoundbankReader/TestGetSoundbankFile.java + test/javax/sound/midi/Gervill/SF2SoundbankReader/TestGetSoundbankInputStream.java + test/javax/sound/midi/Gervill/SF2SoundbankReader/TestGetSoundbankInputStream2.java + test/javax/sound/midi/Gervill/SF2SoundbankReader/TestGetSoundbankUrl.java + test/javax/sound/midi/Gervill/SF2SoundbankReader/ding.sf2 + test/javax/sound/midi/Gervill/SimpleInstrument/AddModelInstrument.java + test/javax/sound/midi/Gervill/SimpleInstrument/AddModelInstrumentIntInt.java + test/javax/sound/midi/Gervill/SimpleInstrument/AddModelInstrumentIntIntIntInt.java + test/javax/sound/midi/Gervill/SimpleInstrument/AddModelInstrumentIntIntIntIntInt.java + test/javax/sound/midi/Gervill/SimpleInstrument/AddModelPerformer.java + test/javax/sound/midi/Gervill/SimpleInstrument/AddModelPerformerArray.java + test/javax/sound/midi/Gervill/SimpleInstrument/AddModelPerformerArrayIntInt.java + test/javax/sound/midi/Gervill/SimpleInstrument/AddModelPerformerArrayIntIntIntInt.java + test/javax/sound/midi/Gervill/SimpleInstrument/AddModelPerformerArrayIntIntIntIntInt.java + test/javax/sound/midi/Gervill/SimpleInstrument/AddModelPerformerIntInt.java + test/javax/sound/midi/Gervill/SimpleInstrument/AddModelPerformerIntIntIntInt.java + test/javax/sound/midi/Gervill/SimpleInstrument/AddModelPerformerIntIntIntIntInt.java + test/javax/sound/midi/Gervill/SimpleInstrument/Clear.java + test/javax/sound/midi/Gervill/SimpleInstrument/SetName.java + test/javax/sound/midi/Gervill/SimpleInstrument/SetPatch.java + test/javax/sound/midi/Gervill/SimpleSoundbank/AddInstrument.java + test/javax/sound/midi/Gervill/SimpleSoundbank/AddResource.java + test/javax/sound/midi/Gervill/SimpleSoundbank/GetInstrument.java + test/javax/sound/midi/Gervill/SimpleSoundbank/RemoveInstrument.java + test/javax/sound/midi/Gervill/SimpleSoundbank/SetDescription.java + test/javax/sound/midi/Gervill/SimpleSoundbank/SetName.java + test/javax/sound/midi/Gervill/SimpleSoundbank/SetVendor.java + test/javax/sound/midi/Gervill/SimpleSoundbank/SetVersion.java + test/javax/sound/midi/Gervill/SoftAudioBuffer/Array.java + test/javax/sound/midi/Gervill/SoftAudioBuffer/Clear.java + test/javax/sound/midi/Gervill/SoftAudioBuffer/Get.java + test/javax/sound/midi/Gervill/SoftAudioBuffer/NewSoftAudioBuffer.java + test/javax/sound/midi/Gervill/SoftAudioSynthesizer/DummySourceDataLine.java + test/javax/sound/midi/Gervill/SoftAudioSynthesizer/GetFormat.java + test/javax/sound/midi/Gervill/SoftAudioSynthesizer/GetPropertyInfo.java + test/javax/sound/midi/Gervill/SoftAudioSynthesizer/Open.java + test/javax/sound/midi/Gervill/SoftAudioSynthesizer/OpenStream.java + test/javax/sound/midi/Gervill/SoftChannel/AllNotesOff.java + test/javax/sound/midi/Gervill/SoftChannel/AllSoundOff.java + test/javax/sound/midi/Gervill/SoftChannel/ChannelPressure.java + test/javax/sound/midi/Gervill/SoftChannel/Controller.java + test/javax/sound/midi/Gervill/SoftChannel/LocalControl.java + test/javax/sound/midi/Gervill/SoftChannel/Mono.java + test/javax/sound/midi/Gervill/SoftChannel/Mute.java + test/javax/sound/midi/Gervill/SoftChannel/NoteOff.java + test/javax/sound/midi/Gervill/SoftChannel/NoteOff2.java + test/javax/sound/midi/Gervill/SoftChannel/NoteOn.java + test/javax/sound/midi/Gervill/SoftChannel/Omni.java + test/javax/sound/midi/Gervill/SoftChannel/PitchBend.java + test/javax/sound/midi/Gervill/SoftChannel/PolyPressure.java + test/javax/sound/midi/Gervill/SoftChannel/ProgramChange.java + test/javax/sound/midi/Gervill/SoftChannel/ResetAllControllers.java + test/javax/sound/midi/Gervill/SoftChannel/SoftTestUtils.java + test/javax/sound/midi/Gervill/SoftChannel/Solo.java + test/javax/sound/midi/Gervill/SoftCubicResampler/Interpolate.java + test/javax/sound/midi/Gervill/SoftLanczosResampler/Interpolate.java + test/javax/sound/midi/Gervill/SoftLimiter/ProcessAudio_replace_mix.java + test/javax/sound/midi/Gervill/SoftLimiter/ProcessAudio_replace_mix_mono.java + test/javax/sound/midi/Gervill/SoftLimiter/ProcessAudio_replace_mix_mono_overdrive.java + test/javax/sound/midi/Gervill/SoftLimiter/ProcessAudio_replace_mix_overdrive.java + test/javax/sound/midi/Gervill/SoftLimiter/ProcessAudio_replace_normal.java + test/javax/sound/midi/Gervill/SoftLimiter/ProcessAudio_replace_normal_mono.java + test/javax/sound/midi/Gervill/SoftLimiter/ProcessAudio_replace_overdrive.java + test/javax/sound/midi/Gervill/SoftLimiter/ProcessAudio_replace_overdrive_mono.java + test/javax/sound/midi/Gervill/SoftLinearResampler/Interpolate.java + test/javax/sound/midi/Gervill/SoftLinearResampler2/Interpolate.java + test/javax/sound/midi/Gervill/SoftPointResampler/Interpolate.java + test/javax/sound/midi/Gervill/SoftProvider/GetDevice.java + test/javax/sound/midi/Gervill/SoftReceiver/Close.java + test/javax/sound/midi/Gervill/SoftReceiver/Send_ActiveSense.java + test/javax/sound/midi/Gervill/SoftReceiver/Send_AllNotesOff.java + test/javax/sound/midi/Gervill/SoftReceiver/Send_AllSoundOff.java + test/javax/sound/midi/Gervill/SoftReceiver/Send_ChannelPressure.java + test/javax/sound/midi/Gervill/SoftReceiver/Send_Controller.java + test/javax/sound/midi/Gervill/SoftReceiver/Send_Mono.java + test/javax/sound/midi/Gervill/SoftReceiver/Send_NoteOff.java + test/javax/sound/midi/Gervill/SoftReceiver/Send_NoteOn.java + test/javax/sound/midi/Gervill/SoftReceiver/Send_NoteOn_AllChannels.java + test/javax/sound/midi/Gervill/SoftReceiver/Send_NoteOn_Delayed.java + test/javax/sound/midi/Gervill/SoftReceiver/Send_NoteOn_Multiple.java + test/javax/sound/midi/Gervill/SoftReceiver/Send_Omni.java + test/javax/sound/midi/Gervill/SoftReceiver/Send_PitchBend.java + test/javax/sound/midi/Gervill/SoftReceiver/Send_PolyPressure.java + test/javax/sound/midi/Gervill/SoftReceiver/Send_ProgramChange.java + test/javax/sound/midi/Gervill/SoftReceiver/Send_ResetAllControllers.java + test/javax/sound/midi/Gervill/SoftReceiver/SoftTestUtils.java + test/javax/sound/midi/Gervill/SoftSincResampler/Interpolate.java + test/javax/sound/midi/Gervill/SoftSynthesizer/Close.java + test/javax/sound/midi/Gervill/SoftSynthesizer/DummySourceDataLine.java + test/javax/sound/midi/Gervill/SoftSynthesizer/GetAvailableInstruments.java + test/javax/sound/midi/Gervill/SoftSynthesizer/GetChannels.java + test/javax/sound/midi/Gervill/SoftSynthesizer/GetDefaultSoundbank.java + test/javax/sound/midi/Gervill/SoftSynthesizer/GetDeviceInfo.java + test/javax/sound/midi/Gervill/SoftSynthesizer/GetLatency.java + test/javax/sound/midi/Gervill/SoftSynthesizer/GetLoadedInstruments.java + test/javax/sound/midi/Gervill/SoftSynthesizer/GetMaxPolyphony.java + test/javax/sound/midi/Gervill/SoftSynthesizer/GetMaxReceivers.java + test/javax/sound/midi/Gervill/SoftSynthesizer/GetMaxTransmitters.java + test/javax/sound/midi/Gervill/SoftSynthesizer/GetMicrosecondPosition.java + test/javax/sound/midi/Gervill/SoftSynthesizer/GetReceiver.java + test/javax/sound/midi/Gervill/SoftSynthesizer/GetReceiver2.java + test/javax/sound/midi/Gervill/SoftSynthesizer/GetReceivers.java + test/javax/sound/midi/Gervill/SoftSynthesizer/GetTransmitter.java + test/javax/sound/midi/Gervill/SoftSynthesizer/GetTransmitters.java + test/javax/sound/midi/Gervill/SoftSynthesizer/GetVoiceStatus.java + test/javax/sound/midi/Gervill/SoftSynthesizer/ImplicitOpenClose.java + test/javax/sound/midi/Gervill/SoftSynthesizer/IsOpen.java + test/javax/sound/midi/Gervill/SoftSynthesizer/IsSoundbankSupported.java + test/javax/sound/midi/Gervill/SoftSynthesizer/LoadAllInstruments.java + test/javax/sound/midi/Gervill/SoftSynthesizer/LoadInstrument.java + test/javax/sound/midi/Gervill/SoftSynthesizer/LoadInstruments.java + test/javax/sound/midi/Gervill/SoftSynthesizer/Open.java + test/javax/sound/midi/Gervill/SoftSynthesizer/OpenStream.java + test/javax/sound/midi/Gervill/SoftSynthesizer/RemapInstrument.java + test/javax/sound/midi/Gervill/SoftSynthesizer/TestRender1.java + test/javax/sound/midi/Gervill/SoftSynthesizer/UnloadAllInstruments.java + test/javax/sound/midi/Gervill/SoftSynthesizer/UnloadInstrument.java + test/javax/sound/midi/Gervill/SoftSynthesizer/UnloadInstruments.java + test/javax/sound/midi/Gervill/SoftSynthesizer/ding.sf2 + test/javax/sound/midi/Gervill/SoftSynthesizer/expresso.mid + test/javax/sound/midi/Gervill/SoftTuning/GetName.java + test/javax/sound/midi/Gervill/SoftTuning/GetTuning.java + test/javax/sound/midi/Gervill/SoftTuning/GetTuningInt.java + test/javax/sound/midi/Gervill/SoftTuning/Load1.java + test/javax/sound/midi/Gervill/SoftTuning/Load2.java + test/javax/sound/midi/Gervill/SoftTuning/Load4.java + test/javax/sound/midi/Gervill/SoftTuning/Load5.java + test/javax/sound/midi/Gervill/SoftTuning/Load6.java + test/javax/sound/midi/Gervill/SoftTuning/Load7.java + test/javax/sound/midi/Gervill/SoftTuning/Load8.java + test/javax/sound/midi/Gervill/SoftTuning/Load9.java + test/javax/sound/midi/Gervill/SoftTuning/NewSoftTuning.java + test/javax/sound/midi/Gervill/SoftTuning/NewSoftTuningByteArray.java + test/javax/sound/midi/Gervill/SoftTuning/NewSoftTuningPatch.java + test/javax/sound/midi/Gervill/SoftTuning/NewSoftTuningPatchByteArray.java Changeset: cda097df492f Author: peterz Date: 2009-01-21 21:30 +0300 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/cda097df492f 6792401: Windows LAF: ActiveWindowsIcon should not be greedy with fallback icon Summary: Fallback mechanism changed to use symbolic name instead of icon. Reviewed-by: igor, rupashka ! src/share/classes/com/sun/java/swing/plaf/windows/WindowsLookAndFeel.java Changeset: cf591ddc3456 Author: naoto Date: 2009-01-21 13:58 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/cf591ddc3456 6627549: ISO 3166 code addition: Saint Barthelemy and Saint Martin 6786276: Locale.getISOCountries() still contains country code "CS" Reviewed-by: okutsu ! src/share/classes/java/util/CurrencyData.properties ! src/share/classes/java/util/LocaleISOData.java ! src/share/classes/sun/util/resources/LocaleNames.properties ! test/java/util/Currency/ValidateISO4217.java ! test/java/util/Locale/LocaleTest.java ! test/sun/text/resources/LocaleData Changeset: f650e6e22c16 Author: malenkov Date: 2009-01-23 18:31 +0300 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/f650e6e22c16 4222508: JColorChooser ignores setEnabled() function call Reviewed-by: peterz, rupashka ! src/share/classes/javax/swing/colorchooser/AbstractColorChooserPanel.java ! src/share/classes/javax/swing/colorchooser/ColorChooserPanel.java ! src/share/classes/javax/swing/colorchooser/DefaultSwatchChooserPanel.java + test/javax/swing/JColorChooser/Test4222508.html + test/javax/swing/JColorChooser/Test4222508.java Changeset: d75ae3f11e01 Author: peytoia Date: 2009-01-26 09:19 +0900 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/d75ae3f11e01 6796489: (tz) Support tzdata2009a Reviewed-by: okutsu ! make/sun/javazic/tzdata/VERSION ! make/sun/javazic/tzdata/asia ! make/sun/javazic/tzdata/backward ! make/sun/javazic/tzdata/europe ! make/sun/javazic/tzdata/northamerica ! make/sun/javazic/tzdata/zone.tab ! src/share/classes/sun/util/resources/TimeZoneNames.java ! src/share/classes/sun/util/resources/TimeZoneNames_de.java ! src/share/classes/sun/util/resources/TimeZoneNames_es.java ! src/share/classes/sun/util/resources/TimeZoneNames_fr.java ! src/share/classes/sun/util/resources/TimeZoneNames_it.java ! src/share/classes/sun/util/resources/TimeZoneNames_ja.java ! src/share/classes/sun/util/resources/TimeZoneNames_ko.java ! src/share/classes/sun/util/resources/TimeZoneNames_sv.java ! src/share/classes/sun/util/resources/TimeZoneNames_zh_CN.java ! src/share/classes/sun/util/resources/TimeZoneNames_zh_TW.java Changeset: e02f2d591cd5 Author: malenkov Date: 2009-01-29 15:34 +0300 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/e02f2d591cd5 6788531: java.beans.Statement imposes excessive access control Reviewed-by: peterz, rupashka ! src/share/classes/com/sun/beans/finder/MethodFinder.java ! src/share/classes/java/beans/EventHandler.java ! src/share/classes/java/beans/ReflectionUtils.java ! src/share/classes/java/beans/Statement.java + test/java/beans/EventHandler/Test6788531.java + test/java/beans/Statement/Test6788531.java Changeset: ff6633279632 Author: rupashka Date: 2009-01-29 19:06 +0300 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/ff6633279632 6794836: BasicSliderUI throws NullPointerExc when JSlider maximum is Integer.MAX_VALUE Reviewed-by: peterz ! src/share/classes/javax/swing/plaf/basic/BasicSliderUI.java + test/javax/swing/JSlider/6794836/bug6794836.java Changeset: 1f6ff90d9692 Author: lana Date: 2009-01-29 09:25 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/1f6ff90d9692 Merge - make/javax/sound/jsoundhs/FILES.gmk - make/javax/sound/jsoundhs/Makefile - make/javax/sound/jsoundhs/mapfile-vers - src/share/classes/com/sun/beans/ObjectHandler.java ! src/share/classes/com/sun/java/swing/plaf/windows/WindowsFileChooserUI.java ! src/share/classes/javax/swing/RepaintManager.java ! src/share/classes/javax/swing/plaf/metal/MetalFileChooserUI.java ! src/share/classes/javax/swing/plaf/synth/SynthParser.java ! src/share/classes/sun/swing/plaf/synth/SynthFileChooserUIImpl.java ! src/share/classes/sun/util/resources/TimeZoneNames.java ! src/share/classes/sun/util/resources/TimeZoneNames_de.java ! src/share/classes/sun/util/resources/TimeZoneNames_es.java ! src/share/classes/sun/util/resources/TimeZoneNames_fr.java ! src/share/classes/sun/util/resources/TimeZoneNames_it.java ! src/share/classes/sun/util/resources/TimeZoneNames_ja.java ! src/share/classes/sun/util/resources/TimeZoneNames_ko.java ! src/share/classes/sun/util/resources/TimeZoneNames_sv.java ! src/share/classes/sun/util/resources/TimeZoneNames_zh_CN.java ! src/share/classes/sun/util/resources/TimeZoneNames_zh_TW.java - src/share/lib/audio/soundbank.gm Changeset: 4b03e27a4409 Author: lana Date: 2009-02-03 22:02 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/4b03e27a4409 Merge - make/javax/sound/jsoundhs/FILES.gmk - make/javax/sound/jsoundhs/Makefile - make/javax/sound/jsoundhs/mapfile-vers - src/share/classes/com/sun/beans/ObjectHandler.java - src/share/lib/audio/soundbank.gm Changeset: 886a56291f1c Author: tbell Date: 2009-02-05 09:24 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/886a56291f1c Merge - make/javax/sound/jsoundhs/FILES.gmk - make/javax/sound/jsoundhs/Makefile - make/javax/sound/jsoundhs/mapfile-vers - src/share/classes/com/sun/beans/ObjectHandler.java - src/share/lib/audio/soundbank.gm Changeset: c87205c0e215 Author: tbell Date: 2009-02-05 09:28 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/c87205c0e215 Merge Changeset: b4ac413b1f12 Author: xdono Date: 2009-02-05 16:07 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/b4ac413b1f12 Added tag jdk7-b46 for changeset 4b03e27a4409 ! .hgtags Changeset: 2753acfbf013 Author: tbell Date: 2009-02-06 09:43 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/2753acfbf013 Merge From tim.bell at sun.com Fri Feb 6 22:17:21 2009 From: tim.bell at sun.com (tim.bell at sun.com) Date: Sat, 07 Feb 2009 06:17:21 +0000 Subject: [security-dev 00560]: hg: jdk7/tl/langtools: 3 new changesets Message-ID: <20090207061726.7F471D11E@hg.openjdk.java.net> Changeset: 2b8f6bab2392 Author: xdono Date: 2009-02-05 16:07 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/langtools/rev/2b8f6bab2392 Added tag jdk7-b46 for changeset be546a6c08e3 ! .hgtags Changeset: 638d5fbf5e78 Author: tbell Date: 2009-02-06 09:44 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/langtools/rev/638d5fbf5e78 Merge Changeset: 000d1e518bc5 Author: tbell Date: 2009-02-06 17:24 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/langtools/rev/000d1e518bc5 Merge From poonam.bajaj at sun.com Tue Feb 10 04:53:27 2009 From: poonam.bajaj at sun.com (poonam.bajaj at sun.com) Date: Tue, 10 Feb 2009 12:53:27 +0000 Subject: [security-dev 00561]: hg: jdk7/tl/jdk: 6755621: Include SA binaries into Windows JDK Message-ID: <20090210125340.EAD98D264@hg.openjdk.java.net> Changeset: 40ce81649cd6 Author: poonam Date: 2009-02-10 03:26 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/40ce81649cd6 6755621: Include SA binaries into Windows JDK Summary: These changes will enable inclusion of sa-jdi.jar and sawindbg.dll into Windows JDK bundle. Reviewed-by: never, jjh, alanb ! make/common/Defs-windows.gmk From christopher.hegarty at sun.com Wed Feb 11 05:21:15 2009 From: christopher.hegarty at sun.com (christopher.hegarty at sun.com) Date: Wed, 11 Feb 2009 13:21:15 +0000 Subject: [security-dev 00562]: hg: jdk7/tl/jdk: 6799040: Portability issues in src/solaris/native/java/net/Inet4AddressImpl.c Message-ID: <20090211132141.20231D38E@hg.openjdk.java.net> Changeset: 043dfafc41a5 Author: chegar Date: 2009-02-11 13:16 +0000 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/043dfafc41a5 6799040: Portability issues in src/solaris/native/java/net/Inet4AddressImpl.c Reviewed-by: alanb Contributed-by: christos at zoulas.com ! src/solaris/native/java/net/Inet4AddressImpl.c ! src/solaris/native/java/net/Inet6AddressImpl.c From rstupek at gmail.com Tue Feb 10 13:53:52 2009 From: rstupek at gmail.com (Richard Stupek) Date: Tue, 10 Feb 2009 15:53:52 -0600 Subject: [security-dev 00563]: SNI support in JSSE Message-ID: <892b4e450902101353x62d56b57jdda1634d3d18bea8@mail.gmail.com> Is SNI (Server name indication) slated to be in JDK7? -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mail.openjdk.java.net/pipermail/security-dev/attachments/20090210/8712e26f/attachment.html From uknowbeers at yahoo.com Wed Feb 11 15:17:41 2009 From: uknowbeers at yahoo.com (Jim Beers) Date: Wed, 11 Feb 2009 15:17:41 -0800 (PST) Subject: [security-dev 00564]: Chaining JAAS modules, x509 and NTLM Message-ID: <82272.86177.qm@web54005.mail.re2.yahoo.com> I am researching using JAAS login modules to accomplish the following requirement: First, if the user presents an X509 certificate, then authenticate using that certificate (this module is already written) Second, if no certificate is presented, use NTLM single sign on for authentication. If using IE, I believe that the module should be able to pull the username/password out of the request. If not, prompt the user for the information. I seem to be able to make one method or the other work, but not the combination of the two. Is this even possible? I have been looking at the tagish NTLM LoginModule, which seems to use BASIC authentication. It doesn't seem to me that I can use BASIC authentication and cert authentication in this either-or fashion. Any help would be appreciated. uknowbeers at yahoo.com From Xuelei.Fan at Sun.COM Wed Feb 11 17:56:33 2009 From: Xuelei.Fan at Sun.COM (Xuelei Fan) Date: Thu, 12 Feb 2009 09:56:33 +0800 Subject: [security-dev 00565]: Re: SNI support in JSSE In-Reply-To: <892b4e450902101353x62d56b57jdda1634d3d18bea8@mail.gmail.com> References: <892b4e450902101353x62d56b57jdda1634d3d18bea8@mail.gmail.com> Message-ID: <499381D1.70801@sun.com> No, and there is no plan to support it at jdk7 at present. Xuelei Richard Stupek wrote: > Is SNI (Server name indication) slated to be in JDK7? From Xuelei.Fan at Sun.COM Thu Feb 12 18:51:16 2009 From: Xuelei.Fan at Sun.COM (Xuelei Fan) Date: Fri, 13 Feb 2009 10:51:16 +0800 Subject: [security-dev 00566]: Re: SNI support in JSSE In-Reply-To: <499381D1.70801@sun.com> References: <892b4e450902101353x62d56b57jdda1634d3d18bea8@mail.gmail.com> <499381D1.70801@sun.com> Message-ID: <4994E024.8090203@Sun.COM> It is appreciate you'd like to investigate it. If you need more information about the current framework of TLS/JSSE, please refer to JSSE reference guide[7]: Currently, there is no way to define a plug-in-able extension(that's my plan in a long run), so if one want to implement a extension, he has to hard-coded the handshaking, on both client side[1] and server side[2]. For SNI, there are requirements: 1. For the client side, it meight need a public API in order to set the peer hostname, otherwise get the host name from the request URI. 2. For the server side, the simplest case is to choose a trust certificate for the requested hostname. 3. For virtual host and virtual machine, the server would like forward IP or proxy a connection to the virtual one, so one need to define a callback in order to provide the flexibility that the users could customized their behaviors while getting a SNI extension. In order to meet those requirements on the current framework, one should: 1. modify the clientHello HandshakeMessage [3], support the SNI extensions. 2. modify the trust manager[4] and the key manager[5], get them select the proper certificate according to the SNI. 4. modify the ClientHandshaker[1] and ServerHandshaker[2]. 3. add new public API to SSLSocket, or a SSL parameter to SSLSocket[6], indicate what behaviors should be taken when get such a SNI extension. However, because it is not possible to add a new public API at JDK7, maybe you need to hard coded the behaviors while get a SNI at Serverhandshaker.[2]. JDK 6 have support ECC extension, I think maybe you could get some hints from there.[8][1][2] Thanks, Xuelei [1]: http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/ClientHandshaker.java [2]: http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/ServerHandshaker.java [3]: http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/HandshakeMessage.java#ClientHello [4]: http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/X509TrustManagerImpl.java [5]: http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/X509KeyManagerImpl.java [6]: http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/javax/net/ssl/SSLSocket.java [7]: http://java.sun.com/javase/6/docs/technotes/guides/security/jsse/JSSERefGuide.html [8]: http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/HandshakeMessage.java Xuelei Fan wrote: > No, and there is no plan to support it at jdk7 at present. > > Xuelei > > Richard Stupek wrote: >> Is SNI (Server name indication) slated to be in JDK7? > From maurizio.cimadamore at sun.com Fri Feb 13 04:08:28 2009 From: maurizio.cimadamore at sun.com (maurizio.cimadamore at sun.com) Date: Fri, 13 Feb 2009 12:08:28 +0000 Subject: [security-dev 00567]: hg: jdk7/tl/langtools: 6769027: Source line should be displayed immediately after the first diagnostic line Message-ID: <20090213120832.C151FD698@hg.openjdk.java.net> Changeset: 6ada6122dd4f Author: mcimadamore Date: 2009-02-13 11:57 +0000 URL: http://hg.openjdk.java.net/jdk7/tl/langtools/rev/6ada6122dd4f 6769027: Source line should be displayed immediately after the first diagnostic line Summary: Added support for customizing diagnostic output via API/command line flags Reviewed-by: jjg ! src/share/classes/com/sun/tools/javac/api/DiagnosticFormatter.java ! src/share/classes/com/sun/tools/javac/api/Messages.java ! src/share/classes/com/sun/tools/javac/main/OptionName.java ! src/share/classes/com/sun/tools/javac/main/RecognizedOptions.java ! src/share/classes/com/sun/tools/javac/resources/compiler.properties ! src/share/classes/com/sun/tools/javac/util/AbstractDiagnosticFormatter.java ! src/share/classes/com/sun/tools/javac/util/BasicDiagnosticFormatter.java ! src/share/classes/com/sun/tools/javac/util/LayoutCharacters.java ! src/share/classes/com/sun/tools/javac/util/Log.java ! src/share/classes/com/sun/tools/javac/util/RawDiagnosticFormatter.java ! test/tools/javac/6304921/T6304921.out ! test/tools/javac/6668794/badClass/Test.java ! test/tools/javac/6668794/badSource/Test.out ! test/tools/javac/6758789/T6758789b.out + test/tools/javac/Diagnostics/6769027/T6769027.java + test/tools/javac/Diagnostics/6769027/tester.properties ! test/tools/javac/ExtendArray.out ! test/tools/javac/T5048776b.out ! test/tools/javac/T6214885a.out ! test/tools/javac/T6214885b.out ! test/tools/javac/T6230128.out ! test/tools/javac/annotations/6365854/test1.out ! test/tools/javac/cast/6557182/T6557182.out ! test/tools/javac/cast/6665356/T6665356.out ! test/tools/javac/cast/6795580/T6795580.out ! test/tools/javac/generics/6207386/T6207386.out ! test/tools/javac/generics/inference/6315770/T6315770.out ! test/tools/javac/generics/inference/6718364/T6718364.out ! test/tools/javac/generics/typevars/6680106/T6680106.out ! test/tools/javac/missingSuperRecovery/MissingSuperRecovery.out ! test/tools/javac/unicode/UnicodeNewline.out From alan.bateman at sun.com Mon Feb 16 05:07:40 2009 From: alan.bateman at sun.com (alan.bateman at sun.com) Date: Mon, 16 Feb 2009 13:07:40 +0000 Subject: [security-dev 00568]: hg: jdk7/tl/jdk: 6781363: New I/O: Update socket-channel API to jsr203/nio2-b99; ... Message-ID: <20090216130815.AAEA7D9DF@hg.openjdk.java.net> Changeset: f06f30b29f36 Author: alanb Date: 2009-02-15 12:25 +0000 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/f06f30b29f36 6781363: New I/O: Update socket-channel API to jsr203/nio2-b99 4313887: New I/O: Improved filesystem interface 4607272: New I/O: Support asynchronous I/O Reviewed-by: sherman, chegar ! make/docs/CORE_PKGS.gmk ! make/docs/NON_CORE_PKGS.gmk ! make/java/nio/Exportedfiles.gmk ! make/java/nio/FILES_c.gmk ! make/java/nio/FILES_java.gmk ! make/java/nio/Makefile ! make/java/nio/mapfile-linux ! make/java/nio/mapfile-solaris ! make/mksample/nio/Makefile + make/mksample/nio/file/Makefile + src/share/classes/com/sun/nio/file/ExtendedCopyOption.java + src/share/classes/com/sun/nio/file/ExtendedOpenOption.java + src/share/classes/com/sun/nio/file/ExtendedWatchEventModifier.java + src/share/classes/com/sun/nio/file/SensitivityWatchEventModifier.java ! src/share/classes/java/io/File.java ! src/share/classes/java/io/FilePermission.java ! src/share/classes/java/net/StandardProtocolFamily.java ! src/share/classes/java/net/StandardSocketOption.java + src/share/classes/java/nio/channels/AsynchronousByteChannel.java + src/share/classes/java/nio/channels/AsynchronousChannel.java + src/share/classes/java/nio/channels/AsynchronousChannelGroup.java + src/share/classes/java/nio/channels/AsynchronousDatagramChannel.java + src/share/classes/java/nio/channels/AsynchronousFileChannel.java + src/share/classes/java/nio/channels/AsynchronousServerSocketChannel.java + src/share/classes/java/nio/channels/AsynchronousSocketChannel.java ! src/share/classes/java/nio/channels/Channels.java + src/share/classes/java/nio/channels/CompletionHandler.java ! src/share/classes/java/nio/channels/DatagramChannel.java ! src/share/classes/java/nio/channels/FileChannel.java ! src/share/classes/java/nio/channels/FileLock.java ! src/share/classes/java/nio/channels/MembershipKey.java ! src/share/classes/java/nio/channels/MulticastChannel.java ! src/share/classes/java/nio/channels/NetworkChannel.java + src/share/classes/java/nio/channels/SeekableByteChannel.java ! src/share/classes/java/nio/channels/ServerSocketChannel.java ! src/share/classes/java/nio/channels/SocketChannel.java ! src/share/classes/java/nio/channels/exceptions ! src/share/classes/java/nio/channels/package-info.java + src/share/classes/java/nio/channels/spi/AsynchronousChannelProvider.java ! src/share/classes/java/nio/channels/spi/SelectorProvider.java ! src/share/classes/java/nio/channels/spi/package.html + src/share/classes/java/nio/file/AccessDeniedException.java + src/share/classes/java/nio/file/AccessMode.java + src/share/classes/java/nio/file/AtomicMoveNotSupportedException.java + src/share/classes/java/nio/file/ClosedDirectoryStreamException.java + src/share/classes/java/nio/file/ClosedFileSystemException.java + src/share/classes/java/nio/file/ClosedWatchServiceException.java + src/share/classes/java/nio/file/CopyOption.java + src/share/classes/java/nio/file/DirectoryNotEmptyException.java + src/share/classes/java/nio/file/DirectoryStream.java + src/share/classes/java/nio/file/DirectoryStreamFilters.java + src/share/classes/java/nio/file/FileAction.java + src/share/classes/java/nio/file/FileAlreadyExistsException.java + src/share/classes/java/nio/file/FileRef.java + src/share/classes/java/nio/file/FileStore.java + src/share/classes/java/nio/file/FileSystem.java + src/share/classes/java/nio/file/FileSystemAlreadyExistsException.java + src/share/classes/java/nio/file/FileSystemException.java + src/share/classes/java/nio/file/FileSystemNotFoundException.java + src/share/classes/java/nio/file/FileSystems.java + src/share/classes/java/nio/file/FileTreeWalker.java + src/share/classes/java/nio/file/FileVisitOption.java + src/share/classes/java/nio/file/FileVisitResult.java + src/share/classes/java/nio/file/FileVisitor.java + src/share/classes/java/nio/file/Files.java + src/share/classes/java/nio/file/InvalidPathException.java + src/share/classes/java/nio/file/LinkOption.java + src/share/classes/java/nio/file/LinkPermission.java + src/share/classes/java/nio/file/NoSuchFileException.java + src/share/classes/java/nio/file/NotDirectoryException.java + src/share/classes/java/nio/file/NotLinkException.java + src/share/classes/java/nio/file/OpenOption.java + src/share/classes/java/nio/file/Path.java + src/share/classes/java/nio/file/PathMatcher.java + src/share/classes/java/nio/file/Paths.java + src/share/classes/java/nio/file/ProviderMismatchException.java + src/share/classes/java/nio/file/ProviderNotFoundException.java + src/share/classes/java/nio/file/ReadOnlyFileSystemException.java + src/share/classes/java/nio/file/SecureDirectoryStream.java + src/share/classes/java/nio/file/SimpleFileVisitor.java + src/share/classes/java/nio/file/StandardCopyOption.java + src/share/classes/java/nio/file/StandardOpenOption.java + src/share/classes/java/nio/file/StandardWatchEventKind.java + src/share/classes/java/nio/file/WatchEvent.java + src/share/classes/java/nio/file/WatchKey.java + src/share/classes/java/nio/file/WatchService.java + src/share/classes/java/nio/file/Watchable.java + src/share/classes/java/nio/file/attribute/AclEntry.java + src/share/classes/java/nio/file/attribute/AclEntryFlag.java + src/share/classes/java/nio/file/attribute/AclEntryPermission.java + src/share/classes/java/nio/file/attribute/AclEntryType.java + src/share/classes/java/nio/file/attribute/AclFileAttributeView.java + src/share/classes/java/nio/file/attribute/AttributeView.java + src/share/classes/java/nio/file/attribute/Attributes.java + src/share/classes/java/nio/file/attribute/BasicFileAttributeView.java + src/share/classes/java/nio/file/attribute/BasicFileAttributes.java + src/share/classes/java/nio/file/attribute/DosFileAttributeView.java + src/share/classes/java/nio/file/attribute/DosFileAttributes.java + src/share/classes/java/nio/file/attribute/FileAttribute.java + src/share/classes/java/nio/file/attribute/FileAttributeView.java + src/share/classes/java/nio/file/attribute/FileOwnerAttributeView.java + src/share/classes/java/nio/file/attribute/FileStoreAttributeView.java + src/share/classes/java/nio/file/attribute/FileStoreSpaceAttributeView.java + src/share/classes/java/nio/file/attribute/FileStoreSpaceAttributes.java + src/share/classes/java/nio/file/attribute/GroupPrincipal.java + src/share/classes/java/nio/file/attribute/PosixFileAttributeView.java + src/share/classes/java/nio/file/attribute/PosixFileAttributes.java + src/share/classes/java/nio/file/attribute/PosixFilePermission.java + src/share/classes/java/nio/file/attribute/PosixFilePermissions.java + src/share/classes/java/nio/file/attribute/UserDefinedFileAttributeView.java + src/share/classes/java/nio/file/attribute/UserPrincipal.java + src/share/classes/java/nio/file/attribute/UserPrincipalLookupService.java + src/share/classes/java/nio/file/attribute/UserPrincipalNotFoundException.java + src/share/classes/java/nio/file/attribute/package-info.java + src/share/classes/java/nio/file/package-info.java + src/share/classes/java/nio/file/spi/AbstractPath.java + src/share/classes/java/nio/file/spi/FileSystemProvider.java + src/share/classes/java/nio/file/spi/FileTypeDetector.java + src/share/classes/java/nio/file/spi/package-info.java ! src/share/classes/java/util/Scanner.java + src/share/classes/sun/nio/ch/AbstractFuture.java + src/share/classes/sun/nio/ch/AsynchronousChannelGroupImpl.java + src/share/classes/sun/nio/ch/AsynchronousFileChannelImpl.java + src/share/classes/sun/nio/ch/AsynchronousServerSocketChannelImpl.java + src/share/classes/sun/nio/ch/AsynchronousSocketChannelImpl.java + src/share/classes/sun/nio/ch/Cancellable.java + src/share/classes/sun/nio/ch/CompletedFuture.java ! src/share/classes/sun/nio/ch/DatagramChannelImpl.java ! src/share/classes/sun/nio/ch/ExtendedSocketOption.java ! src/share/classes/sun/nio/ch/FileChannelImpl.java + src/share/classes/sun/nio/ch/FileDispatcher.java ! src/share/classes/sun/nio/ch/FileLockImpl.java + src/share/classes/sun/nio/ch/FileLockTable.java + src/share/classes/sun/nio/ch/Groupable.java ! src/share/classes/sun/nio/ch/IOUtil.java + src/share/classes/sun/nio/ch/Invoker.java ! src/share/classes/sun/nio/ch/MembershipKeyImpl.java ! src/share/classes/sun/nio/ch/MembershipRegistry.java ! src/share/classes/sun/nio/ch/NativeThreadSet.java ! src/share/classes/sun/nio/ch/Net.java ! src/share/classes/sun/nio/ch/OptionKey.java + src/share/classes/sun/nio/ch/PendingFuture.java ! src/share/classes/sun/nio/ch/Reflect.java ! src/share/classes/sun/nio/ch/ServerSocketChannelImpl.java + src/share/classes/sun/nio/ch/SimpleAsynchronousDatagramChannelImpl.java + src/share/classes/sun/nio/ch/SimpleAsynchronousFileChannelImpl.java ! src/share/classes/sun/nio/ch/SocketChannelImpl.java + src/share/classes/sun/nio/ch/ThreadPool.java ! src/share/classes/sun/nio/ch/Util.java + src/share/classes/sun/nio/fs/AbstractAclFileAttributeView.java + src/share/classes/sun/nio/fs/AbstractBasicFileAttributeView.java + src/share/classes/sun/nio/fs/AbstractFileStoreSpaceAttributeView.java + src/share/classes/sun/nio/fs/AbstractFileTypeDetector.java + src/share/classes/sun/nio/fs/AbstractPoller.java + src/share/classes/sun/nio/fs/AbstractUserDefinedFileAttributeView.java + src/share/classes/sun/nio/fs/AbstractWatchKey.java + src/share/classes/sun/nio/fs/AbstractWatchService.java + src/share/classes/sun/nio/fs/Cancellable.java + src/share/classes/sun/nio/fs/FileOwnerAttributeViewImpl.java + src/share/classes/sun/nio/fs/Globs.java + src/share/classes/sun/nio/fs/MimeType.java + src/share/classes/sun/nio/fs/NativeBuffer.java + src/share/classes/sun/nio/fs/NativeBuffers.java + src/share/classes/sun/nio/fs/PollingWatchService.java + src/share/classes/sun/nio/fs/Reflect.java ! src/share/classes/sun/security/util/SecurityConstants.java ! src/share/native/sun/nio/ch/genSocketOptionRegistry.c + src/share/sample/nio/file/AclEdit.java + src/share/sample/nio/file/Chmod.java + src/share/sample/nio/file/Copy.java + src/share/sample/nio/file/DiskUsage.java + src/share/sample/nio/file/FileType.java + src/share/sample/nio/file/WatchDir.java + src/share/sample/nio/file/Xdd.java ! src/solaris/classes/sun/nio/ch/DatagramDispatcher.java + src/solaris/classes/sun/nio/ch/DefaultAsynchronousChannelProvider.java ! src/solaris/classes/sun/nio/ch/DevPollArrayWrapper.java ! src/solaris/classes/sun/nio/ch/DevPollSelectorImpl.java + src/solaris/classes/sun/nio/ch/EPoll.java ! src/solaris/classes/sun/nio/ch/EPollArrayWrapper.java + src/solaris/classes/sun/nio/ch/EPollPort.java ! src/solaris/classes/sun/nio/ch/EPollSelectorImpl.java - src/solaris/classes/sun/nio/ch/FileDispatcher.java + src/solaris/classes/sun/nio/ch/FileDispatcherImpl.java + src/solaris/classes/sun/nio/ch/LinuxAsynchronousChannelProvider.java ! src/solaris/classes/sun/nio/ch/PollSelectorImpl.java + src/solaris/classes/sun/nio/ch/Port.java ! src/solaris/classes/sun/nio/ch/SinkChannelImpl.java ! src/solaris/classes/sun/nio/ch/SocketDispatcher.java + src/solaris/classes/sun/nio/ch/SolarisAsynchronousChannelProvider.java + src/solaris/classes/sun/nio/ch/SolarisEventPort.java ! src/solaris/classes/sun/nio/ch/SourceChannelImpl.java + src/solaris/classes/sun/nio/ch/UnixAsynchronousServerSocketChannelImpl.java + src/solaris/classes/sun/nio/ch/UnixAsynchronousSocketChannelImpl.java + src/solaris/classes/sun/nio/fs/DefaultFileSystemProvider.java + src/solaris/classes/sun/nio/fs/DefaultFileTypeDetector.java + src/solaris/classes/sun/nio/fs/GnomeFileTypeDetector.java + src/solaris/classes/sun/nio/fs/LinuxDosFileAttributeView.java + src/solaris/classes/sun/nio/fs/LinuxFileStore.java + src/solaris/classes/sun/nio/fs/LinuxFileSystem.java + src/solaris/classes/sun/nio/fs/LinuxFileSystemProvider.java + src/solaris/classes/sun/nio/fs/LinuxNativeDispatcher.java + src/solaris/classes/sun/nio/fs/LinuxUserDefinedFileAttributeView.java + src/solaris/classes/sun/nio/fs/LinuxWatchService.java + src/solaris/classes/sun/nio/fs/SolarisAclFileAttributeView.java + src/solaris/classes/sun/nio/fs/SolarisFileStore.java + src/solaris/classes/sun/nio/fs/SolarisFileSystem.java + src/solaris/classes/sun/nio/fs/SolarisFileSystemProvider.java + src/solaris/classes/sun/nio/fs/SolarisNativeDispatcher.java + src/solaris/classes/sun/nio/fs/SolarisUserDefinedFileAttributeView.java + src/solaris/classes/sun/nio/fs/SolarisWatchService.java + src/solaris/classes/sun/nio/fs/UnixChannelFactory.java + src/solaris/classes/sun/nio/fs/UnixCopyFile.java + src/solaris/classes/sun/nio/fs/UnixDirectoryStream.java + src/solaris/classes/sun/nio/fs/UnixException.java + src/solaris/classes/sun/nio/fs/UnixFileAttributeViews.java + src/solaris/classes/sun/nio/fs/UnixFileAttributes.java + src/solaris/classes/sun/nio/fs/UnixFileKey.java + src/solaris/classes/sun/nio/fs/UnixFileModeAttribute.java + src/solaris/classes/sun/nio/fs/UnixFileStore.java + src/solaris/classes/sun/nio/fs/UnixFileStoreAttributes.java + src/solaris/classes/sun/nio/fs/UnixFileSystem.java + src/solaris/classes/sun/nio/fs/UnixFileSystemProvider.java + src/solaris/classes/sun/nio/fs/UnixMountEntry.java + src/solaris/classes/sun/nio/fs/UnixNativeDispatcher.java + src/solaris/classes/sun/nio/fs/UnixPath.java + src/solaris/classes/sun/nio/fs/UnixSecureDirectoryStream.java + src/solaris/classes/sun/nio/fs/UnixUriUtils.java + src/solaris/classes/sun/nio/fs/UnixUserPrincipals.java + src/solaris/native/sun/nio/ch/EPoll.c + src/solaris/native/sun/nio/ch/EPollPort.c ! src/solaris/native/sun/nio/ch/FileChannelImpl.c - src/solaris/native/sun/nio/ch/FileDispatcher.c + src/solaris/native/sun/nio/ch/FileDispatcherImpl.c ! src/solaris/native/sun/nio/ch/SocketDispatcher.c + src/solaris/native/sun/nio/ch/SolarisEventPort.c + src/solaris/native/sun/nio/ch/UnixAsynchronousServerSocketChannelImpl.c + src/solaris/native/sun/nio/ch/UnixAsynchronousSocketChannelImpl.c + src/solaris/native/sun/nio/fs/GnomeFileTypeDetector.c + src/solaris/native/sun/nio/fs/LinuxNativeDispatcher.c + src/solaris/native/sun/nio/fs/LinuxWatchService.c + src/solaris/native/sun/nio/fs/SolarisNativeDispatcher.c + src/solaris/native/sun/nio/fs/SolarisWatchService.c + src/solaris/native/sun/nio/fs/UnixCopyFile.c + src/solaris/native/sun/nio/fs/UnixNativeDispatcher.c + src/solaris/native/sun/nio/fs/genSolarisConstants.c + src/solaris/native/sun/nio/fs/genUnixConstants.c + src/windows/classes/sun/nio/ch/DefaultAsynchronousChannelProvider.java - src/windows/classes/sun/nio/ch/FileDispatcher.java + src/windows/classes/sun/nio/ch/FileDispatcherImpl.java + src/windows/classes/sun/nio/ch/Iocp.java + src/windows/classes/sun/nio/ch/PendingIoCache.java + src/windows/classes/sun/nio/ch/WindowsAsynchronousChannelProvider.java + src/windows/classes/sun/nio/ch/WindowsAsynchronousFileChannelImpl.java + src/windows/classes/sun/nio/ch/WindowsAsynchronousServerSocketChannelImpl.java + src/windows/classes/sun/nio/ch/WindowsAsynchronousSocketChannelImpl.java + src/windows/classes/sun/nio/fs/DefaultFileSystemProvider.java + src/windows/classes/sun/nio/fs/DefaultFileTypeDetector.java + src/windows/classes/sun/nio/fs/RegistryFileTypeDetector.java + src/windows/classes/sun/nio/fs/WindowsAclFileAttributeView.java + src/windows/classes/sun/nio/fs/WindowsChannelFactory.java + src/windows/classes/sun/nio/fs/WindowsConstants.java + src/windows/classes/sun/nio/fs/WindowsDirectoryStream.java + src/windows/classes/sun/nio/fs/WindowsException.java + src/windows/classes/sun/nio/fs/WindowsFileAttributeViews.java + src/windows/classes/sun/nio/fs/WindowsFileAttributes.java + src/windows/classes/sun/nio/fs/WindowsFileCopy.java + src/windows/classes/sun/nio/fs/WindowsFileStore.java + src/windows/classes/sun/nio/fs/WindowsFileSystem.java + src/windows/classes/sun/nio/fs/WindowsFileSystemProvider.java + src/windows/classes/sun/nio/fs/WindowsLinkSupport.java + src/windows/classes/sun/nio/fs/WindowsNativeDispatcher.java + src/windows/classes/sun/nio/fs/WindowsPath.java + src/windows/classes/sun/nio/fs/WindowsPathParser.java + src/windows/classes/sun/nio/fs/WindowsPathType.java + src/windows/classes/sun/nio/fs/WindowsSecurity.java + src/windows/classes/sun/nio/fs/WindowsSecurityDescriptor.java + src/windows/classes/sun/nio/fs/WindowsUriSupport.java + src/windows/classes/sun/nio/fs/WindowsUserDefinedFileAttributeView.java + src/windows/classes/sun/nio/fs/WindowsUserPrincipals.java + src/windows/classes/sun/nio/fs/WindowsWatchService.java ! src/windows/native/sun/nio/ch/FileChannelImpl.c - src/windows/native/sun/nio/ch/FileDispatcher.c + src/windows/native/sun/nio/ch/FileDispatcherImpl.c + src/windows/native/sun/nio/ch/Iocp.c + src/windows/native/sun/nio/ch/WindowsAsynchronousFileChannelImpl.c + src/windows/native/sun/nio/ch/WindowsAsynchronousServerSocketChannelImpl.c + src/windows/native/sun/nio/ch/WindowsAsynchronousSocketChannelImpl.c + src/windows/native/sun/nio/fs/RegistryFileTypeDetector.c + src/windows/native/sun/nio/fs/WindowsNativeDispatcher.c + test/java/nio/channels/AsynchronousChannelGroup/AsExecutor.java + test/java/nio/channels/AsynchronousChannelGroup/Attack.java + test/java/nio/channels/AsynchronousChannelGroup/BadProperties.java + test/java/nio/channels/AsynchronousChannelGroup/Basic.java + test/java/nio/channels/AsynchronousChannelGroup/GroupOfOne.java + test/java/nio/channels/AsynchronousChannelGroup/Identity.java + test/java/nio/channels/AsynchronousChannelGroup/PrivilegedThreadFactory.java + test/java/nio/channels/AsynchronousChannelGroup/Restart.java + test/java/nio/channels/AsynchronousChannelGroup/Unbounded.java + test/java/nio/channels/AsynchronousChannelGroup/run_any_task.sh + test/java/nio/channels/AsynchronousDatagramChannel/Basic.java + test/java/nio/channels/AsynchronousFileChannel/Basic.java + test/java/nio/channels/AsynchronousFileChannel/CustomThreadPool.java + test/java/nio/channels/AsynchronousFileChannel/Lock.java + test/java/nio/channels/AsynchronousFileChannel/MyThreadFactory.java + test/java/nio/channels/AsynchronousServerSocketChannel/Basic.java + test/java/nio/channels/AsynchronousServerSocketChannel/WithSecurityManager.java + test/java/nio/channels/AsynchronousServerSocketChannel/java.policy.allow + test/java/nio/channels/AsynchronousServerSocketChannel/java.policy.deny + test/java/nio/channels/AsynchronousSocketChannel/Basic.java + test/java/nio/channels/AsynchronousSocketChannel/Leaky.java + test/java/nio/channels/Channels/Basic2.java ! test/java/nio/channels/DatagramChannel/BasicMulticastTests.java ! test/java/nio/channels/DatagramChannel/SocketOptionTests.java ! test/java/nio/channels/ServerSocketChannel/SocketOptionTests.java ! test/java/nio/channels/SocketChannel/SocketOptionTests.java ! test/java/nio/channels/etc/NetworkChannelTests.java + test/java/nio/channels/spi/AsynchronousChannelProvider/CheckProvider.java + test/java/nio/channels/spi/AsynchronousChannelProvider/META-INF/services/java.nio.channels.spi.AsynchronousChannelProvider + test/java/nio/channels/spi/AsynchronousChannelProvider/Provider1.java + test/java/nio/channels/spi/AsynchronousChannelProvider/Provider2.java + test/java/nio/channels/spi/AsynchronousChannelProvider/custom_provider.sh + test/java/nio/file/DirectoryStream/Basic.java + test/java/nio/file/DirectoryStream/Filters.java + test/java/nio/file/DirectoryStream/SecureDS.java + test/java/nio/file/FileStore/Basic.java + test/java/nio/file/FileSystem/Basic.java + test/java/nio/file/Files/ContentType.java + test/java/nio/file/Files/CreateFileTree.java + test/java/nio/file/Files/ForceLoad.java + test/java/nio/file/Files/META-INF/services/java.nio.file.spi.FileTypeDetector + test/java/nio/file/Files/Misc.java + test/java/nio/file/Files/PrintFileTree.java + test/java/nio/file/Files/SimpleFileTypeDetector.java + test/java/nio/file/Files/SkipSiblings.java + test/java/nio/file/Files/TerminateWalk.java + test/java/nio/file/Files/content_type.sh + test/java/nio/file/Files/walk_file_tree.sh + test/java/nio/file/Path/CopyAndMove.java + test/java/nio/file/Path/DeleteOnClose.java + test/java/nio/file/Path/InterruptCopy.java + test/java/nio/file/Path/Links.java + test/java/nio/file/Path/Misc.java + test/java/nio/file/Path/PathOps.java + test/java/nio/file/Path/SBC.java + test/java/nio/file/Path/TemporaryFiles.java + test/java/nio/file/Path/UriImportExport.java + test/java/nio/file/Path/delete_on_close.sh + test/java/nio/file/Path/temporary_files.sh + test/java/nio/file/PathMatcher/Basic.java + test/java/nio/file/TestUtil.java + test/java/nio/file/WatchService/Basic.java + test/java/nio/file/WatchService/FileTreeModifier.java + test/java/nio/file/WatchService/SensitivityModifier.java + test/java/nio/file/WatchService/WithSecurityManager.java + test/java/nio/file/WatchService/denyAll.policy + test/java/nio/file/WatchService/grantDirAndOneLevel.policy + test/java/nio/file/WatchService/grantDirAndTree.policy + test/java/nio/file/WatchService/grantDirOnly.policy + test/java/nio/file/attribute/AclFileAttributeView/Basic.java + test/java/nio/file/attribute/Attributes/Basic.java + test/java/nio/file/attribute/BasicFileAttributeView/Basic.java + test/java/nio/file/attribute/DosFileAttributeView/Basic.java + test/java/nio/file/attribute/FileStoreAttributeView/Basic.java + test/java/nio/file/attribute/PosixFileAttributeView/Basic.java + test/java/nio/file/attribute/UserDefinedFileAttributeView/Basic.java + test/java/nio/file/spi/SetDefaultProvider.java + test/java/nio/file/spi/TestProvider.java From christopher.hegarty at sun.com Mon Feb 16 09:23:17 2009 From: christopher.hegarty at sun.com (christopher.hegarty at sun.com) Date: Mon, 16 Feb 2009 17:23:17 +0000 Subject: [security-dev 00569]: hg: jdk7/tl/jdk: 6800805: java.net.NetworkInterface.getNetworkInterfaces() does not list IPv6 network interfaces correctly Message-ID: <20090216172341.F2FCBDA03@hg.openjdk.java.net> Changeset: f8a9a7aff362 Author: chegar Date: 2009-02-16 17:19 +0000 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/f8a9a7aff362 6800805: java.net.NetworkInterface.getNetworkInterfaces() does not list IPv6 network interfaces correctly Reviewed-by: jccollet ! src/solaris/native/java/net/NetworkInterface.c From Christian.Thalinger at Sun.COM Tue Feb 17 07:30:14 2009 From: Christian.Thalinger at Sun.COM (Christian Thalinger) Date: Tue, 17 Feb 2009 16:30:14 +0100 Subject: [security-dev 00570]: inefficient Des3DkCrypto/DigestMD5Base.setParityBit() Message-ID: <1234884614.11228.86.camel@localhost.localdomain> [I was told on core-libs-dev that I should probably send this one to this list.] Hi! While looking at the bitCount() thing I mentioned in the other thread, I noticed that Des3DkCrypto and DigestMD5Base are using a very inefficient implementation of setParityBit(). The one from DESKeyGenerator is much better and uses Integer.bitCount(), which could benefit from a population-count intrinsic. Should I file a CR or even propose a patch? -- Christian From Bradford.Wetmore at Sun.COM Tue Feb 17 10:30:42 2009 From: Bradford.Wetmore at Sun.COM (Brad Wetmore) Date: Tue, 17 Feb 2009 12:30:42 -0600 Subject: [security-dev 00571]: Re: inefficient Des3DkCrypto/DigestMD5Base.setParityBit() In-Reply-To: <1234884614.11228.86.camel@localhost.localdomain> References: <1234884614.11228.86.camel@localhost.localdomain> Message-ID: <499B0252.2070107@sun.com> You'd want to talk to Max (Weijun) as he has primary responsibility for the Kerberos code, but so far it sounds very reasonable to me. Looks like you are setup in the SCA database, it would be best to discuss it here with Max and others that would be interested, and if you develop a patch, please file it in the new bugzilla instance. http://bugs.openjdk.java.net Thanks, good luck! Brad Christian Thalinger wrote: > [I was told on core-libs-dev that I should probably send this one to > this list.] > > Hi! > > While looking at the bitCount() thing I mentioned in the other thread, I > noticed that Des3DkCrypto and DigestMD5Base are using a very inefficient > implementation of setParityBit(). The one from DESKeyGenerator is much > better and uses Integer.bitCount(), which could benefit from a > population-count intrinsic. > > Should I file a CR or even propose a patch? > > -- Christian > From Weijun.Wang at Sun.COM Wed Feb 18 01:05:13 2009 From: Weijun.Wang at Sun.COM (Max (Weijun) Wang) Date: Wed, 18 Feb 2009 17:05:13 +0800 Subject: [security-dev 00572]: Code review request: 6780416: New keytool commands/options: -gencert, -printcertreq, -ext Message-ID: <985A777F-AD08-45F2-8492-95820B434C92@Sun.COM> Hi All Can you take a review of this RFE? 6780416: New keytool commands/options: -gencert, -printcertreq, -ext bug: http://bugs.sun.com/view_bug.do?bug_id=6780416 webrev: http://hgrev.appspot.com/show?id=3077 The spec of the 3 new commands/options is inside the evaluation section of the bug report. The fix is mainly on KeyTool.java, with changes in Resources.java for l10n strings. Some X.509 files are changed to provide new constructor, new constants etc. A new class SubjectInfoAccessExtension.java is created for the extension. The KeyToolTest.java regression test are updated to cover the new commands/options. If you find the webrev too long, you might only review a part of it. Thanks Max From Weijun.Wang at Sun.COM Wed Feb 18 01:34:34 2009 From: Weijun.Wang at Sun.COM (Max (Weijun) Wang) Date: Wed, 18 Feb 2009 17:34:34 +0800 Subject: [security-dev 00573]: Re: Code review request: 6780416: New keytool commands/options: -gencert, -printcertreq, -ext In-Reply-To: <985A777F-AD08-45F2-8492-95820B434C92@Sun.COM> References: <985A777F-AD08-45F2-8492-95820B434C92@Sun.COM> Message-ID: <2240F746-2AC9-47D0-8526-9EF63349FEA5@sun.com> If you are more familiar with the standard webrev format, I have a copy here: http://cr.openjdk.java.net/~weijun/6780416/webrev.00/ On Feb 18, 2009, at 5:05 PM, Max (Weijun) Wang wrote: > Hi All > > Can you take a review of this RFE? > > 6780416: New keytool commands/options: -gencert, -printcertreq, -ext > bug: http://bugs.sun.com/view_bug.do?bug_id=6780416 > webrev: http://hgrev.appspot.com/show?id=3077 > > The spec of the 3 new commands/options is inside the evaluation > section of the bug report. > > The fix is mainly on KeyTool.java, with changes in Resources.java > for l10n strings. Some X.509 files are changed to provide new > constructor, new constants etc. A new class > SubjectInfoAccessExtension.java is created for the extension. The > KeyToolTest.java regression test are updated to cover the new > commands/options. > > If you find the webrev too long, you might only review a part of it. > > Thanks > Max > > From Xuelei.Fan at Sun.COM Wed Feb 18 02:17:01 2009 From: Xuelei.Fan at Sun.COM (Xuelei Fan) Date: Wed, 18 Feb 2009 18:17:01 +0800 Subject: [security-dev 00574]: Re: Code review request: 6780416: New keytool commands/options: -gencert, -printcertreq, -ext In-Reply-To: <985A777F-AD08-45F2-8492-95820B434C92@Sun.COM> References: <985A777F-AD08-45F2-8492-95820B434C92@Sun.COM> Message-ID: <499BE01D.7090109@sun.com> > If you find the webrev too long, you might only review a part of it. sun/security/x509/SubjectInfoAccessExtension.java: This class looks fine for me except that the SubjectInfoAccessSyntax is introduced from RFC3280, so I think it would be better change line 50 from RFC5280 to RFC3280. Xuelei Max (Weijun) Wang wrote: > Hi All > > Can you take a review of this RFE? > > 6780416: New keytool commands/options: -gencert, -printcertreq, -ext > bug: http://bugs.sun.com/view_bug.do?bug_id=6780416 > webrev: http://hgrev.appspot.com/show?id=3077 > > The spec of the 3 new commands/options is inside the evaluation > section of the bug report. > > The fix is mainly on KeyTool.java, with changes in Resources.java for > l10n strings. Some X.509 files are changed to provide new constructor, > new constants etc. A new class SubjectInfoAccessExtension.java is > created for the extension. The KeyToolTest.java regression test are > updated to cover the new commands/options. > > If you find the webrev too long, you might only review a part of it. > > Thanks > Max > > From Weijun.Wang at Sun.COM Wed Feb 18 02:26:42 2009 From: Weijun.Wang at Sun.COM (Max (Weijun) Wang) Date: Wed, 18 Feb 2009 18:26:42 +0800 Subject: [security-dev 00575]: Re: Code review request: 6780416: New keytool commands/options: -gencert, -printcertreq, -ext In-Reply-To: <499BE01D.7090109@sun.com> References: <985A777F-AD08-45F2-8492-95820B434C92@Sun.COM> <499BE01D.7090109@sun.com> Message-ID: On Feb 18, 2009, at 6:17 PM, Xuelei Fan wrote: > > If you find the webrev too long, you might only review a part of it. > > sun/security/x509/SubjectInfoAccessExtension.java: > > This class looks fine for me except that the SubjectInfoAccessSyntax > is introduced from RFC3280, so I think it would be better change > line 50 from RFC5280 to RFC3280. It was introduced in a previous RFC, but I think if the definition is not changed in a newer RFC, using the new RFC in the document is not a bad thing. This is the process I would choose regarding old and new spec: If you're writing something new, always try to use the new spec, and document it. For existing codes, if there's no enhancement in the new spec, simply update the document link in the codes to point to the new one. Otherwise, keep the old document link until the codes is updated to reflect the new features, and then update the document link. Does this sound rational? Thanks Max > > > Xuelei > > Max (Weijun) Wang wrote: >> Hi All >> >> Can you take a review of this RFE? >> >> 6780416: New keytool commands/options: -gencert, -printcertreq, -ext >> bug: http://bugs.sun.com/view_bug.do?bug_id=6780416 >> webrev: http://hgrev.appspot.com/show?id=3077 >> >> The spec of the 3 new commands/options is inside the evaluation >> section of the bug report. >> >> The fix is mainly on KeyTool.java, with changes in Resources.java >> for l10n strings. Some X.509 files are changed to provide new >> constructor, new constants etc. A new class >> SubjectInfoAccessExtension.java is created for the extension. The >> KeyToolTest.java regression test are updated to cover the new >> commands/options. >> >> If you find the webrev too long, you might only review a part of it. >> >> Thanks >> Max >> >> > From Sean.Mullan at Sun.COM Wed Feb 18 06:36:51 2009 From: Sean.Mullan at Sun.COM (Sean Mullan) Date: Wed, 18 Feb 2009 09:36:51 -0500 Subject: [security-dev 00576]: Re: Code review request: 6780416: New keytool commands/options: -gencert, -printcertreq, -ext In-Reply-To: References: <985A777F-AD08-45F2-8492-95820B434C92@Sun.COM> <499BE01D.7090109@sun.com> Message-ID: <499C1D03.9050804@sun.com> Max (Weijun) Wang wrote: > > On Feb 18, 2009, at 6:17 PM, Xuelei Fan wrote: > >> > If you find the webrev too long, you might only review a part of it. >> >> sun/security/x509/SubjectInfoAccessExtension.java: >> >> This class looks fine for me except that the SubjectInfoAccessSyntax >> is introduced from RFC3280, so I think it would be better change line >> 50 from RFC5280 to RFC3280. > > It was introduced in a previous RFC, but I think if the definition is > not changed in a newer RFC, using the new RFC in the document is not a > bad thing. > > This is the process I would choose regarding old and new spec: > > If you're writing something new, always try to use the new spec, and > document it. For existing codes, if there's no enhancement in the new > spec, simply update the document link in the codes to point to the new > one. Otherwise, keep the old document link until the codes is updated to > reflect the new features, and then update the document link. > > Does this sound rational? I think we should try to be more consistent. I think it is confusing if some code/classes reference RFC 2459, others reference 3280 and others 5280 as the RFC should be treated as a whole. Towards the end of JDK 6 release, I changed all of the RFC 2459 references to RFC 3280 and made sure we passed all of the mandatory PKITS [1] tests. For JDK 7, we should be aiming to be compliant with RFC 5280. I have not done a careful analysis of that document to know if we need to make any changes or not. I am not sure if the PKITS test suite will be updated to RFC 5280. My suggestion for now would be to leave the references as RFC 3280 and open a separate RFE for JDK 7 to check our APIs and implementation with respect to RFC 5280, fix any issues, and then update the references. --Sean [1] http://csrc.nist.gov/groups/ST/crypto_apps_infra/pki/pkitesting.html From Xuelei.Fan at Sun.COM Wed Feb 18 08:05:38 2009 From: Xuelei.Fan at Sun.COM (Xuelei Fan) Date: Thu, 19 Feb 2009 00:05:38 +0800 Subject: [security-dev 00577]: Re: Code review request: 6780416: New keytool commands/options: -gencert, -printcertreq, -ext In-Reply-To: <985A777F-AD08-45F2-8492-95820B434C92@Sun.COM> References: <985A777F-AD08-45F2-8492-95820B434C92@Sun.COM> Message-ID: <499C31D2.2090302@Sun.COM> > If you find the webrev too long, you might only review a part of it. 1. src/share/classes/sun/security/x509/IssuerAlternativeNameExtension.java Adding a new constructor which allow mark this extension as critical. The spec requires "Where present, conforming CAs SHOULD mark this extension as non-critical. Do you really want to mark it critical freely as the request? 2. src/share/classes/sun/security/x509/CertificateExtensions.java I have no reading the keytool class, so I don't know why you have to add a getNameByOid(ObjectIdentifier) method here. The name of an oid could be get from OIDMap by static. Or this name is not refer to that name in OIDMap? 3. src/share/classes/sun/security/x509/CertAndKeyGen.java Why remove the SKID extension from getSelfCertificate()? Are you sure the remove has no impact on other models. I will look at KeyTool.java tomorrow, others looks fine for me by now. Xuelei Max (Weijun) Wang wrote: > Hi All > > Can you take a review of this RFE? > > 6780416: New keytool commands/options: -gencert, -printcertreq, -ext > bug: http://bugs.sun.com/view_bug.do?bug_id=6780416 > webrev: http://hgrev.appspot.com/show?id=3077 > > The spec of the 3 new commands/options is inside the evaluation > section of the bug report. > > The fix is mainly on KeyTool.java, with changes in Resources.java for > l10n strings. Some X.509 files are changed to provide new constructor, > new constants etc. A new class SubjectInfoAccessExtension.java is > created for the extension. The KeyToolTest.java regression test are > updated to cover the new commands/options. > > If you find the webrev too long, you might only review a part of it. > > Thanks > Max > > From bhavesh.patel at sun.com Wed Feb 18 13:52:53 2009 From: bhavesh.patel at sun.com (bhavesh.patel at sun.com) Date: Wed, 18 Feb 2009 21:52:53 +0000 Subject: [security-dev 00578]: hg: jdk7/tl/langtools: 6802694: Javadoc doclet does not display deprecated information with -nocomment option for serialized form Message-ID: <20090218215259.D0CF0DB3A@hg.openjdk.java.net> Changeset: d424ed561993 Author: bpatel Date: 2009-02-18 13:47 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/langtools/rev/d424ed561993 6802694: Javadoc doclet does not display deprecated information with -nocomment option for serialized form Reviewed-by: jjg ! src/share/classes/com/sun/tools/doclets/formats/html/HtmlDocletWriter.java ! src/share/classes/com/sun/tools/doclets/formats/html/HtmlSerialFieldWriter.java ! src/share/classes/com/sun/tools/doclets/formats/html/TagletOutputImpl.java ! src/share/classes/com/sun/tools/doclets/internal/toolkit/SerializedFormWriter.java ! src/share/classes/com/sun/tools/doclets/internal/toolkit/builders/SerializedFormBuilder.java ! src/share/classes/com/sun/tools/doclets/internal/toolkit/resources/doclet.xml + test/com/sun/javadoc/testSerializedFormDeprecationInfo/TestSerializedFormDeprecationInfo.java + test/com/sun/javadoc/testSerializedFormDeprecationInfo/pkg1/C1.java + test/com/sun/javadoc/testSerializedFormDeprecationInfo/pkg1/C2.java + test/com/sun/javadoc/testSerializedFormDeprecationInfo/pkg1/C3.java From Weijun.Wang at Sun.COM Wed Feb 18 16:26:13 2009 From: Weijun.Wang at Sun.COM (Max (Weijun) Wang) Date: Thu, 19 Feb 2009 08:26:13 +0800 Subject: [security-dev 00579]: Re: Code review request: 6780416: New keytool commands/options: -gencert, -printcertreq, -ext In-Reply-To: <499C31D2.2090302@Sun.COM> References: <985A777F-AD08-45F2-8492-95820B434C92@Sun.COM> <499C31D2.2090302@Sun.COM> Message-ID: Hi Andrew First and quite important, please add my name into the To: field of the mail. The filter in my office computer would move this mail into the very corner of the mailbox. Fortunately I'm at home now and still have a chance to catch it. On Feb 19, 2009, at 12:05 AM, Xuelei Fan wrote: >> If you find the webrev too long, you might only review a part of it. > > 1. src/share/classes/sun/security/x509/ > IssuerAlternativeNameExtension.java > > Adding a new constructor which allow mark this extension as critical. > The spec requires "Where present, conforming CAs SHOULD mark this > extension as non-critical. Do you really want to mark it critical > freely as the request? For every non-MUST extension, I leave a chance for the user to provide its criticality. In fact, this class already have another constructor public IssuerAlternativeNameExtension(Boolean critical, Object value), so it's not so evil to add another constructor which also accept the critical argument. > > 2. src/share/classes/sun/security/x509/CertificateExtensions.java > I have no reading the keytool class, so I don't know why you have to > add > a getNameByOid(ObjectIdentifier) method here. The name of an oid could > be get from OIDMap by static. Or this name is not refer to that name > in OIDMap? This method is used in "-ext honored=KU,-BC", CertificateExtensions stores extensions in a Map so I need to find the name for a given type of Extension to update/delete it. I remember the name in OIDMap and name in CertificateExtensions are different. The former is full class name for reflection, latter is a simple name. I'll check it today. > > 3. src/share/classes/sun/security/x509/CertAndKeyGen.java > Why remove the SKID extension from getSelfCertificate()? Are you > sure the remove has no impact on other models. Yes I'm sure. After the fix, all extensions are added inside the createV3Extensions() method, and SKID is always added there. Also, the createV3Extensions() method is always called even if there's no -ext option at all. > > > I will look at KeyTool.java tomorrow, others looks fine for me by now. Good. Thanks Max > > > Xuelei > > Max (Weijun) Wang wrote: >> Hi All >> >> Can you take a review of this RFE? >> >> 6780416: New keytool commands/options: -gencert, -printcertreq, -ext >> bug: http://bugs.sun.com/view_bug.do?bug_id=6780416 >> webrev: http://hgrev.appspot.com/show?id=3077 >> >> The spec of the 3 new commands/options is inside the evaluation >> section of the bug report. >> >> The fix is mainly on KeyTool.java, with changes in Resources.java >> for l10n strings. Some X.509 files are changed to provide new >> constructor, new constants etc. A new class >> SubjectInfoAccessExtension.java is created for the extension. The >> KeyToolTest.java regression test are updated to cover the new >> commands/options. >> >> If you find the webrev too long, you might only review a part of it. >> >> Thanks >> Max >> >> > > From Weijun.Wang at Sun.COM Wed Feb 18 18:57:58 2009 From: Weijun.Wang at Sun.COM (Weijun Wang) Date: Thu, 19 Feb 2009 10:57:58 +0800 Subject: [security-dev 00580]: Re: Code review request: 6780416: New keytool commands/options: -gencert, -printcertreq, -ext In-Reply-To: <499C1D03.9050804@sun.com> References: <985A777F-AD08-45F2-8492-95820B434C92@Sun.COM> <499BE01D.7090109@sun.com> <499C1D03.9050804@sun.com> Message-ID: <499CCAB6.6070003@sun.com> > I think we should try to be more consistent... ^^^^^^^^^^ > My suggestion for now would be to leave the references as RFC 3280... OK, I'll change it to RFC 3280. Thanks Max Sean Mullan wrote: > Max (Weijun) Wang wrote: >> >> On Feb 18, 2009, at 6:17 PM, Xuelei Fan wrote: >> >>> > If you find the webrev too long, you might only review a part of it. >>> >>> sun/security/x509/SubjectInfoAccessExtension.java: >>> >>> This class looks fine for me except that the SubjectInfoAccessSyntax >>> is introduced from RFC3280, so I think it would be better change line >>> 50 from RFC5280 to RFC3280. >> >> It was introduced in a previous RFC, but I think if the definition is >> not changed in a newer RFC, using the new RFC in the document is not a >> bad thing. >> >> This is the process I would choose regarding old and new spec: >> >> If you're writing something new, always try to use the new spec, and >> document it. For existing codes, if there's no enhancement in the new >> spec, simply update the document link in the codes to point to the new >> one. Otherwise, keep the old document link until the codes is updated >> to reflect the new features, and then update the document link. >> >> Does this sound rational? > > I think we should try to be more consistent. I think it is confusing if > some code/classes reference RFC 2459, others reference 3280 and others > 5280 as the RFC should be treated as a whole. Towards the end of JDK 6 > release, I changed all of the RFC 2459 references to RFC 3280 and made > sure we passed all of the mandatory PKITS [1] tests. For JDK 7, we > should be aiming to be compliant with RFC 5280. I have not done a > careful analysis of that document to know if we need to make any changes > or not. I am not sure if the PKITS test suite will be updated to RFC 5280. > > My suggestion for now would be to leave the references as RFC 3280 and > open a separate RFE for JDK 7 to check our APIs and implementation with > respect to RFC 5280, fix any issues, and then update the references. > > --Sean > > [1] http://csrc.nist.gov/groups/ST/crypto_apps_infra/pki/pkitesting.html From Xuelei.Fan at Sun.COM Thu Feb 19 00:59:01 2009 From: Xuelei.Fan at Sun.COM (Xuelei Fan) Date: Thu, 19 Feb 2009 16:59:01 +0800 Subject: [security-dev 00581]: Re: Code review request: 6780416: New keytool commands/options: -gencert, -printcertreq, -ext In-Reply-To: References: <985A777F-AD08-45F2-8492-95820B434C92@Sun.COM> <499C31D2.2090302@Sun.COM> Message-ID: <499D1F55.9030303@Sun.COM> Max (Weijun) Wang wrote: >> I will look at KeyTool.java tomorrow, others looks fine for me by now. > A mini suggestion, would you please also add the "-ext" format into the usage() output? I did not find what the ext should looks like in the help message. Do you have a test case with an empty "Subject" field? If the "Subject" field is empty, the SAN extension must be present, and marked as critical. Otherwise, looks fine to me. Xuelei >> >> >> Xuelei >> >> Max (Weijun) Wang wrote: >>> Hi All >>> >>> Can you take a review of this RFE? >>> >>> 6780416: New keytool commands/options: -gencert, -printcertreq, -ext >>> bug: http://bugs.sun.com/view_bug.do?bug_id=6780416 >>> webrev: http://hgrev.appspot.com/show?id=3077 >>> >>> The spec of the 3 new commands/options is inside the evaluation >>> section of the bug report. >>> >>> The fix is mainly on KeyTool.java, with changes in Resources.java >>> for l10n strings. Some X.509 files are changed to provide new >>> constructor, new constants etc. A new class >>> SubjectInfoAccessExtension.java is created for the extension. The >>> KeyToolTest.java regression test are updated to cover the new >>> commands/options. >>> >>> If you find the webrev too long, you might only review a part of it. >>> >>> Thanks >>> Max >>> >>> >> >> > From Weijun.Wang at Sun.COM Thu Feb 19 01:44:19 2009 From: Weijun.Wang at Sun.COM (Weijun Wang) Date: Thu, 19 Feb 2009 17:44:19 +0800 Subject: [security-dev 00582]: Re: Code review request: 6780416: New keytool commands/options: -gencert, -printcertreq, -ext In-Reply-To: <499D1F55.9030303@Sun.COM> References: <985A777F-AD08-45F2-8492-95820B434C92@Sun.COM> <499C31D2.2090302@Sun.COM> <499D1F55.9030303@Sun.COM> Message-ID: <499D29F3.9050004@sun.com> Hi Andrew Thanks for your quick review! The update is published at http://hgrev.appspot.com/show?id=2087. This is not a brand new fulldiff, but an incremental diff compared to http://hgrev.appspot.com/show?id=3077. The main update is a beautified -printcertreq command. BTW, this is the first patch-over-patch patch I published on http://hgrev.appspot.com. The support is still not perfect because I see bad output in the wide diff links. Looks like there's something wrong dealing with < > things in HTML. Will fix it tonight. Xuelei Fan wrote: > Max (Weijun) Wang wrote: >>> I will look at KeyTool.java tomorrow, others looks fine for me by now. >> > A mini suggestion, would you please also add the "-ext" format into the > usage() output? I did not find what the ext should looks like in the > help message. Changed, a little. > > Do you have a test case with an empty "Subject" field? If the "Subject" > field is empty, the SAN extension must be present, and marked as critical. No, I haven't. In fact, I provide no check on what extension combinations are legal. There are quite a lot of them, say, when BC is true, then KU's some bit should be true. The consistence checking is very complicated, and if really necessary, might be implemented in a shared class instead of keytool. > > Otherwise, looks fine to me. > Thanks Max > Xuelei >>> >>> >>> Xuelei >>> >>> Max (Weijun) Wang wrote: >>>> Hi All >>>> >>>> Can you take a review of this RFE? >>>> >>>> 6780416: New keytool commands/options: -gencert, -printcertreq, -ext >>>> bug: http://bugs.sun.com/view_bug.do?bug_id=6780416 >>>> webrev: http://hgrev.appspot.com/show?id=3077 >>>> >>>> The spec of the 3 new commands/options is inside the evaluation >>>> section of the bug report. >>>> >>>> The fix is mainly on KeyTool.java, with changes in Resources.java >>>> for l10n strings. Some X.509 files are changed to provide new >>>> constructor, new constants etc. A new class >>>> SubjectInfoAccessExtension.java is created for the extension. The >>>> KeyToolTest.java regression test are updated to cover the new >>>> commands/options. >>>> >>>> If you find the webrev too long, you might only review a part of it. >>>> >>>> Thanks >>>> Max >>>> >>>> >>> >>> >> > From Xuelei.Fan at Sun.COM Thu Feb 19 02:02:55 2009 From: Xuelei.Fan at Sun.COM (Xuelei Fan) Date: Thu, 19 Feb 2009 18:02:55 +0800 Subject: [security-dev 00583]: Re: Code review request: 6780416: New keytool commands/options: -gencert, -printcertreq, -ext In-Reply-To: <499D29F3.9050004@sun.com> References: <985A777F-AD08-45F2-8492-95820B434C92@Sun.COM> <499C31D2.2090302@Sun.COM> <499D1F55.9030303@Sun.COM> <499D29F3.9050004@sun.com> Message-ID: <499D2E4F.60908@Sun.COM> Weijun Wang wrote: > Hi Andrew > > Thanks for your quick review! > > The update is published at http://hgrev.appspot.com/show?id=2087. This > is not a brand new fulldiff, but an incremental diff compared to > http://hgrev.appspot.com/show?id=3077. The main update is a beautified > -printcertreq command. > > BTW, this is the first patch-over-patch patch I published on > http://hgrev.appspot.com. The support is still not perfect because I see > bad output in the wide diff links. Looks like there's something wrong > dealing with < > things in HTML. Will fix it tonight. > > Not too bad, I got the expected "-ext" updates. BTW, I think there are many lines with more than 80 letters, which make the wide-diff hard to read. > Xuelei Fan wrote: > >> Max (Weijun) Wang wrote: >> >>>> I will look at KeyTool.java tomorrow, others looks fine for me by now. >>>> >> A mini suggestion, would you please also add the "-ext" format into the >> usage() output? I did not find what the ext should looks like in the >> help message. >> > > Changed, a little. > > >> Do you have a test case with an empty "Subject" field? If the "Subject" >> field is empty, the SAN extension must be present, and marked as critical. >> > > No, I haven't. > > In fact, I provide no check on what extension combinations are legal. > There are quite a lot of them, say, when BC is true, then KU's some bit > should be true. The consistence checking is very complicated, and if > really necessary, might be implemented in a shared class instead of keytool. > > I agree with the current approach. Just keep the keytool stupid. ;-) Xuelei >> Otherwise, looks fine to me. >> >> > > Thanks > Max > > >> Xuelei >> >>>> Xuelei >>>> >>>> Max (Weijun) Wang wrote: >>>> >>>>> Hi All >>>>> >>>>> Can you take a review of this RFE? >>>>> >>>>> 6780416: New keytool commands/options: -gencert, -printcertreq, -ext >>>>> bug: http://bugs.sun.com/view_bug.do?bug_id=6780416 >>>>> webrev: http://hgrev.appspot.com/show?id=3077 >>>>> >>>>> The spec of the 3 new commands/options is inside the evaluation >>>>> section of the bug report. >>>>> >>>>> The fix is mainly on KeyTool.java, with changes in Resources.java >>>>> for l10n strings. Some X.509 files are changed to provide new >>>>> constructor, new constants etc. A new class >>>>> SubjectInfoAccessExtension.java is created for the extension. The >>>>> KeyToolTest.java regression test are updated to cover the new >>>>> commands/options. >>>>> >>>>> If you find the webrev too long, you might only review a part of it. >>>>> >>>>> Thanks >>>>> Max >>>>> >>>>> >>>>> >>>> From Sean.Mullan at Sun.COM Thu Feb 19 08:35:54 2009 From: Sean.Mullan at Sun.COM (Sean Mullan) Date: Thu, 19 Feb 2009 11:35:54 -0500 Subject: [security-dev 00584]: Re: Code review request: 6780416: New keytool commands/options: -gencert, -printcertreq, -ext In-Reply-To: <985A777F-AD08-45F2-8492-95820B434C92@Sun.COM> References: <985A777F-AD08-45F2-8492-95820B434C92@Sun.COM> Message-ID: <499D8A6A.9010603@sun.com> Hi Max, I only had time to do a quick review of KeyTool.java but everything else looks good. --Sean Max (Weijun) Wang wrote: > Hi All > > Can you take a review of this RFE? > > 6780416: New keytool commands/options: -gencert, -printcertreq, -ext > bug: http://bugs.sun.com/view_bug.do?bug_id=6780416 > webrev: http://hgrev.appspot.com/show?id=3077 > > The spec of the 3 new commands/options is inside the evaluation section > of the bug report. > > The fix is mainly on KeyTool.java, with changes in Resources.java for > l10n strings. Some X.509 files are changed to provide new constructor, > new constants etc. A new class SubjectInfoAccessExtension.java is > created for the extension. The KeyToolTest.java regression test are > updated to cover the new commands/options. > > If you find the webrev too long, you might only review a part of it. > > Thanks > Max > > From xuelei.fan at sun.com Thu Feb 19 20:59:40 2009 From: xuelei.fan at sun.com (xuelei.fan at sun.com) Date: Fri, 20 Feb 2009 04:59:40 +0000 Subject: [security-dev 00585]: hg: jdk7/tl/jdk: 4918870: Examine session cache implementation (sun.misc.Cache) Message-ID: <20090220050015.726B0DC37@hg.openjdk.java.net> Changeset: a144afafb6fe Author: xuelei Date: 2009-02-20 12:50 +0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/a144afafb6fe 4918870: Examine session cache implementation (sun.misc.Cache) Summary: replace sun.misc.Cache with sun.security.util.Cache Reviewed-by: weijun ! src/share/classes/sun/security/ssl/SSLSessionContextImpl.java ! src/share/classes/sun/security/util/Cache.java From xuelei.fan at sun.com Thu Feb 19 21:14:30 2009 From: xuelei.fan at sun.com (xuelei.fan at sun.com) Date: Fri, 20 Feb 2009 05:14:30 +0000 Subject: [security-dev 00586]: hg: jdk7/tl/jdk: 6697270: Inputstream dosent behave correct Message-ID: <20090220051504.13A42DC3E@hg.openjdk.java.net> Changeset: 6bdbb2f5c763 Author: xuelei Date: 2009-02-20 13:05 +0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/6bdbb2f5c763 6697270: Inputstream dosent behave correct Summary: do not try to read zero byte from a InputStream, and do always return immediately for zero byte reading in a InputStream implementation. Reviewed-by: weijun ! src/share/classes/sun/security/ssl/AppInputStream.java ! src/share/classes/sun/security/ssl/AppOutputStream.java ! src/share/classes/sun/security/ssl/ByteBufferInputStream.java + test/sun/security/ssl/com/sun/net/ssl/internal/ssl/AppInputStream/ReadZeroBytes.java From Weijun.Wang at Sun.COM Fri Feb 20 00:53:26 2009 From: Weijun.Wang at Sun.COM (Max (Weijun) Wang) Date: Fri, 20 Feb 2009 16:53:26 +0800 Subject: [security-dev 00587]: Security starter bugs? (was Re: Request for comments: New Bugzilla-based contribution process) In-Reply-To: <499DE5CA.10905@sun.com> References: <20090219044923.DAB37CFD3@callebaut.niobe.net> <499DE5CA.10905@sun.com> Message-ID: <6F678DF1-6F04-47B9-9605-18B4FEF01926@sun.com> On Feb 20, 2009, at 7:05 AM, Brad Wetmore wrote: > > Some groups have already generated lists of "starter bugs" that > might contain useful ideas to get started. > Do we have the list? Max From Weijun.Wang at Sun.COM Fri Feb 20 03:06:18 2009 From: Weijun.Wang at Sun.COM (Max (Weijun) Wang) Date: Fri, 20 Feb 2009 19:06:18 +0800 Subject: [security-dev 00588]: Code review request: Accepting OpenSSL-style cert Message-ID: <9FA25F55-1FE3-4637-84E5-EFF3DF551F1C@Sun.COM> Hi Vinnie I've forward-ported the OpenSSL-style cert fix to JDK 7, updated an existing test[1], and add a new regression test. can you please take a review? The diff of X509Factory.java is identical to the one I showed you last month. Synopsis: keytool can be more flexible on format of PEM-encoded X.509 certificates Bug: http://bugs.sun.com/view_bug.do?bug_id=6535697 Fix: http://hgrev.appspot.com/show?id=3102 Thanks Max [1] Before the code update, BadX509CertData.java tries to parse an arbitrary byte array as a DER (since there's no "-----BEGIN" there), and it expects CertificateParsingException thrown. After the update, it tries to parse it as a PEM (since there's no SEQUENCE 0x30 tag), and this time CertificateException is thrown. Anyway, the test shows the byte array as a "bad" cert. From Vincent.Ryan at Sun.COM Fri Feb 20 04:03:42 2009 From: Vincent.Ryan at Sun.COM (Vincent Ryan) Date: Fri, 20 Feb 2009 12:03:42 +0000 Subject: [security-dev 00589]: Re: Code review request: Accepting OpenSSL-style cert In-Reply-To: <9FA25F55-1FE3-4637-84E5-EFF3DF551F1C@Sun.COM> References: <9FA25F55-1FE3-4637-84E5-EFF3DF551F1C@Sun.COM> Message-ID: <499E9C1E.5000006@sun.com> Your fix looks good Max. Max (Weijun) Wang wrote: > Hi Vinnie > > I've forward-ported the OpenSSL-style cert fix to JDK 7, updated an > existing test[1], and add a new regression test. can you please take a > review? The diff of X509Factory.java is identical to the one I showed > you last month. > > Synopsis: keytool can be more flexible on format of PEM-encoded X.509 > certificates > Bug: http://bugs.sun.com/view_bug.do?bug_id=6535697 > Fix: http://hgrev.appspot.com/show?id=3102 > > Thanks > Max > > [1] Before the code update, BadX509CertData.java tries to parse an > arbitrary byte array as a DER (since there's no "-----BEGIN" there), and > it expects CertificateParsingException thrown. After the update, it > tries to parse it as a PEM (since there's no SEQUENCE 0x30 tag), and > this time CertificateException is thrown. Anyway, the test shows the > byte array as a "bad" cert. From Bradford.Wetmore at Sun.COM Fri Feb 20 08:31:03 2009 From: Bradford.Wetmore at Sun.COM (Brad Wetmore) Date: Fri, 20 Feb 2009 10:31:03 -0600 Subject: [security-dev 00590]: Re: Security starter bugs? (was Re: Request for comments: New Bugzilla-based contribution process) In-Reply-To: <6F678DF1-6F04-47B9-9605-18B4FEF01926@sun.com> References: <20090219044923.DAB37CFD3@callebaut.niobe.net> <499DE5CA.10905@sun.com> <6F678DF1-6F04-47B9-9605-18B4FEF01926@sun.com> Message-ID: <499EDAC7.4030207@sun.com> Since the previous security manager moved to another group, I'm not sure who has the complete list now, or if it's been updated recently. Doing a quick look in java/java/classes_security, I see we still have: 6324292 keytool -help is unhelpful 6725221 Standardize obtaining boolean properties with defaults. 5068640 PKIXValidator throws RuntimeException when empty KeyStore is used Brad Max (Weijun) Wang wrote: > > On Feb 20, 2009, at 7:05 AM, Brad Wetmore wrote: > >> >> Some groups have already generated lists of "starter bugs" that >> might contain useful ideas to get started. >> > > Do we have the list? > > Max > From joe.darcy at sun.com Fri Feb 20 12:02:02 2009 From: joe.darcy at sun.com (joe.darcy at sun.com) Date: Fri, 20 Feb 2009 20:02:02 +0000 Subject: [security-dev 00591]: hg: jdk7/tl/langtools: 6460529: Provide mixin interfaces for getQualifiedName and getTypeParameters Message-ID: <20090220200206.60A85DC76@hg.openjdk.java.net> Changeset: dab918a1c907 Author: darcy Date: 2009-02-20 11:56 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/langtools/rev/dab918a1c907 6460529: Provide mixin interfaces for getQualifiedName and getTypeParameters Reviewed-by: jjg ! src/share/classes/com/sun/tools/javac/processing/PrintingProcessor.java ! src/share/classes/javax/lang/model/element/ExecutableElement.java ! src/share/classes/javax/lang/model/element/PackageElement.java + src/share/classes/javax/lang/model/element/Parameterizable.java + src/share/classes/javax/lang/model/element/QualifiedNameable.java ! src/share/classes/javax/lang/model/element/TypeElement.java From tim.bell at sun.com Sun Feb 22 13:49:00 2009 From: tim.bell at sun.com (tim.bell at sun.com) Date: Sun, 22 Feb 2009 21:49:00 +0000 Subject: [security-dev 00592]: hg: jdk7/tl: 2 new changesets Message-ID: <20090222214901.0EDE2DDEC@hg.openjdk.java.net> Changeset: 4ae9f4bfdb98 Author: xdono Date: 2009-02-12 14:00 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/rev/4ae9f4bfdb98 Added tag jdk7-b47 for changeset d7744e86dedc ! .hgtags Changeset: aee93a8992d2 Author: xdono Date: 2009-02-19 14:07 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/rev/aee93a8992d2 Added tag jdk7-b48 for changeset 4ae9f4bfdb98 ! .hgtags From tim.bell at sun.com Sun Feb 22 13:51:52 2009 From: tim.bell at sun.com (tim.bell at sun.com) Date: Sun, 22 Feb 2009 21:51:52 +0000 Subject: [security-dev 00593]: hg: jdk7/tl/corba: 2 new changesets Message-ID: <20090222215153.F2715DDF1@hg.openjdk.java.net> Changeset: 0be222241fd4 Author: xdono Date: 2009-02-12 14:00 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/corba/rev/0be222241fd4 Added tag jdk7-b47 for changeset 167ad0164301 ! .hgtags Changeset: d70978bc64bc Author: xdono Date: 2009-02-19 14:07 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/corba/rev/d70978bc64bc Added tag jdk7-b48 for changeset 0be222241fd4 ! .hgtags From tim.bell at sun.com Sun Feb 22 13:56:44 2009 From: tim.bell at sun.com (tim.bell at sun.com) Date: Sun, 22 Feb 2009 21:56:44 +0000 Subject: [security-dev 00594]: hg: jdk7/tl/hotspot: 34 new changesets Message-ID: <20090222215748.E3547DDF6@hg.openjdk.java.net> Changeset: 3cd5c5b027b1 Author: trims Date: 2008-12-23 19:28 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/3cd5c5b027b1 6788797: Fork HS14 to HS15 - renumber Major and build numbers of JVM Summary: fork Hotspot 15 - redo verisoning numbers Reviewed-by: jcoomes ! make/hotspot_version Changeset: 6d8fc951eb25 Author: kvn Date: 2008-12-22 15:43 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/6d8fc951eb25 6778657: Casts in SharedRuntime::f2i, f2l, d2i and d2l rely on undefined C++ behaviour Summary: Replaces SharedRuntime::f2i et al with versions that should work Reviewed-by: never Contributed-by: gbenson at redhat.com ! src/share/vm/runtime/sharedRuntime.cpp + test/compiler/6778657/Test.java Changeset: 9656bebe85a7 Author: kvn Date: 2008-12-22 16:53 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/9656bebe85a7 6778662: fixes 64-bits libraries directory search paths on linux Summary: Fixes 64-bits libraries directory search paths. Reviewed-by: never Contributed-by: langel at redhat.com ! src/os/linux/vm/os_linux.cpp Changeset: 1a767c61ad01 Author: never Date: 2009-01-06 16:10 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/1a767c61ad01 Merge Changeset: dabd8d202164 Author: coleenp Date: 2008-12-23 06:16 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/dabd8d202164 4997835: RFE: crash dump will only be created when running w/ -XX:+ShowMessageBoxOnError Summary: Using UseOSErrorReporting will provide both an hs_err file and a crash dump or debug launch and works better. Reviewed-by: xlu, acorn, poonam ! src/share/vm/utilities/vmError.cpp Changeset: db4caa99ef11 Author: xlu Date: 2008-12-24 13:06 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/db4caa99ef11 6787106: Hotspot 32 bit build fails on platforms having different definitions for intptr_t & int32_t Summary: Avoid casting between int32_t and intptr_t specifically for MasmAssembler::movptr in 32 bit platforms. Reviewed-by: jrose, kvn ! src/cpu/x86/vm/assembler_x86.cpp ! src/cpu/x86/vm/c1_LIRAssembler_x86.cpp ! src/cpu/x86/vm/c1_Runtime1_x86.cpp ! src/cpu/x86/vm/interp_masm_x86_32.cpp ! src/cpu/x86/vm/interp_masm_x86_32.hpp ! src/cpu/x86/vm/interpreterRT_x86_32.cpp ! src/cpu/x86/vm/runtime_x86_32.cpp ! src/cpu/x86/vm/sharedRuntime_x86_32.cpp ! src/cpu/x86/vm/stubGenerator_x86_64.cpp ! src/cpu/x86/vm/templateInterpreter_x86_32.cpp ! src/cpu/x86/vm/templateTable_x86_32.cpp ! src/cpu/x86/vm/x86_32.ad ! src/share/vm/utilities/globalDefinitions_gcc.hpp ! src/share/vm/utilities/globalDefinitions_sparcWorks.hpp Changeset: 2328d1d3f8cf Author: xlu Date: 2008-12-24 19:13 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/2328d1d3f8cf 6781583: Hotspot build fails on linux 64 bit platform with gcc 4.3.2 Summary: Fixed the wrong cast between types since more restrictions are imposed by gcc 4.3.2 Reviewed-by: jcoomes, acorn, phh, never ! src/cpu/sparc/vm/jni_sparc.h ! src/cpu/x86/vm/jni_x86.h ! src/os/linux/vm/os_linux.cpp ! src/share/vm/classfile/javaClasses.cpp ! src/share/vm/libadt/port.hpp ! src/share/vm/oops/constantPoolOop.cpp ! src/share/vm/oops/oopsHierarchy.hpp ! src/share/vm/opto/idealGraphPrinter.cpp ! src/share/vm/prims/jvm.cpp ! src/share/vm/runtime/arguments.cpp ! src/share/vm/runtime/memprofiler.cpp ! src/share/vm/runtime/safepoint.cpp ! src/share/vm/runtime/synchronizer.cpp ! src/share/vm/utilities/globalDefinitions.hpp ! src/share/vm/utilities/ostream.cpp ! src/share/vm/utilities/vmError.hpp Changeset: c81d2ef51ca3 Author: acorn Date: 2009-01-05 13:44 -0500 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/c81d2ef51ca3 4670071: loadClassInternal is too restrictive. Summary: VM support for deadlock fix. Library fix in 4735126. See API proposal. Reviewed-by: dholmes, blacklion ! src/share/vm/classfile/javaClasses.cpp ! src/share/vm/classfile/javaClasses.hpp ! src/share/vm/classfile/systemDictionary.cpp ! src/share/vm/classfile/systemDictionary.hpp ! src/share/vm/classfile/vmSymbols.hpp ! src/share/vm/runtime/globals.hpp Changeset: a0401dc51d0b Author: acorn Date: 2009-01-08 16:27 -0500 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/a0401dc51d0b 6791656: nsk defclass0 asserts handles.hpp Reviewed-by: phh, xlu ! src/share/vm/classfile/systemDictionary.cpp Changeset: fc7ab6287598 Author: coleenp Date: 2009-01-09 14:39 -0500 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/fc7ab6287598 Merge ! src/os/linux/vm/os_linux.cpp ! src/share/vm/oops/constantPoolOop.cpp Changeset: e9be0e04635a Author: jmasa Date: 2009-01-06 07:05 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/e9be0e04635a 6689653: JMapPerm fails with UseConcMarkSweepIncGC and compressed oops off Summary: Added safe_object_iterate() for use by JMapPerm. Reviewed-by: tonyp ! src/share/vm/gc_implementation/concurrentMarkSweep/compactibleFreeListSpace.cpp ! src/share/vm/gc_implementation/concurrentMarkSweep/compactibleFreeListSpace.hpp ! src/share/vm/gc_implementation/concurrentMarkSweep/concurrentMarkSweepGeneration.cpp ! src/share/vm/gc_implementation/concurrentMarkSweep/concurrentMarkSweepGeneration.hpp ! src/share/vm/gc_implementation/g1/g1CollectedHeap.hpp ! src/share/vm/gc_implementation/parallelScavenge/parallelScavengeHeap.hpp ! src/share/vm/gc_interface/collectedHeap.hpp ! src/share/vm/memory/genCollectedHeap.cpp ! src/share/vm/memory/genCollectedHeap.hpp ! src/share/vm/memory/generation.cpp ! src/share/vm/memory/generation.hpp ! src/share/vm/memory/heapInspection.cpp ! src/share/vm/memory/space.cpp ! src/share/vm/memory/space.hpp ! src/share/vm/prims/jvmtiTagMap.cpp ! src/share/vm/services/heapDumper.cpp Changeset: 0af8b0718fc9 Author: jmasa Date: 2009-01-11 16:58 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/0af8b0718fc9 6692899: CMS: many vm.parallel_class_loading tests fail with assert "missing Printezis mark" Summary: The CMS concurrent precleaning and concurrent marking phases should work around classes that are undergoing redefinition. Reviewed-by: ysr, dcubed ! src/share/vm/classfile/classFileParser.cpp ! src/share/vm/gc_implementation/concurrentMarkSweep/compactibleFreeListSpace.cpp ! src/share/vm/gc_implementation/concurrentMarkSweep/concurrentMarkSweepGeneration.cpp ! src/share/vm/memory/oopFactory.cpp ! src/share/vm/memory/oopFactory.hpp ! src/share/vm/memory/space.cpp ! src/share/vm/oops/constMethodKlass.cpp ! src/share/vm/oops/constMethodKlass.hpp ! src/share/vm/oops/constMethodOop.hpp ! src/share/vm/oops/constantPoolKlass.cpp ! src/share/vm/oops/constantPoolKlass.hpp ! src/share/vm/oops/constantPoolOop.hpp ! src/share/vm/oops/klass.hpp ! src/share/vm/oops/methodOop.cpp ! src/share/vm/oops/methodOop.hpp ! src/share/vm/oops/oop.hpp ! src/share/vm/oops/oop.inline.hpp ! src/share/vm/prims/jvmtiRedefineClasses.cpp Changeset: 65de26b5ea82 Author: jcoomes Date: 2009-01-14 14:12 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/65de26b5ea82 Merge ! src/share/vm/gc_implementation/g1/g1CollectedHeap.hpp Changeset: 52a431267315 Author: coleenp Date: 2009-01-13 14:41 -0500 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/52a431267315 6791168: Fix invalid code in bytecodeInterpreter that can cause gcc ICE Summary: Fix compilation errors from latest gcc in CC_INTERP including offending missing void* cast. Reviewed-by: xlu ! src/cpu/x86/vm/assembler_x86.cpp ! src/cpu/x86/vm/bytecodeInterpreter_x86.inline.hpp ! src/cpu/x86/vm/cppInterpreter_x86.cpp ! src/cpu/x86/vm/frame_x86.inline.hpp ! src/cpu/x86/vm/interp_masm_x86_64.cpp ! src/cpu/x86/vm/sharedRuntime_x86_64.cpp ! src/share/vm/interpreter/bytecodeInterpreter.cpp ! src/share/vm/interpreter/bytecodeInterpreter.hpp Changeset: 4db4e58c16bd Author: xlu Date: 2009-01-13 12:08 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/4db4e58c16bd 6791815: Fix for 6471657 can cause deadlock on non-Solaris platforms when initializing direct buffer support Summary: Place the state transition inside the loop so that the VMThread could proceed for safepoint Reviewed-by: dholmes, never, acorn ! src/share/vm/prims/jni.cpp Changeset: 9250583801d2 Author: xlu Date: 2009-01-13 12:14 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/9250583801d2 Merge Changeset: 2ddbaf7b8e1c Author: xlu Date: 2009-01-13 14:49 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/2ddbaf7b8e1c Merge Changeset: c9004fe53695 Author: xlu Date: 2009-01-13 17:39 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/c9004fe53695 6792301: StackAlignmentInBytes not honored for compiled native methods Summary: Fixed the stack misalignment when generate_native_wrapper is called. Reviewed-by: never, kamg, kvn, phh ! src/cpu/x86/vm/sharedRuntime_x86_32.cpp ! src/cpu/x86/vm/sharedRuntime_x86_64.cpp Changeset: f6c0827e5919 Author: coleenp Date: 2009-01-15 12:44 -0500 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/f6c0827e5919 Merge Changeset: 818efdefcc99 Author: tonyp Date: 2009-01-16 13:02 -0500 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/818efdefcc99 6484956: G1: improve evacuation pause efficiency Summary: A bunch of performance optimizations to decrease GC pause times in G1. Reviewed-by: apetrusenko, jmasa, iveresov ! src/share/vm/gc_implementation/g1/g1CollectedHeap.cpp ! src/share/vm/gc_implementation/g1/g1CollectedHeap.hpp ! src/share/vm/gc_implementation/g1/g1CollectedHeap.inline.hpp ! src/share/vm/gc_implementation/g1/g1CollectorPolicy.cpp ! src/share/vm/gc_implementation/g1/g1OopClosures.hpp ! src/share/vm/gc_implementation/g1/g1_globals.hpp ! src/share/vm/gc_implementation/g1/g1_specialized_oop_closures.hpp ! src/share/vm/gc_implementation/includeDB_gc_g1 ! src/share/vm/gc_implementation/includeDB_gc_shared Changeset: 2b1de1db9a9d Author: jcoomes Date: 2009-01-21 13:40 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/2b1de1db9a9d Merge Changeset: 37b3ca071522 Author: coleenp Date: 2009-01-14 20:14 -0500 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/37b3ca071522 6793825: Missing include dependancies for GCC without predefined headers Summary: With predefined headers off for gcc, some .inline.hpp files aren't included to make definition visible for inline functions Reviewed-by: jcoomes, xlu ! src/share/vm/gc_implementation/includeDB_gc_concurrentMarkSweep ! src/share/vm/gc_implementation/includeDB_gc_g1 ! src/share/vm/gc_implementation/includeDB_gc_parNew ! src/share/vm/gc_implementation/includeDB_gc_parallelScavenge ! src/share/vm/includeDB_compiler2 ! src/share/vm/includeDB_core ! src/share/vm/includeDB_features Changeset: 8db2b3e46c38 Author: swamyv Date: 2009-01-14 19:45 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/8db2b3e46c38 6786948: SA on core file fails on solaris-amd64 if vm started with -XX:+StartAttachListener Reviewed-by: jjh, dcubed ! agent/src/os/linux/ps_core.c ! agent/src/os/solaris/proc/saproc.cpp Changeset: fc14734c5aec Author: swamyv Date: 2009-01-15 13:30 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/fc14734c5aec Merge Changeset: 40ee984935b9 Author: phh Date: 2009-01-21 11:14 -0500 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/40ee984935b9 6792705: Add JAR file to bootclasspath when using AggressiveOpts Summary: During argument processing, add alt-rt.jar to the bootclasspath between bootclasspath/p and default elements. Reviewed-by: xlu, coleenp ! src/share/vm/runtime/arguments.cpp Changeset: 99c597293e35 Author: coleenp Date: 2009-01-23 10:41 -0500 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/99c597293e35 Merge ! src/share/vm/gc_implementation/includeDB_gc_g1 Changeset: dc3ad84615cf Author: xlu Date: 2009-01-26 12:07 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/dc3ad84615cf 6795913: A few remaining wrong casts need to be fixed for building hotspot successfully on Mac OS. Summary: Use NULL_WORD in the places where intptr_t is expected due to incompatible types between intptr_t & int32_t Reviewed-by: phh, coleenp, never ! src/cpu/x86/vm/c1_Runtime1_x86.cpp ! src/cpu/x86/vm/interp_masm_x86_32.cpp ! src/cpu/x86/vm/interpreterRT_x86_32.cpp ! src/cpu/x86/vm/stubGenerator_x86_32.cpp ! src/cpu/x86/vm/templateInterpreter_x86_32.cpp ! src/cpu/x86/vm/templateTable_x86_32.cpp Changeset: 5cfd8d19e546 Author: ysr Date: 2009-01-26 12:47 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/5cfd8d19e546 6786503: Overflow list performance can be improved Summary: Avoid overflow list walk in CMS & ParNew when it is unnecessary. Fix a couple of correctness issues, including a C-heap leak, in ParNew at the intersection of promotion failure, work queue overflow and object array chunking. Add stress testing option and related assertion checking. Reviewed-by: jmasa ! src/share/vm/gc_implementation/concurrentMarkSweep/concurrentMarkSweepGeneration.cpp ! src/share/vm/gc_implementation/concurrentMarkSweep/concurrentMarkSweepGeneration.hpp ! src/share/vm/gc_implementation/includeDB_gc_parNew ! src/share/vm/gc_implementation/parNew/parNewGeneration.cpp ! src/share/vm/gc_implementation/parNew/parNewGeneration.hpp ! src/share/vm/memory/referenceProcessor.cpp ! src/share/vm/runtime/globals.hpp Changeset: 4e400c36026f Author: iveresov Date: 2009-01-27 18:13 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/4e400c36026f 6783381: NUMA allocator: don't pretouch eden space with UseNUMA Summary: Moved pretouching to MutableSpace. Also MutableSpace now turns on page interleaving for the region it covers. Reviewed-by: jmasa, jcoomes ! src/share/vm/gc_implementation/parallelScavenge/psOldGen.cpp ! src/share/vm/gc_implementation/parallelScavenge/psVirtualspace.cpp ! src/share/vm/gc_implementation/parallelScavenge/psVirtualspace.hpp ! src/share/vm/gc_implementation/parallelScavenge/psYoungGen.cpp ! src/share/vm/gc_implementation/shared/mutableNUMASpace.cpp ! src/share/vm/gc_implementation/shared/mutableNUMASpace.hpp ! src/share/vm/gc_implementation/shared/mutableSpace.cpp ! src/share/vm/gc_implementation/shared/mutableSpace.hpp Changeset: 5b39c489c39d Author: ysr Date: 2009-01-29 21:25 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/5b39c489c39d Merge ! src/share/vm/gc_implementation/includeDB_gc_parNew Changeset: 3f844a28c5f4 Author: trims Date: 2009-01-30 15:28 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/3f844a28c5f4 Merge Changeset: fcb923bad68e Author: trims Date: 2009-02-10 20:33 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/fcb923bad68e Merge Changeset: bcb33806d186 Author: xdono Date: 2009-02-12 14:00 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/bcb33806d186 Added tag jdk7-b47 for changeset fcb923bad68e ! .hgtags Changeset: d61c7c22b25c Author: xdono Date: 2009-02-19 14:08 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/hotspot/rev/d61c7c22b25c Added tag jdk7-b48 for changeset bcb33806d186 ! .hgtags From tim.bell at sun.com Sun Feb 22 14:02:18 2009 From: tim.bell at sun.com (tim.bell at sun.com) Date: Sun, 22 Feb 2009 22:02:18 +0000 Subject: [security-dev 00595]: hg: jdk7/tl/jaxp: 2 new changesets Message-ID: <20090222220221.A9F79DDFB@hg.openjdk.java.net> Changeset: 39de90eb4822 Author: xdono Date: 2009-02-12 14:00 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jaxp/rev/39de90eb4822 Added tag jdk7-b47 for changeset d711ad1954b2 ! .hgtags Changeset: 5c1f24531903 Author: xdono Date: 2009-02-19 14:08 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jaxp/rev/5c1f24531903 Added tag jdk7-b48 for changeset 39de90eb4822 ! .hgtags From tim.bell at sun.com Sun Feb 22 14:04:59 2009 From: tim.bell at sun.com (tim.bell at sun.com) Date: Sun, 22 Feb 2009 22:04:59 +0000 Subject: [security-dev 00596]: hg: jdk7/tl/jaxws: 2 new changesets Message-ID: <20090222220502.1AAB6DE02@hg.openjdk.java.net> Changeset: 01e5dd31d0c1 Author: xdono Date: 2009-02-12 14:00 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jaxws/rev/01e5dd31d0c1 Added tag jdk7-b47 for changeset 223011570edb ! .hgtags Changeset: 18ca864890f3 Author: xdono Date: 2009-02-19 14:08 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jaxws/rev/18ca864890f3 Added tag jdk7-b48 for changeset 01e5dd31d0c1 ! .hgtags From tim.bell at sun.com Sun Feb 22 14:10:17 2009 From: tim.bell at sun.com (tim.bell at sun.com) Date: Sun, 22 Feb 2009 22:10:17 +0000 Subject: [security-dev 00597]: hg: jdk7/tl/jdk: 32 new changesets Message-ID: <20090222221631.5B088DE07@hg.openjdk.java.net> Changeset: 2ab03c2f814b Author: xdono Date: 2009-02-12 14:00 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/2ab03c2f814b Added tag jdk7-b47 for changeset b4ac413b1f12 ! .hgtags Changeset: 14681728d6af Author: tbell Date: 2009-02-17 09:06 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/14681728d6af Merge Changeset: 75755e92430c Author: art Date: 2008-08-26 13:09 +0400 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/75755e92430c 6585765: RFE: Remove Unicows-related code from AWT 6733976: VS2008 errors compiling AWT files - explicit casts need to be added 6728735: VS2008 errors compiling UnicowsLoader.h and fatal error in awtmsg.h Summary: Unicows-related and Win95/98/Me-related code is removed Reviewed-by: uta, tdv ! make/sun/awt/FILES_c_windows.gmk ! make/sun/awt/Makefile ! make/sun/awt/make.depend ! make/sun/jawt/make.depend ! make/sun/splashscreen/Makefile ! src/windows/classes/sun/awt/windows/WComponentPeer.java ! src/windows/native/sun/awt/splashscreen/splashscreen_sys.c ! src/windows/native/sun/java2d/d3d/D3DPipelineManager.cpp ! src/windows/native/sun/java2d/d3d/D3DRenderQueue.cpp ! src/windows/native/sun/java2d/d3d/D3DRenderer.cpp ! src/windows/native/sun/java2d/d3d/D3DSurfaceData.cpp ! src/windows/native/sun/java2d/windows/GDIBlitLoops.cpp ! src/windows/native/sun/java2d/windows/GDIRenderer.cpp ! src/windows/native/sun/java2d/windows/GDIWindowSurfaceData.cpp ! src/windows/native/sun/java2d/windows/WindowsFlags.cpp ! src/windows/native/sun/windows/ComCtl32Util.cpp ! src/windows/native/sun/windows/ComCtl32Util.h ! src/windows/native/sun/windows/Devices.cpp ! src/windows/native/sun/windows/Devices.h ! src/windows/native/sun/windows/GDIHashtable.cpp ! src/windows/native/sun/windows/GDIHashtable.h ! src/windows/native/sun/windows/ShellFolder2.cpp - src/windows/native/sun/windows/UnicowsLoader.cpp - src/windows/native/sun/windows/UnicowsLoader.h ! src/windows/native/sun/windows/WPrinterJob.cpp ! src/windows/native/sun/windows/awt.h ! src/windows/native/sun/windows/awt_Button.cpp ! src/windows/native/sun/windows/awt_Checkbox.cpp ! src/windows/native/sun/windows/awt_Choice.cpp ! src/windows/native/sun/windows/awt_Color.cpp ! src/windows/native/sun/windows/awt_Component.cpp ! src/windows/native/sun/windows/awt_Component.h ! src/windows/native/sun/windows/awt_Cursor.cpp ! src/windows/native/sun/windows/awt_Cursor.h ! src/windows/native/sun/windows/awt_DataTransferer.cpp ! src/windows/native/sun/windows/awt_Desktop.cpp ! src/windows/native/sun/windows/awt_DesktopProperties.cpp ! src/windows/native/sun/windows/awt_Dialog.cpp ! src/windows/native/sun/windows/awt_DnDDS.cpp ! src/windows/native/sun/windows/awt_DnDDT.cpp ! src/windows/native/sun/windows/awt_DrawingSurface.cpp ! src/windows/native/sun/windows/awt_FileDialog.cpp ! src/windows/native/sun/windows/awt_FileDialog.h ! src/windows/native/sun/windows/awt_Font.cpp ! src/windows/native/sun/windows/awt_Font.h ! src/windows/native/sun/windows/awt_Frame.cpp ! src/windows/native/sun/windows/awt_InputMethod.cpp ! src/windows/native/sun/windows/awt_InputTextInfor.cpp ! src/windows/native/sun/windows/awt_InputTextInfor.h ! src/windows/native/sun/windows/awt_List.cpp - src/windows/native/sun/windows/awt_MMStub.cpp - src/windows/native/sun/windows/awt_MMStub.h ! src/windows/native/sun/windows/awt_MenuItem.cpp - src/windows/native/sun/windows/awt_Multimon.h ! src/windows/native/sun/windows/awt_Object.cpp ! src/windows/native/sun/windows/awt_Palette.cpp ! src/windows/native/sun/windows/awt_PopupMenu.cpp ! src/windows/native/sun/windows/awt_PrintControl.cpp ! src/windows/native/sun/windows/awt_PrintDialog.cpp ! src/windows/native/sun/windows/awt_PrintJob.cpp ! src/windows/native/sun/windows/awt_Robot.cpp ! src/windows/native/sun/windows/awt_ScrollPane.cpp ! src/windows/native/sun/windows/awt_TextArea.cpp ! src/windows/native/sun/windows/awt_TextArea.h ! src/windows/native/sun/windows/awt_TextComponent.cpp ! src/windows/native/sun/windows/awt_TextComponent.h ! src/windows/native/sun/windows/awt_TextField.cpp ! src/windows/native/sun/windows/awt_Toolkit.cpp ! src/windows/native/sun/windows/awt_Toolkit.h ! src/windows/native/sun/windows/awt_TrayIcon.cpp ! src/windows/native/sun/windows/awt_TrayIcon.h - src/windows/native/sun/windows/awt_Unicode.cpp - src/windows/native/sun/windows/awt_Unicode.h ! src/windows/native/sun/windows/awt_Win32GraphicsConfig.cpp ! src/windows/native/sun/windows/awt_Win32GraphicsDevice.cpp ! src/windows/native/sun/windows/awt_Win32GraphicsDevice.h ! src/windows/native/sun/windows/awt_Win32GraphicsEnv.cpp ! src/windows/native/sun/windows/awt_Window.cpp - src/windows/native/sun/windows/awt_dlls.cpp - src/windows/native/sun/windows/awt_dlls.h ! src/windows/native/sun/windows/awtmsg.h ! src/windows/native/sun/windows/jawt.cpp Changeset: 95a618c79382 Author: art Date: 2008-08-26 16:31 +0400 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/95a618c79382 6741364: Some input method problems after the fix for 6585765 Summary: the fix for 6585765 is corrected Reviewed-by: uta ! src/windows/native/sun/windows/awt_InputTextInfor.cpp ! src/windows/native/sun/windows/awt_InputTextInfor.h Changeset: 39c8e06919a9 Author: art Date: 2008-09-01 17:41 +0400 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/39c8e06919a9 6707023: Chenese Characters in JTextPane Cause Pane to Hang Summary: input method events are dispatched to correct AppContext Reviewed-by: naoto, yan ! src/windows/classes/sun/awt/windows/WInputMethod.java Changeset: b942efbc1c72 Author: dav Date: 2008-09-04 17:20 +0400 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/b942efbc1c72 6738181: api/java_awt/Toolkit/index.html#GetAWTEventListeners Fails with:empty array returned unexpectedly Summary: redirect getAWTEventListeners(long l) from Headless to underlying toolkit. Reviewed-by: art ! src/share/classes/sun/awt/HeadlessToolkit.java + test/java/awt/Toolkit/Headless/AWTEventListener/AWTListener.java Changeset: f0ce5b54bd90 Author: dav Date: 2008-09-04 17:24 +0400 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/f0ce5b54bd90 Merge - src/windows/native/sun/windows/UnicowsLoader.cpp - src/windows/native/sun/windows/UnicowsLoader.h - src/windows/native/sun/windows/awt_MMStub.cpp - src/windows/native/sun/windows/awt_MMStub.h - src/windows/native/sun/windows/awt_Multimon.h - src/windows/native/sun/windows/awt_Unicode.cpp - src/windows/native/sun/windows/awt_Unicode.h - src/windows/native/sun/windows/awt_dlls.cpp - src/windows/native/sun/windows/awt_dlls.h Changeset: 31a7769b5fd1 Author: martin Date: 2008-09-08 17:26 -0700 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/31a7769b5fd1 6744609: Disable MMX support when building libpng library Summary: Define -DPNG_NO_MMX_CODE unconditionally, not just on 64-bit Linux Reviewed-by: anthony, art ! make/sun/splashscreen/Makefile Changeset: fd13d8cce933 Author: dcherepanov Date: 2008-09-10 15:02 +0400 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/fd13d8cce933 6743433: IM candidate window is not shown until window is deactivated and reactivated again Summary: OpenCandidateWindow procedure should directly call ::DefWindowProc Reviewed-by: art ! src/windows/native/sun/windows/awt_Component.cpp Changeset: b0c557c745e8 Author: art Date: 2008-09-11 10:38 +0400 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/b0c557c745e8 6727884: Some Uncaught Exceptions are no longer getting sent to the Uncaught Exception Handlers Reviewed-by: anthony, dav ! src/share/classes/java/awt/EventDispatchThread.java + test/java/awt/EventDispatchThread/HandleExceptionOnEDT/HandleExceptionOnEDT.java Changeset: 3b9a288d7ddb Author: dav Date: 2008-09-16 12:17 +0400 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/3b9a288d7ddb 6315717: Support for mouse with multiple scroll wheels and 4 or more buttons Summary: implementation of the more mouse buttons support Reviewed-by: art, dcherepanov ! make/sun/xawt/mapfile-vers ! src/share/classes/java/awt/Robot.java ! src/share/classes/java/awt/Toolkit.java ! src/share/classes/java/awt/doc-files/DesktopProperties.html ! src/share/classes/java/awt/event/InputEvent.java ! src/share/classes/java/awt/event/MouseEvent.java ! src/share/classes/java/awt/peer/RobotPeer.java ! src/share/classes/sun/awt/HeadlessToolkit.java ! src/solaris/classes/sun/awt/X11/XBaseWindow.java ! src/solaris/classes/sun/awt/X11/XConstants.java ! src/solaris/classes/sun/awt/X11/XDragSourceContextPeer.java ! src/solaris/classes/sun/awt/X11/XRobotPeer.java ! src/solaris/classes/sun/awt/X11/XToolkit.java ! src/solaris/classes/sun/awt/X11/XWindow.java ! src/solaris/classes/sun/awt/X11/XWindowPeer.java ! src/solaris/native/sun/awt/awt_Robot.c ! src/windows/classes/sun/awt/windows/WRobotPeer.java ! src/windows/classes/sun/awt/windows/WToolkit.java ! src/windows/native/sun/windows/awt_Component.cpp ! src/windows/native/sun/windows/awt_Component.h ! src/windows/native/sun/windows/awt_Robot.cpp ! src/windows/native/sun/windows/awt_Robot.h ! src/windows/native/sun/windows/awt_Toolkit.cpp ! src/windows/native/sun/windows/awt_Toolkit.h ! src/windows/native/sun/windows/awt_TrayIcon.cpp + test/java/awt/Mouse/MouseModifiersUnitTest/ExtraButtonDrag.java + test/java/awt/Mouse/MouseModifiersUnitTest/ModifierPermutation.java + test/java/awt/Mouse/MouseModifiersUnitTest/MouseModifiersUnitTest_Extra.java + test/java/awt/Mouse/MouseModifiersUnitTest/MouseModifiersUnitTest_Standard.java + test/java/awt/Robot/AcceptExtraMouseButtons/AcceptExtraMouseButtons.java + test/java/awt/Robot/ManualInstructions/ManualInstructions.java + test/java/awt/Robot/RobotExtraButton/RobotExtraButton.java + test/java/awt/Toolkit/ToolkitPropertyTest/SystemPropTest_1.java + test/java/awt/Toolkit/ToolkitPropertyTest/SystemPropTest_2.java + test/java/awt/Toolkit/ToolkitPropertyTest/SystemPropTest_3.java + test/java/awt/Toolkit/ToolkitPropertyTest/SystemPropTest_4.java + test/java/awt/Toolkit/ToolkitPropertyTest/SystemPropTest_5.java + test/java/awt/Toolkit/ToolkitPropertyTest/ToolkitPropertyTest_Disable.java + test/java/awt/Toolkit/ToolkitPropertyTest/ToolkitPropertyTest_Enable.java + test/java/awt/event/InputEvent/ButtonArraysEquality/ButtonArraysEquality.java + test/java/awt/event/MouseEvent/AcceptExtraButton/AcceptExtraButton.java + test/java/awt/event/MouseEvent/CTORRestrictions/CTORRestrictions.java + test/java/awt/event/MouseEvent/CTORRestrictions/CTORRestrictions_Disable.java + test/java/awt/event/MouseEvent/CheckGetMaskForButton/CheckGetMaskForButton.java Changeset: 7e0533679ea1 Author: dav Date: 2008-09-29 14:54 +0400 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/7e0533679ea1 6746212: Broken MouseEvents for TrayIcon Reviewed-by: dcherepanov, art ! src/windows/native/sun/windows/awt_TrayIcon.cpp Changeset: 672290c883fd Author: rkennke Date: 2008-09-29 20:16 +0200 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/672290c883fd 6749920: Cleanup AWT peer interfaces Summary: Remove duplicate and obsolete methods in the AWT peer interfaces. Reviewed-by: art, dav ! src/share/classes/java/awt/Choice.java ! src/share/classes/java/awt/Component.java ! src/share/classes/java/awt/Container.java ! src/share/classes/java/awt/Dialog.java ! src/share/classes/java/awt/List.java ! src/share/classes/java/awt/MenuItem.java ! src/share/classes/java/awt/TextArea.java ! src/share/classes/java/awt/TextField.java ! src/share/classes/java/awt/peer/ChoicePeer.java ! src/share/classes/java/awt/peer/ComponentPeer.java ! src/share/classes/java/awt/peer/ContainerPeer.java ! src/share/classes/java/awt/peer/ListPeer.java ! src/share/classes/java/awt/peer/MenuItemPeer.java ! src/share/classes/java/awt/peer/TextAreaPeer.java ! src/share/classes/java/awt/peer/TextComponentPeer.java ! src/share/classes/java/awt/peer/TextFieldPeer.java ! src/share/classes/java/awt/peer/WindowPeer.java Changeset: 485e803c2d5a Author: dav Date: 2008-10-03 10:33 +0400 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/485e803c2d5a 6755110: Solaris build has corrupted with extra mouse buttons RFE Reviewed-by: yan ! src/solaris/native/sun/awt/awt_Robot.c Changeset: 5482ef16fe78 Author: yan Date: 2008-10-06 16:45 +0400 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/5482ef16fe78 5100701: Toolkit.getLockingKeyState() does not work on XToolkit, but works on Motif Summary: Does not work on Motif but works on XToolkit now; implemented using XQueryPointer. Reviewed-by: anthony ! make/sun/xawt/mapfile-vers ! src/solaris/classes/sun/awt/X11/XKeysym.java ! src/solaris/classes/sun/awt/X11/XToolkit.java ! src/solaris/classes/sun/awt/X11/XlibWrapper.java ! src/solaris/classes/sun/awt/X11/keysym2ucs.h ! src/solaris/native/sun/xawt/XlibWrapper.c Changeset: ce224a356eb8 Author: dav Date: 2008-10-07 16:34 +0400 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/ce224a356eb8 6750288: Regression after 6315717. ArrayIndexOutOfBoundsException. Reviewed-by: dcherepanov, denis ! src/solaris/classes/sun/awt/X11/XToolkit.java Changeset: 724eb9cbd3bb Author: dav Date: 2008-10-07 16:43 +0400 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/724eb9cbd3bb Merge ! src/solaris/classes/sun/awt/X11/XToolkit.java Changeset: aed796ac3788 Author: dav Date: 2008-10-08 12:50 +0400 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/aed796ac3788 5076635: Double click speed is not honored in KDE linux Reviewed-by: art, dcherepanov ! src/solaris/classes/sun/awt/X11/XToolkit.java + test/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest.html + test/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest.java Changeset: 346127532313 Author: dav Date: 2008-10-08 13:01 +0400 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/346127532313 Merge - make/java/nio/spp.sh - make/tools/winver/Makefile - make/tools/winver/bin/winver.exe - make/tools/winver/src/StdAfx.cpp - make/tools/winver/src/StdAfx.h - make/tools/winver/src/winver.cpp - src/share/classes/com/sun/jmx/mbeanserver/OpenConverter.java - src/share/classes/javax/management/ToQueryString.java ! src/solaris/classes/sun/awt/X11/XToolkit.java - src/windows/classes/sun/java2d/d3d/D3DBackBufferSurfaceData.java - src/windows/classes/sun/java2d/windows/DDBlitLoops.java - src/windows/classes/sun/java2d/windows/DDRenderer.java - src/windows/classes/sun/java2d/windows/DDScaleLoops.java - src/windows/classes/sun/java2d/windows/Win32OffScreenSurfaceData.java - src/windows/classes/sun/java2d/windows/Win32SurfaceData.java - src/windows/classes/sun/java2d/windows/Win32SurfaceDataProxy.java - src/windows/classes/sun/java2d/windows/WinBackBuffer.java - src/windows/classes/sun/java2d/windows/WinBackBufferSurfaceData.java - src/windows/classes/sun/java2d/windows/WinVolatileSurfaceManager.java - src/windows/native/sun/java2d/d3d/D3DRuntimeTest.cpp - src/windows/native/sun/java2d/d3d/D3DRuntimeTest.h - src/windows/native/sun/java2d/d3d/D3DTestRaster.h - src/windows/native/sun/java2d/d3d/D3DTextRenderer_md.cpp - src/windows/native/sun/java2d/d3d/D3DUtils.cpp - src/windows/native/sun/java2d/d3d/D3DUtils.h - src/windows/native/sun/java2d/windows/DDBlitLoops.cpp - src/windows/native/sun/java2d/windows/DDRenderer.cpp - src/windows/native/sun/java2d/windows/RegistryKey.cpp - src/windows/native/sun/java2d/windows/RegistryKey.h - src/windows/native/sun/java2d/windows/Win32OffScreenSurfaceData.cpp - src/windows/native/sun/java2d/windows/Win32SurfaceData.cpp - src/windows/native/sun/java2d/windows/Win32SurfaceData.h - src/windows/native/sun/java2d/windows/WinBackBufferSurfaceData.cpp - src/windows/native/sun/java2d/windows/ddrawObject.cpp - src/windows/native/sun/java2d/windows/ddrawObject.h - src/windows/native/sun/java2d/windows/ddrawUtils.cpp - src/windows/native/sun/java2d/windows/ddrawUtils.h - src/windows/native/sun/java2d/windows/dxCapabilities.cpp - src/windows/native/sun/java2d/windows/dxCapabilities.h - src/windows/native/sun/java2d/windows/dxInit.cpp - src/windows/native/sun/java2d/windows/dxInit.h - src/windows/native/sun/windows/UnicowsLoader.cpp - src/windows/native/sun/windows/UnicowsLoader.h - src/windows/native/sun/windows/awt_MMStub.cpp - src/windows/native/sun/windows/awt_MMStub.h - src/windows/native/sun/windows/awt_Multimon.h - src/windows/native/sun/windows/awt_Unicode.cpp - src/windows/native/sun/windows/awt_Unicode.h - src/windows/native/sun/windows/awt_dlls.cpp - src/windows/native/sun/windows/awt_dlls.h Changeset: 0c515369b48b Author: lana Date: 2008-10-20 19:07 -0700 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/0c515369b48b Merge - make/ASSEMBLY_EXCEPTION - make/LICENSE - make/README - make/README-builds.html - make/README.html - make/THIRD_PARTY_README ! make/sun/awt/Makefile - make/tools/auto_multi/Makefile - make/tools/src/build/tools/automulti/AutoMulti.java - make/tools/src/build/tools/automulti/README.txt - make/tools/src/build/tools/automulti/TestALFGenerator.java - make/tools/src/build/tools/automulti/TestALFLookAndFeel.java ! src/share/classes/java/awt/EventDispatchThread.java - src/share/classes/java/nio/channels/package.html - src/share/classes/javax/swing/colorchooser/DefaultHSBChooserPanel.java - src/share/classes/javax/swing/colorchooser/DefaultRGBChooserPanel.java - src/share/classes/javax/swing/colorchooser/SyntheticImage.java - src/share/classes/org/jcp/xml/dsig/internal/package.html - src/share/classes/sun/launcher/LauncherHelp.java - src/share/classes/sun/nio/ch/OptionAdaptor.java - src/share/classes/sun/nio/ch/SocketOpts.java - src/share/classes/sun/nio/ch/SocketOptsImpl.java - src/share/classes/sun/nio/ch/exceptions - src/share/javavm/include/opcodes.h - src/share/javavm/include/opcodes.length - src/share/javavm/include/opcodes.list - src/share/javavm/include/opcodes.weight - src/share/javavm/include/opcodes.wide - src/share/javavm/include/sys_api.h - src/share/javavm/include/typedefs.h - src/solaris/javavm/include/typedefs_md.h - src/windows/javavm/include/typedefs_md.h ! src/windows/native/sun/windows/ComCtl32Util.cpp ! src/windows/native/sun/windows/ComCtl32Util.h ! src/windows/native/sun/windows/awt_TextArea.cpp - test/javax/swing/JFileChooser/4252173/bug4252173.java - test/javax/swing/JFileChooser/6524424/bug6524424.html - test/javax/swing/JFileChooser/6524424/bug6524424.java - test/sun/net/www/http/ChunkedInputStream/test.txt - test/tools/launcher/Arrrghs.sh Changeset: 7406833af6e4 Author: art Date: 2008-10-28 17:06 +0300 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/7406833af6e4 6758673: WeakReference leak in Window.ownedWindowList Summary: WindowDisposerRecord parent field is correctly initialized Reviewed-by: dav, ant ! src/share/classes/java/awt/Window.java + test/java/awt/Window/OwnedWindowsLeak/OwnedWindowsLeak.java Changeset: 9daa41eca0d9 Author: art Date: 2008-11-26 16:25 +0300 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/9daa41eca0d9 6699589: java/awt/EventQueue/PostEventOrderingTest.java fails Reviewed-by: dav, anthony ! src/share/classes/sun/awt/SunToolkit.java Changeset: d5bf2dd61ed5 Author: art Date: 2008-12-19 16:04 +0300 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/d5bf2dd61ed5 6773985: OutOfMemory (PermGen space) under Linux / Firefox when switching bw. applets Summary: XEmbedClientHelper is uninstalled when its embedded frame is disposed. Reviewed-by: dcherepanov, ant ! src/solaris/classes/sun/awt/X11/XEmbedClientHelper.java ! src/solaris/classes/sun/awt/X11/XEmbeddedFramePeer.java Changeset: 63d087cacbf9 Author: rkennke Date: 2009-01-13 20:04 +0100 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/63d087cacbf9 6792515: Specify awt peer's API Summary: Document AWT peer API. Reviewed-by: art, dav ! src/share/classes/java/awt/peer/ButtonPeer.java ! src/share/classes/java/awt/peer/CanvasPeer.java ! src/share/classes/java/awt/peer/CheckboxMenuItemPeer.java ! src/share/classes/java/awt/peer/CheckboxPeer.java ! src/share/classes/java/awt/peer/ChoicePeer.java ! src/share/classes/java/awt/peer/ComponentPeer.java ! src/share/classes/java/awt/peer/ContainerPeer.java ! src/share/classes/java/awt/peer/DesktopPeer.java ! src/share/classes/java/awt/peer/DialogPeer.java ! src/share/classes/java/awt/peer/FileDialogPeer.java ! src/share/classes/java/awt/peer/FontPeer.java ! src/share/classes/java/awt/peer/FramePeer.java ! src/share/classes/java/awt/peer/KeyboardFocusManagerPeer.java ! src/share/classes/java/awt/peer/LabelPeer.java ! src/share/classes/java/awt/peer/ListPeer.java ! src/share/classes/java/awt/peer/MenuBarPeer.java ! src/share/classes/java/awt/peer/MenuComponentPeer.java ! src/share/classes/java/awt/peer/MenuItemPeer.java ! src/share/classes/java/awt/peer/MenuPeer.java ! src/share/classes/java/awt/peer/MouseInfoPeer.java ! src/share/classes/java/awt/peer/PanelPeer.java ! src/share/classes/java/awt/peer/PopupMenuPeer.java ! src/share/classes/java/awt/peer/RobotPeer.java ! src/share/classes/java/awt/peer/ScrollPanePeer.java ! src/share/classes/java/awt/peer/ScrollbarPeer.java ! src/share/classes/java/awt/peer/SystemTrayPeer.java ! src/share/classes/java/awt/peer/TextAreaPeer.java ! src/share/classes/java/awt/peer/TextComponentPeer.java ! src/share/classes/java/awt/peer/TextFieldPeer.java ! src/share/classes/java/awt/peer/TrayIconPeer.java ! src/share/classes/java/awt/peer/WindowPeer.java Changeset: 127e3269ee1f Author: bae Date: 2009-01-20 19:51 +0300 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/127e3269ee1f 6551075: screenshot image taken through clipboard on W2K terminal server is shifted Reviewed-by: dav, uta ! src/windows/native/sun/windows/awt_DataTransferer.cpp Changeset: 9fa2e56c8a30 Author: art Date: 2009-01-29 14:58 +0300 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/9fa2e56c8a30 6721088: Bad window size calculation after using pack() Reviewed-by: anthony Contributed-by: Omair Majid ! src/solaris/classes/sun/awt/X11/WindowDimensions.java ! src/solaris/classes/sun/awt/X11/XDecoratedPeer.java + test/java/awt/Frame/FrameSize/TestFrameSize.java Changeset: f36e9200cb85 Author: anthony Date: 2009-02-04 11:58 +0300 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/f36e9200cb85 6797195: Forward-port enhancements for hw/lw mixing from 6u12 to 7 Reviewed-by: art, dcherepanov ! make/sun/awt/Makefile ! make/tools/sharing/classlist.linux ! make/tools/sharing/classlist.solaris ! make/tools/sharing/classlist.windows + src/share/classes/com/sun/awt/AWTUtilities.java ! src/share/classes/java/awt/Component.java ! src/share/classes/java/awt/Container.java ! src/share/classes/javax/swing/JRootPane.java + src/share/classes/sun/awt/AWTAccessor.java ! src/share/classes/sun/awt/SunToolkit.java ! src/share/classes/sun/java2d/pipe/Region.java ! src/solaris/classes/sun/awt/X11/XComponentPeer.java ! src/solaris/native/sun/xawt/XlibWrapper.c ! src/windows/classes/sun/awt/windows/WComponentPeer.java ! src/windows/native/sun/windows/awt_Component.cpp + test/java/awt/Mixing/HWDisappear.java + test/java/awt/Mixing/JButtonInGlassPane.java + test/java/awt/Mixing/LWComboBox.java + test/java/awt/Mixing/MixingOnShrinkingHWButton.java + test/java/awt/Mixing/NonOpaqueInternalFrame.java ! test/java/awt/Mixing/OpaqueTest.java ! test/java/awt/Mixing/OverlappingButtons.java Changeset: 8b96fb2d0c3a Author: lana Date: 2009-02-10 12:26 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/8b96fb2d0c3a Merge ! make/sun/xawt/mapfile-vers ! src/share/classes/java/awt/EventDispatchThread.java - src/windows/native/sun/windows/UnicowsLoader.cpp - src/windows/native/sun/windows/UnicowsLoader.h - src/windows/native/sun/windows/awt_MMStub.cpp - src/windows/native/sun/windows/awt_MMStub.h - src/windows/native/sun/windows/awt_Multimon.h - src/windows/native/sun/windows/awt_Unicode.cpp - src/windows/native/sun/windows/awt_Unicode.h - src/windows/native/sun/windows/awt_dlls.cpp - src/windows/native/sun/windows/awt_dlls.h Changeset: 5fbd9ea7def1 Author: lana Date: 2009-02-18 10:05 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/5fbd9ea7def1 Merge - src/windows/native/sun/windows/UnicowsLoader.cpp - src/windows/native/sun/windows/UnicowsLoader.h - src/windows/native/sun/windows/awt_MMStub.cpp - src/windows/native/sun/windows/awt_MMStub.h - src/windows/native/sun/windows/awt_Multimon.h - src/windows/native/sun/windows/awt_Unicode.cpp - src/windows/native/sun/windows/awt_Unicode.h - src/windows/native/sun/windows/awt_dlls.cpp - src/windows/native/sun/windows/awt_dlls.h Changeset: 8311105ea7a3 Author: xdono Date: 2009-02-19 14:08 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/8311105ea7a3 Added tag jdk7-b48 for changeset 5fbd9ea7def1 ! .hgtags Changeset: 1109646be6f6 Author: tbell Date: 2009-02-19 18:04 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/1109646be6f6 Merge - src/solaris/classes/sun/nio/ch/FileDispatcher.java - src/solaris/native/sun/nio/ch/FileDispatcher.c - src/windows/classes/sun/nio/ch/FileDispatcher.java - src/windows/native/sun/nio/ch/FileDispatcher.c Changeset: 7443278199cb Author: tbell Date: 2009-02-20 10:53 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/7443278199cb Merge From tim.bell at sun.com Sun Feb 22 14:26:30 2009 From: tim.bell at sun.com (tim.bell at sun.com) Date: Sun, 22 Feb 2009 22:26:30 +0000 Subject: [security-dev 00598]: hg: jdk7/tl/langtools: 4 new changesets Message-ID: <20090222222636.3FE9CDE0C@hg.openjdk.java.net> Changeset: fedc96614330 Author: xdono Date: 2009-02-12 14:00 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/langtools/rev/fedc96614330 Added tag jdk7-b47 for changeset 2b8f6bab2392 ! .hgtags Changeset: c53007f34195 Author: tbell Date: 2009-02-17 09:07 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/langtools/rev/c53007f34195 Merge Changeset: f4717c901346 Author: tbell Date: 2009-02-19 18:04 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/langtools/rev/f4717c901346 Merge Changeset: c4d3cbe3765a Author: tbell Date: 2009-02-21 09:58 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/langtools/rev/c4d3cbe3765a Merge From weijun.wang at sun.com Sun Feb 22 18:10:04 2009 From: weijun.wang at sun.com (weijun.wang at sun.com) Date: Mon, 23 Feb 2009 02:10:04 +0000 Subject: [security-dev 00599]: hg: jdk7/tl/jdk: 5 new changesets Message-ID: <20090223021105.E4177DE53@hg.openjdk.java.net> Changeset: 9b1bc2e28518 Author: weijun Date: 2009-02-23 10:03 +0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/9b1bc2e28518 6535697: keytool can be more flexible on format of PEM-encoded X.509 certificates Reviewed-by: vinnie ! src/share/classes/sun/security/provider/X509Factory.java ! test/java/security/cert/CertificateFactory/BadX509CertData.java + test/java/security/cert/CertificateFactory/openssl/OpenSSLCert.java + test/java/security/cert/CertificateFactory/openssl/open + test/java/security/cert/CertificateFactory/openssl/pem Changeset: 33bc32405045 Author: weijun Date: 2009-02-23 10:04 +0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/33bc32405045 6789935: cross-realm capath search error Reviewed-by: xuelei ! src/share/classes/sun/security/krb5/Realm.java + test/sun/security/krb5/ParseCAPaths.java + test/sun/security/krb5/krb5-capaths.conf Changeset: ec98d5f9b338 Author: weijun Date: 2009-02-23 10:04 +0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/ec98d5f9b338 6804045: DerValue does not accept empty OCTET STRING Reviewed-by: xuelei ! src/share/classes/sun/security/util/DerValue.java + test/sun/security/util/DerValue/EmptyValue.java Changeset: 8edcd68fb6ac Author: weijun Date: 2009-02-23 10:05 +0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/8edcd68fb6ac 6803376: BasicConstraintsExtension does not encode when (ca==false && pathLen<0) Reviewed-by: xuelei ! src/share/classes/sun/security/x509/BasicConstraintsExtension.java + test/sun/security/x509/Extensions/BCNull.java Changeset: 90ab7b4891e3 Author: weijun Date: 2009-02-23 10:05 +0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/90ab7b4891e3 6780416: New keytool commands/options: -gencert, -printcertreq, -ext Reviewed-by: xuelei, mullan ! src/share/classes/sun/security/tools/KeyTool.java ! src/share/classes/sun/security/util/Resources.java ! src/share/classes/sun/security/x509/AccessDescription.java ! src/share/classes/sun/security/x509/AuthorityInfoAccessExtension.java ! src/share/classes/sun/security/x509/AuthorityKeyIdentifierExtension.java ! src/share/classes/sun/security/x509/CertAndKeyGen.java ! src/share/classes/sun/security/x509/CertificateExtensions.java ! src/share/classes/sun/security/x509/IssuerAlternativeNameExtension.java ! src/share/classes/sun/security/x509/OIDMap.java + src/share/classes/sun/security/x509/SubjectInfoAccessExtension.java ! test/sun/security/tools/keytool/KeyToolTest.java ! test/sun/security/tools/keytool/autotest.sh + test/sun/security/tools/keytool/standard.sh From Xuelei.Fan at Sun.COM Sun Feb 22 21:07:49 2009 From: Xuelei.Fan at Sun.COM (Xuelei Fan) Date: Mon, 23 Feb 2009 13:07:49 +0800 Subject: [security-dev 00600]: code review request: 5067458 Loopback SSLSocketImpl createSocket is throwing an exception. Message-ID: <49A22F25.8060602@Sun.COM> I need to get a code review for: 5067458 Loopback SSLSocketImpl createSocket is throwing an exception. http://cr.openjdk.java.net/~xuelei/5067458/webrev.00/ The bug description: ------------------------------------------------- i'm attaching an example. in essence, i do this: SocketFactory f = SocketFactory.getDefault(); Socket s = f.createSocket( (String)null, 8080 ); and i create a loopback socket, as per the spec for java.net.Socket. the createSocket() call throws an exception, but it's an IOException which indicates "Connection refused" because i don't have anything listening on that socket. no problem there. however, then i do this: SSLSocketFactory f = (SSLSocketFactory)SSLSocketFactory.getDefault(); SSLSocket s = (SSLSocket)f.createSocket( (String)null, 8080 ); and i get an IllegalArgumentException from java.net.InetSocketAddress saying that an InetSocketAddress can't be created with a null hostname. since SSLSocket extends socket, and the spec doesn't mention any change in behavior, i would expect to get the same loopback behavior and another "Connection refused" exception. Thanks, Xuelei From Weijun.Wang at Sun.COM Sun Feb 22 21:25:04 2009 From: Weijun.Wang at Sun.COM (Max (Weijun) Wang) Date: Mon, 23 Feb 2009 13:25:04 +0800 Subject: [security-dev 00601]: Re: code review request: 5067458 Loopback SSLSocketImpl createSocket is throwing an exception. In-Reply-To: <49A22F25.8060602@Sun.COM> References: <49A22F25.8060602@Sun.COM> Message-ID: <6DB9FB9C-54E5-4830-8220-7E6F00B159BB@sun.com> Fix looks fine. BTW, SSLSocketFactory has another method createSocket(Socket s, String host, int port, boolean autoClose) How does it behave? and, will you clarify its javadoc on the host argument? Max On Feb 23, 2009, at 1:07 PM, Xuelei Fan wrote: > I need to get a code review for: > 5067458 Loopback SSLSocketImpl createSocket is throwing an > exception. > > http://cr.openjdk.java.net/~xuelei/5067458/webrev.00/ > > > The bug description: > ------------------------------------------------- > i'm attaching an example. in essence, i do this: > > SocketFactory f = SocketFactory.getDefault(); > Socket s = f.createSocket( (String)null, 8080 ); > > and i create a loopback socket, as per the spec for java.net.Socket. > the createSocket() call throws an exception, but it's an > IOException which indicates "Connection refused" because i don't > have anything listening on that socket. no problem there. however, > then i do this: > > SSLSocketFactory f = > (SSLSocketFactory)SSLSocketFactory.getDefault(); > SSLSocket s = (SSLSocket)f.createSocket( (String)null, > 8080 ); > > and i get an IllegalArgumentException from java.net.InetSocketAddress > saying that an InetSocketAddress can't be created with a null > hostname. since SSLSocket extends socket, and the spec doesn't > mention any change in behavior, i would expect to get the same > loopback behavior and another "Connection refused" exception. > > > Thanks, > Xuelei From Xuelei.Fan at Sun.COM Sun Feb 22 21:46:05 2009 From: Xuelei.Fan at Sun.COM (Xuelei Fan) Date: Mon, 23 Feb 2009 13:46:05 +0800 Subject: [security-dev 00602]: Re: code review request: 5067458 Loopback SSLSocketImpl createSocket is throwing an exception. In-Reply-To: <6DB9FB9C-54E5-4830-8220-7E6F00B159BB@sun.com> References: <49A22F25.8060602@Sun.COM> <6DB9FB9C-54E5-4830-8220-7E6F00B159BB@sun.com> Message-ID: <49A2381D.2070706@Sun.COM> Max (Weijun) Wang wrote: > Fix looks fine. > > BTW, SSLSocketFactory has another method > > createSocket(Socket s, String host, > int port, boolean autoClose) > > How does it behave? Because there is a "Socket" parameter, so no new connection will be established. The "host" parameter will only be used for hostname checking. > and, will you clarify its javadoc on the host argument? > The jdk 7 has already updated the javadoc[1], which looks like: * @param host the server host name with which to connect, or * null for the loopback address. [1]: src/share/classes/javax/net/SocketFactory.java Thanks, Andrew > Max > > > On Feb 23, 2009, at 1:07 PM, Xuelei Fan wrote: > >> I need to get a code review for: >> 5067458 Loopback SSLSocketImpl createSocket is throwing an exception. >> >> http://cr.openjdk.java.net/~xuelei/5067458/webrev.00/ >> >> >> The bug description: >> ------------------------------------------------- >> i'm attaching an example. in essence, i do this: >> >> SocketFactory f = SocketFactory.getDefault(); >> Socket s = f.createSocket( (String)null, 8080 ); >> >> and i create a loopback socket, as per the spec for java.net.Socket. >> the createSocket() call throws an exception, but it's an >> IOException which indicates "Connection refused" because i don't >> have anything listening on that socket. no problem there. however, >> then i do this: >> >> SSLSocketFactory f = >> (SSLSocketFactory)SSLSocketFactory.getDefault(); >> SSLSocket s = (SSLSocket)f.createSocket( (String)null, >> 8080 ); >> >> and i get an IllegalArgumentException from java.net.InetSocketAddress >> saying that an InetSocketAddress can't be created with a null >> hostname. since SSLSocket extends socket, and the spec doesn't >> mention any change in behavior, i would expect to get the same >> loopback behavior and another "Connection refused" exception. >> >> >> Thanks, >> Xuelei > From Weijun.Wang at Sun.COM Sun Feb 22 21:57:49 2009 From: Weijun.Wang at Sun.COM (Max (Weijun) Wang) Date: Mon, 23 Feb 2009 13:57:49 +0800 Subject: [security-dev 00603]: Re: code review request: 5067458 Loopback SSLSocketImpl createSocket is throwing an exception. In-Reply-To: <49A2381D.2070706@Sun.COM> References: <49A22F25.8060602@Sun.COM> <6DB9FB9C-54E5-4830-8220-7E6F00B159BB@sun.com> <49A2381D.2070706@Sun.COM> Message-ID: <67694322-E57F-49B6-BBDB-7ED3FA6A58BB@Sun.COM> I see. Everything is OK now. On Feb 23, 2009, at 1:46 PM, Xuelei Fan wrote: > Max (Weijun) Wang wrote: >> Fix looks fine. >> >> BTW, SSLSocketFactory has another method >> >> createSocket(Socket s, String host, >> int port, boolean autoClose) >> >> How does it behave? > Because there is a "Socket" parameter, so no new connection will be > established. The "host" parameter will only be used for hostname > checking. >> and, will you clarify its javadoc on the host argument? >> > The jdk 7 has already updated the javadoc[1], which looks like: > > * @param host the server host name with which to connect, or > * null for the loopback address. > > [1]: src/share/classes/javax/net/SocketFactory.java > > Thanks, > Andrew >> Max >> >> >> On Feb 23, 2009, at 1:07 PM, Xuelei Fan wrote: >> >>> I need to get a code review for: >>> 5067458 Loopback SSLSocketImpl createSocket is throwing an >>> exception. >>> >>> http://cr.openjdk.java.net/~xuelei/5067458/webrev.00/ >> > >>> >>> The bug description: >>> ------------------------------------------------- >>> i'm attaching an example. in essence, i do this: >>> >>> SocketFactory f = SocketFactory.getDefault(); >>> Socket s = f.createSocket( (String)null, 8080 ); >>> >>> and i create a loopback socket, as per the spec for java.net.Socket. >>> the createSocket() call throws an exception, but it's an >>> IOException which indicates "Connection refused" because i don't >>> have anything listening on that socket. no problem there. however, >>> then i do this: >>> >>> SSLSocketFactory f = >>> (SSLSocketFactory)SSLSocketFactory.getDefault(); >>> SSLSocket s = (SSLSocket)f.createSocket( (String)null, >>> 8080 ); >>> >>> and i get an IllegalArgumentException from >>> java.net.InetSocketAddress >>> saying that an InetSocketAddress can't be created with a null >>> hostname. since SSLSocket extends socket, and the spec doesn't >>> mention any change in behavior, i would expect to get the same >>> loopback behavior and another "Connection refused" exception. >>> >>> >>> Thanks, >>> Xuelei >> > From xuelei.fan at sun.com Mon Feb 23 01:42:15 2009 From: xuelei.fan at sun.com (xuelei.fan at sun.com) Date: Mon, 23 Feb 2009 09:42:15 +0000 Subject: [security-dev 00604]: hg: jdk7/tl/jdk: 5067458: Loopback SSLSocketImpl createSocket is throwing an exception Message-ID: <20090223094227.B9419DE8A@hg.openjdk.java.net> Changeset: 2a7c1a997102 Author: xuelei Date: 2009-02-23 17:32 +0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/2a7c1a997102 5067458: Loopback SSLSocketImpl createSocket is throwing an exception Summary: A null hostname should be regarded as a loopback address. Reviewed-by: weijun ! src/share/classes/sun/security/ssl/SSLSocketImpl.java + test/sun/security/ssl/com/sun/net/ssl/internal/ssl/SSLSocketImpl/LoopbackSSLSocket.java From christopher.hegarty at sun.com Mon Feb 23 02:39:42 2009 From: christopher.hegarty at sun.com (christopher.hegarty at sun.com) Date: Mon, 23 Feb 2009 10:39:42 +0000 Subject: [security-dev 00605]: hg: jdk7/tl/jdk: 6806649: synchronization bottleneck when constructing Thread subclasses Message-ID: <20090223103954.A79CADE91@hg.openjdk.java.net> Changeset: 0f4497002345 Author: chegar Date: 2009-02-23 10:36 +0000 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/0f4497002345 6806649: synchronization bottleneck when constructing Thread subclasses Summary: Replace subclass audits synchronization with ConcurrentHashMap with weakly referenced Class keys Reviewed-by: peterjones, dholmes, martin ! src/share/classes/java/lang/Thread.java From michel.mcgregor at gmail.com Mon Feb 23 01:47:42 2009 From: michel.mcgregor at gmail.com (michel) Date: Mon, 23 Feb 2009 13:17:42 +0330 Subject: [security-dev 00606]: integrate jvm with selinux Message-ID: <49a270c8.1818d00a.7873.ffff9beb@mx.google.com> Hi, I am a M.S.C student of computer science. I am researching on java security model and I decided to have an implementation of MAC(mandatory access control ) in jvm. While studying trusted os I got familiar with Selinux(Security Enhaced linux) and I surprised if we can use selinux policy in jvm. I have experience in java and j2ee but I have never done anything with inside jvm and I don`t know how can I start to change its internal Structure or if it is possible at all. Now I need your guidance to know if such manipulation is possible and is my idea (I mean using selinux security policy for jvm) feasible. Best Regards. Michel . -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mail.openjdk.java.net/pipermail/security-dev/attachments/20090223/edcac9c5/attachment.html From Thomas.Hawtin at Sun.COM Mon Feb 23 07:59:54 2009 From: Thomas.Hawtin at Sun.COM (Tom Hawtin) Date: Mon, 23 Feb 2009 15:59:54 +0000 Subject: [security-dev 00607]: Re: integrate jvm with selinux In-Reply-To: <49a270c8.1818d00a.7873.ffff9beb@mx.google.com> References: <49a270c8.1818d00a.7873.ffff9beb@mx.google.com> Message-ID: <49A2C7FA.9070309@sun.com> michel wrote: > I am researching on java security model and I decided to have an > implementation of MAC(mandatory access control ) in jvm. > > While studying trusted os I got familiar with Selinux(Security Enhaced > linux) and I surprised if we can use selinux policy in jvm. No idea if it will help, but you might be interested in the JavaOne 2007 presentation "Leveraging Solaris Trusted Extensions to Implement Platform Security Services for the Java Language". http://developers.sun.com/learning/javaoneonline/j1sessn.jsp?sessn=TS-1427&yr=2007&track=5 Tom Hawtin From Bradford.Wetmore at Sun.COM Mon Feb 23 09:19:25 2009 From: Bradford.Wetmore at Sun.COM (Brad Wetmore) Date: Mon, 23 Feb 2009 11:19:25 -0600 Subject: [security-dev 00608]: Re: integrate jvm with selinux In-Reply-To: <49A2C7FA.9070309@sun.com> References: <49a270c8.1818d00a.7873.ffff9beb@mx.google.com> <49A2C7FA.9070309@sun.com> Message-ID: <49A2DA9D.3080902@sun.com> Thanks, Tom, I was going to mention that. The question comes up every now and then, but hasn't been generally applied to the general Java community because of the lack of wide-spread underlying OS support. Generally the approach taken by most folks is to run JVM's at different levels, or develop their own multi-level context-switching using JNI's. Do check out John (dot) Weeks (at) sun (dot) com is the person most familiar with the current state of the art. Do check out his presentation mentioned by Tom, but keep in mind it's about two years old now. You might also check out the joint NSA/Sun Micro project on Flexible MAC being done in OpenSolaris: http://opensolaris.org/os/project/fmac/ Stephen Smalley and co are bringing the Flux Advanced Security Kernel (Flask) and Type Enforcement (TE) technologies OpenSolaris. Flask is a flexible form of mandatory access control (MAC) that has been gaining popularity since its introduction in SELinux, SEBSD, and SEDarwin. Some other info on Sun's Trusted Extensions: http://www.opensolaris.org/os/community/security/projects/tx/ Hope this helps. Brad P.S. I worked with John on Trusted Solaris in another life before Java. Tom Hawtin wrote: > michel wrote: > >> I am researching on java security model and I decided to have an >> implementation of MAC(mandatory access control ) in jvm. >> >> While studying trusted os I got familiar with Selinux(Security Enhaced >> linux) and I surprised if we can use selinux policy in jvm. > > No idea if it will help, but you might be interested in the JavaOne 2007 > presentation "Leveraging Solaris Trusted Extensions to Implement > Platform Security Services for the Java Language". > > http://developers.sun.com/learning/javaoneonline/j1sessn.jsp?sessn=TS-1427&yr=2007&track=5 > > > Tom Hawtin From xueming.shen at sun.com Mon Feb 23 21:16:20 2009 From: xueming.shen at sun.com (xueming.shen at sun.com) Date: Tue, 24 Feb 2009 05:16:20 +0000 Subject: [security-dev 00609]: hg: jdk7/tl/jdk: 6350801: Add support for named (instead of numbered) capture groups in regular expression; ... Message-ID: <20090224051632.3F13FE019@hg.openjdk.java.net> Changeset: 27e1141d436c Author: sherman Date: 2009-02-23 21:06 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/27e1141d436c 6350801: Add support for named (instead of numbered) capture groups in regular expression 6676425: Opensource unit/regression tests for java.util.regex Summary: Added "named capturing group" into regex. Moved most of reg/unit tests to openjdk. Reviewed-by: alanb, okutsu ! src/share/classes/java/util/regex/Matcher.java ! src/share/classes/java/util/regex/Pattern.java + test/java/util/regex/BMPTestCases.txt + test/java/util/regex/RegExTest.java + test/java/util/regex/SupplementaryTestCases.txt + test/java/util/regex/TestCases.txt From Weijun.Wang at Sun.COM Tue Feb 24 00:58:06 2009 From: Weijun.Wang at Sun.COM (Max (Weijun) Wang) Date: Tue, 24 Feb 2009 16:58:06 +0800 Subject: [security-dev 00610]: RFC for jarsigner: more warning, more concise output Message-ID: <06B1B2C9-B9D5-4076-995E-18645D991D5C@sun.com> Hi All Looking at this bug now: jarsigner needs enhanced cert validation(options) http://bugs.sun.com/view_bug.do?bug_id=6802846 I've exchanged some emails with the bug reporter (BCC'ed :) ). Basically we found these problems with the current jarsigner: 1. Does not care much about warnings. The exit code is almost always 0 2. Too verbose output, esp when there're many entries in the jar Therefore, I'm suggesting these enhancements: 1. Add -check option, which means "treat warning as error". The exit code will be 0:OK, -1:verify error, or, OR-value of various 2^n (n=0,1,..) which maps to predefined warnings. More warnings will be added for the criteria proposed by the bug reporter. 2. Refine output. Group entries with the same signer info, and, in the simplest mode, only output a summary. Precisely, before the fix, the output for -verify is -- 1) When there's no more option: Jar verified 2) When there's -verbose -certs smk A.class Certificate A (CN=A, OU=B) Fingerprint 90:90:90:90:90:90:90:90:90:90:90:90:90:90:90:90:90:90 smk B.class Certificate A (CN=A, OU=B) Fingerprint 90:90:90:90:90:90:90:90:90:90:90:90:90:90:90:90:90:90 ... After the fix -- 1) When there's no more option, we add a summary: smk A.class (and 1 more) Jar verified 2) When there's -verbose -certs, we groups entries: smk A.class smk B.class ... Certificate A (CN=A, OU=B) Fingerprint 90:90:90:90:90:90:90:90:90:90:90:90:90:90:90:90:90:90 3) When there's -certs (not available in the old version), we have smk A.class (and 1 more) Certificate A (CN=A, OU=B) Fingerprint 90:90:90:90:90:90:90:90:90:90:90:90:90:90:90:90:90:90 Here, I guess the 3)rd option would be the more useful one. Any suggestions? Thanks Max From alan.bateman at sun.com Tue Feb 24 06:02:08 2009 From: alan.bateman at sun.com (alan.bateman at sun.com) Date: Tue, 24 Feb 2009 14:02:08 +0000 Subject: [security-dev 00611]: hg: jdk7/tl/jdk: 3 new changesets Message-ID: <20090224140250.5D2B3E04F@hg.openjdk.java.net> Changeset: 910f9cceb0f8 Author: alanb Date: 2009-02-24 09:11 +0000 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/910f9cceb0f8 6808647: (file) Paths.get("C:").newDirectoryStream() iterates over Path elements with additional slash [win] 6808648: (file) Files.walkFileTree should obtain file attributes during iteration [win] Reviewed-by: sherman ! make/java/nio/FILES_java.gmk ! src/share/classes/java/nio/file/FileTreeWalker.java + src/share/classes/sun/nio/fs/BasicFileAttributesHolder.java ! src/windows/classes/sun/nio/fs/WindowsDirectoryStream.java ! src/windows/classes/sun/nio/fs/WindowsFileAttributes.java ! src/windows/classes/sun/nio/fs/WindowsFileSystem.java ! src/windows/classes/sun/nio/fs/WindowsNativeDispatcher.java ! src/windows/classes/sun/nio/fs/WindowsPath.java ! src/windows/native/sun/nio/fs/WindowsNativeDispatcher.c + test/java/nio/file/DirectoryStream/DriveLetter.java Changeset: c7f39995fcf4 Author: alanb Date: 2009-02-24 11:31 +0000 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/c7f39995fcf4 6809132: (file) Javadoc style and consistency issues Reviewed-by: vinnie Contributed-by: cquinn at google.com ! src/share/classes/java/nio/file/AccessDeniedException.java ! src/share/classes/java/nio/file/AtomicMoveNotSupportedException.java ! src/share/classes/java/nio/file/DirectoryNotEmptyException.java ! src/share/classes/java/nio/file/DirectoryStream.java ! src/share/classes/java/nio/file/DirectoryStreamFilters.java ! src/share/classes/java/nio/file/FileAction.java ! src/share/classes/java/nio/file/FileAlreadyExistsException.java ! src/share/classes/java/nio/file/FileStore.java ! src/share/classes/java/nio/file/FileSystemAlreadyExistsException.java ! src/share/classes/java/nio/file/FileSystemException.java ! src/share/classes/java/nio/file/FileSystemNotFoundException.java ! src/share/classes/java/nio/file/FileSystems.java ! src/share/classes/java/nio/file/FileVisitor.java ! src/share/classes/java/nio/file/InvalidPathException.java ! src/share/classes/java/nio/file/LinkPermission.java ! src/share/classes/java/nio/file/NoSuchFileException.java ! src/share/classes/java/nio/file/NotDirectoryException.java ! src/share/classes/java/nio/file/NotLinkException.java ! src/share/classes/java/nio/file/Path.java ! src/share/classes/java/nio/file/PathMatcher.java ! src/share/classes/java/nio/file/Paths.java ! src/share/classes/java/nio/file/ProviderMismatchException.java ! src/share/classes/java/nio/file/ProviderNotFoundException.java ! src/share/classes/java/nio/file/SecureDirectoryStream.java ! src/share/classes/java/nio/file/SimpleFileVisitor.java ! src/share/classes/java/nio/file/WatchEvent.java ! src/share/classes/java/nio/file/WatchKey.java ! src/share/classes/java/nio/file/WatchService.java ! src/share/classes/java/nio/file/Watchable.java ! src/share/classes/java/nio/file/attribute/AclEntry.java ! src/share/classes/java/nio/file/attribute/AclFileAttributeView.java ! src/share/classes/java/nio/file/attribute/AttributeView.java ! src/share/classes/java/nio/file/attribute/BasicFileAttributeView.java ! src/share/classes/java/nio/file/attribute/BasicFileAttributes.java ! src/share/classes/java/nio/file/attribute/DosFileAttributeView.java ! src/share/classes/java/nio/file/attribute/DosFileAttributes.java ! src/share/classes/java/nio/file/attribute/FileOwnerAttributeView.java ! src/share/classes/java/nio/file/attribute/PosixFileAttributeView.java ! src/share/classes/java/nio/file/attribute/PosixFileAttributes.java ! src/share/classes/java/nio/file/attribute/PosixFilePermissions.java ! src/share/classes/java/nio/file/attribute/UserPrincipalLookupService.java ! src/share/classes/java/nio/file/attribute/UserPrincipalNotFoundException.java ! src/share/classes/java/nio/file/package-info.java Changeset: abe5e7125bd3 Author: alanb Date: 2009-02-24 11:33 +0000 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/abe5e7125bd3 Merge From kevin.walls at sun.com Tue Feb 24 06:27:05 2009 From: kevin.walls at sun.com (kevin.walls at sun.com) Date: Tue, 24 Feb 2009 14:27:05 +0000 Subject: [security-dev 00612]: hg: jdk7/tl/jdk: 6599383: Unable to open zip files more than 2GB in size Message-ID: <20090224142722.CF9F0E05C@hg.openjdk.java.net> Changeset: dc237aecf7cf Author: kevinw Date: 2009-02-24 14:22 +0000 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/dc237aecf7cf 6599383: Unable to open zip files more than 2GB in size Reviewed-by: alanb ! src/share/native/java/util/zip/zip_util.c ! src/share/native/java/util/zip/zip_util.h + test/java/util/zip/ZipFile/LargeZipFile.java From martinrb at google.com Tue Feb 24 14:06:05 2009 From: martinrb at google.com (martinrb at google.com) Date: Tue, 24 Feb 2009 22:06:05 +0000 Subject: [security-dev 00613]: hg: jdk7/tl/jdk: 6803402: Race condition in AbstractQueuedSynchronizer Message-ID: <20090224220625.3FD3EE0BF@hg.openjdk.java.net> Changeset: 266358f13a6f Author: dl Date: 2009-02-24 14:01 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/266358f13a6f 6803402: Race condition in AbstractQueuedSynchronizer Summary: Read fields in reverse initialization order Reviewed-by: martin ! src/share/classes/java/util/concurrent/locks/AbstractQueuedLongSynchronizer.java ! src/share/classes/java/util/concurrent/locks/AbstractQueuedSynchronizer.java From joe.darcy at sun.com Tue Feb 24 17:20:40 2009 From: joe.darcy at sun.com (joe.darcy at sun.com) Date: Wed, 25 Feb 2009 01:20:40 +0000 Subject: [security-dev 00614]: hg: jdk7/tl/langtools: 6501749: 6501749 Filer should state connection between created files and root elements Message-ID: <20090225012042.65D7CE0EA@hg.openjdk.java.net> Changeset: 435d5d9bb87d Author: darcy Date: 2009-02-24 17:16 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/langtools/rev/435d5d9bb87d 6501749: 6501749 Filer should state connection between created files and root elements Reviewed-by: jjg ! src/share/classes/javax/annotation/processing/Filer.java From joe.darcy at sun.com Tue Feb 24 17:52:23 2009 From: joe.darcy at sun.com (joe.darcy at sun.com) Date: Wed, 25 Feb 2009 01:52:23 +0000 Subject: [security-dev 00615]: hg: jdk7/tl/langtools: 6498938: Faulty comparison of TypeMirror objects in getElementsAnnotatedWith implementation Message-ID: <20090225015225.63EB3E0EF@hg.openjdk.java.net> Changeset: 1fbc1cc6e260 Author: darcy Date: 2009-02-24 17:48 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/langtools/rev/1fbc1cc6e260 6498938: Faulty comparison of TypeMirror objects in getElementsAnnotatedWith implementation Reviewed-by: jjg ! src/share/classes/com/sun/tools/javac/processing/JavacRoundEnvironment.java + test/tools/javac/processing/environment/round/Foo.java ! test/tools/javac/processing/environment/round/TestElementsAnnotatedWith.java From kevin.walls at sun.com Wed Feb 25 06:37:39 2009 From: kevin.walls at sun.com (kevin.walls at sun.com) Date: Wed, 25 Feb 2009 14:37:39 +0000 Subject: [security-dev 00616]: hg: jdk7/tl/jdk: 2 new changesets Message-ID: <20090225143807.82326E137@hg.openjdk.java.net> Changeset: f9c187839d72 Author: kevinw Date: 2009-02-24 19:03 +0000 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/f9c187839d72 6809463: Missing license header in test LargeZipFile.java Reviewed-by: alanb ! test/java/util/zip/ZipFile/LargeZipFile.java Changeset: dde3fe2e8164 Author: kevinw Date: 2009-02-25 14:32 +0000 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/dde3fe2e8164 Merge From m.j.tandy at warwick.ac.uk Wed Feb 25 11:49:58 2009 From: m.j.tandy at warwick.ac.uk (Michael Tandy) Date: Wed, 25 Feb 2009 19:49:58 +0000 Subject: [security-dev 00617]: Re: SNI support in JSSE Message-ID: <302aa0340902251149k2c373787h95cae3026e5c4a1d@mail.gmail.com> Would you foresee any problems with ClientHandshaker getting the server's name from Handshaker.getHostSE() ? I have a working implementation doing that at the moment. ServerHandshaker would be more complicated as you'd have to make sure the connection ended up at the right virtual host, to do things properly. That would mean modifying interfaces, which we can't do in JDK7. What would be your opinion about including client support but not server support? There's also the issue that using ProtocolVersion SSL20Hello (which is on in the default ProtocolList) breaks SNI support because the 2.0 hello message doesn't support hello extensions. So if you're using (for example) an SSLSocketFactoryImpl, to get SNI support you have to wrap it in another SSLSocketFactory to call setEnabledProtocols on each SSLSocket and disable SSL20Hello. An example of this situation is using an HttpsURLConnection. I guess it would be OK to ask users who wanted SNI support to do that, though. What do you think? Michael Tandy Xuelei Fan wrote: > It is appreciate you'd like to investigate it. > > If you need more information about the current framework of TLS/JSSE, > please refer to JSSE reference guide[7]: > > Currently, there is no way to define a plug-in-able extension(that's my > plan in a long run), so if one want to implement a extension, he has to > hard-coded the handshaking, on both client side[1] and server side[2]. > > For SNI, there are requirements: > 1. For the client side, it meight need a public API in order to set the > peer hostname, otherwise get the host name from the request URI. > 2. For the server side, the simplest case is to choose a trust > certificate for the requested hostname. > 3. For virtual host and virtual machine, the server would like forward > IP or proxy a connection to the virtual one, so one need to define a > callback in order to provide the flexibility that the users could > customized their behaviors while getting a SNI extension. > > In order to meet those requirements on the current framework, one should: > 1. modify the clientHello HandshakeMessage [3], support the SNI extensions. > 2. modify the trust manager[4] and the key manager[5], get them select > the proper certificate according to the SNI. > 4. modify the ClientHandshaker[1] and ServerHandshaker[2]. > 3. add new public API to SSLSocket, or a SSL parameter to SSLSocket[6], > indicate what behaviors should be taken when get such a SNI extension. > > However, because it is not possible to add a new public API at JDK7, > maybe you need to hard coded the behaviors while get a SNI at > Serverhandshaker.[2]. > > JDK 6 have support ECC extension, I think maybe you could get some hints > from there.[8][1][2] > > Thanks, > Xuelei > > [1]: > http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/ClientHandshaker.java > [2]: > http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/ServerHandshaker.java > [3]: > http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/HandshakeMessage.java#ClientHello > [4]: > http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/X509TrustManagerImpl.java > [5]: > http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/X509KeyManagerImpl.java > [6]: > http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/javax/net/ssl/SSLSocket.java > [7]: > http://java.sun.com/javase/6/docs/technotes/guides/security/jsse/JSSERefGuide.html > [8]: > http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/HandshakeMessage.java > > > Xuelei Fan wrote: > > No, and there is no plan to support it at jdk7 at present. > > > > Xuelei > > > > Richard Stupek wrote: > >> Is SNI (Server name indication) slated to be in JDK7? > > From michaeltandy at googlemail.com Wed Feb 25 12:51:59 2009 From: michaeltandy at googlemail.com (Michael Tandy) Date: Wed, 25 Feb 2009 20:51:59 +0000 Subject: [security-dev 00618]: Re: SNI support in JSSE Message-ID: <302aa0340902251251v4f9bccc0u639a672a1cd12222@mail.gmail.com> Would you foresee any problems with ClientHandshaker getting the server's name from Handshaker.getHostSE() ? I have a working implementation doing that at the moment. ServerHandshaker would be more complicated as you'd have to make sure the connection ended up at the right virtual host, to do things properly. That would mean modifying interfaces, which we can't do in JDK7. What would be your opinion about including client support but not server support? There's also the issue that using ProtocolVersion SSL20Hello (which is on in the default ProtocolList) breaks SNI support because the 2.0 hello message doesn't support hello extensions. So if you're using (for example) an SSLSocketFactoryImpl, to get SNI support you have to wrap it in another SSLSocketFactory to call setEnabledProtocols on each SSLSocket and disable SSL20Hello. An example of this situation is using an HttpsURLConnection. I guess it would be OK to ask users who wanted SNI support to do that, though. What do you think? Michael Tandy Xuelei Fan wrote: > It is appreciate you'd like to investigate it. > > If you need more information about the current framework of TLS/JSSE, > please refer to JSSE reference guide[7]: > > Currently, there is no way to define a plug-in-able extension(that's my > plan in a long run), so if one want to implement a extension, he has to > hard-coded the handshaking, on both client side[1] and server side[2]. > > For SNI, there are requirements: > 1. For the client side, it meight need a public API in order to set the > peer hostname, otherwise get the host name from the request URI. > 2. For the server side, the simplest case is to choose a trust > certificate for the requested hostname. > 3. For virtual host and virtual machine, the server would like forward > IP or proxy a connection to the virtual one, so one need to define a > callback in order to provide the flexibility that the users could > customized their behaviors while getting a SNI extension. > > In order to meet those requirements on the current framework, one should: > 1. modify the clientHello HandshakeMessage [3], support the SNI extensions. > 2. modify the trust manager[4] and the key manager[5], get them select > the proper certificate according to the SNI. > 4. modify the ClientHandshaker[1] and ServerHandshaker[2]. > 3. add new public API to SSLSocket, or a SSL parameter to SSLSocket[6], > indicate what behaviors should be taken when get such a SNI extension. > > However, because it is not possible to add a new public API at JDK7, > maybe you need to hard coded the behaviors while get a SNI at > Serverhandshaker.[2]. > > JDK 6 have support ECC extension, I think maybe you could get some hints > from there.[8][1][2] > > Thanks, > Xuelei > > [1]: > http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/ClientHandshaker.java > [2]: > http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/ServerHandshaker.java > [3]: > http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/HandshakeMessage.java#ClientHello > [4]: > http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/X509TrustManagerImpl.java > [5]: > http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/X509KeyManagerImpl.java > [6]: > http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/javax/net/ssl/SSLSocket.java > [7]: > http://java.sun.com/javase/6/docs/technotes/guides/security/jsse/JSSERefGuide.html > [8]: > http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/HandshakeMessage.java > > > Xuelei Fan wrote: > > No, and there is no plan to support it at jdk7 at present. > > > > Xuelei > > > > Richard Stupek wrote: > >> Is SNI (Server name indication) slated to be in JDK7? > > From michel.mcgregor at gmail.com Thu Feb 26 04:39:20 2009 From: michel.mcgregor at gmail.com (michel) Date: Thu, 26 Feb 2009 16:09:20 +0330 Subject: [security-dev 00619]: some question about jvm Message-ID: <49a68d7e.0506d00a.533d.ffff928e@mx.google.com> Hi every body, I am new to your group, and I have some questions about jvm and its security model. I want to intercept method calls or object creation in jvm and do call some os library before it, now I would like to Know if I can do this by JNI(java native interface). Indeed I have seen that jvm 1.6.1 distribution contains a "src" folder which includes source code for java API, But I don`t know whether it contains c++ source for jvm itself or not. Any way I am going to have some manipulation on jvm security but I don`t know where to start from. Thanks before. Best Regards, Michel. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mail.openjdk.java.net/pipermail/security-dev/attachments/20090226/244623c0/attachment.html From mandy.chung at sun.com Thu Feb 26 14:41:55 2009 From: mandy.chung at sun.com (mandy.chung at sun.com) Date: Thu, 26 Feb 2009 22:41:55 +0000 Subject: [security-dev 00620]: hg: jdk7/tl/jdk: 6801467: Defer get the launcher resource bundle until it's needed Message-ID: <20090226224206.F0ADDE213@hg.openjdk.java.net> Changeset: 2fb53eb9df14 Author: mchung Date: 2009-02-26 14:36 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/2fb53eb9df14 6801467: Defer get the launcher resource bundle until it's needed Summary: Lazily initialize the launcher resource bundle Reviewed-by: ksrini, darcy ! src/share/classes/sun/launcher/LauncherHelper.java From Xuelei.Fan at Sun.COM Thu Feb 26 17:23:11 2009 From: Xuelei.Fan at Sun.COM (Xuelei Fan) Date: Fri, 27 Feb 2009 09:23:11 +0800 Subject: [security-dev 00621]: Re: SNI support in JSSE In-Reply-To: <302aa0340902251149k2c373787h95cae3026e5c4a1d@mail.gmail.com> References: <302aa0340902251149k2c373787h95cae3026e5c4a1d@mail.gmail.com> Message-ID: <49A7407F.4010702@Sun.COM> Michael Tandy wrote: > Would you foresee any problems with ClientHandshaker getting the > server's name from Handshaker.getHostSE() ? I have a working > implementation doing that at the moment. > > For a SSLSocket, if it is created with a explicit hostname (such as SSLSocketFactory.createSocket("the-target-server.sun.com", 443)), the Handshaker.getHostSE() will return the explicit hostname, otherwise (such as SSLSocketFactory.createSocket(InetAddress addr, int port)), will try to get it from a the local system configured name server according to IP address, if cannot get a resolved name, IP address will be use. For SSLEngine, it is set by SSLEngine.setPeerHost(). Because the potential requirement is to connect to a virtual host, which likely share the same IP address with many hostnames(such as server-1.sun.com, server-1.example.com, etc).. So the client must use a hostname instead of IPaddress as the target host. If IP address used, the behaviors vary according to the name server. > ServerHandshaker would be more complicated as you'd have to make sure > the connection ended up at the right virtual host, to do things > properly. That would mean modifying interfaces, which we can't do in > JDK7. What would be your opinion about including client support but > not server support? > > It's fine. But I have a question, how could you enable the SNI extension for a client? Do you want to enable it all the time? > There's also the issue that using ProtocolVersion SSL20Hello (which is > on in the default ProtocolList) breaks SNI support because the 2.0 > hello message doesn't support hello extensions. Maybe we need to make improvement, when enabled extensions, the SSLv2Hello should be disabled. Will look into this. > So if you're using > (for example) an SSLSocketFactoryImpl, to get SNI support you have to > wrap it in another SSLSocketFactory to call setEnabledProtocols on > each SSLSocket and disable SSL20Hello. An example of this situation is > using an HttpsURLConnection. I guess it would be OK to ask users who > wanted SNI support to do that, though. What do you think? > > Yes, need to disable SSLv2Hello. But you can also choose to disable SSLv2Hello when enabling SNI extension in the implementation. Andrew > Michael Tandy > > > Xuelei Fan wrote: > >> It is appreciate you'd like to investigate it. >> >> If you need more information about the current framework of TLS/JSSE, >> please refer to JSSE reference guide[7]: >> >> Currently, there is no way to define a plug-in-able extension(that's my >> plan in a long run), so if one want to implement a extension, he has to >> hard-coded the handshaking, on both client side[1] and server side[2]. >> >> For SNI, there are requirements: >> 1. For the client side, it meight need a public API in order to set the >> peer hostname, otherwise get the host name from the request URI. >> 2. For the server side, the simplest case is to choose a trust >> certificate for the requested hostname. >> 3. For virtual host and virtual machine, the server would like forward >> IP or proxy a connection to the virtual one, so one need to define a >> callback in order to provide the flexibility that the users could >> customized their behaviors while getting a SNI extension. >> >> In order to meet those requirements on the current framework, one should: >> 1. modify the clientHello HandshakeMessage [3], support the SNI extensions. >> 2. modify the trust manager[4] and the key manager[5], get them select >> the proper certificate according to the SNI. >> 4. modify the ClientHandshaker[1] and ServerHandshaker[2]. >> 3. add new public API to SSLSocket, or a SSL parameter to SSLSocket[6], >> indicate what behaviors should be taken when get such a SNI extension. >> >> However, because it is not possible to add a new public API at JDK7, >> maybe you need to hard coded the behaviors while get a SNI at >> Serverhandshaker.[2]. >> >> JDK 6 have support ECC extension, I think maybe you could get some hints >> from there.[8][1][2] >> >> Thanks, >> Xuelei >> >> [1]: >> http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/ClientHandshaker.java >> [2]: >> http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/ServerHandshaker.java >> [3]: >> http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/HandshakeMessage.java#ClientHello >> [4]: >> http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/X509TrustManagerImpl.java >> [5]: >> http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/X509KeyManagerImpl.java >> [6]: >> http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/javax/net/ssl/SSLSocket.java >> [7]: >> http://java.sun.com/javase/6/docs/technotes/guides/security/jsse/JSSERefGuide.html >> [8]: >> http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/HandshakeMessage.java >> >> >> Xuelei Fan wrote: >> >>> No, and there is no plan to support it at jdk7 at present. >>> >>> Xuelei >>> >>> Richard Stupek wrote: >>> >>>> Is SNI (Server name indication) slated to be in JDK7? >>>> From jonathan.gibbons at sun.com Thu Feb 26 18:31:21 2009 From: jonathan.gibbons at sun.com (jonathan.gibbons at sun.com) Date: Fri, 27 Feb 2009 02:31:21 +0000 Subject: [security-dev 00622]: hg: jdk7/tl/corba: 6809563: corba build in JDK uses invalid bootclasspath for javah Message-ID: <20090227023122.14A42E25F@hg.openjdk.java.net> Changeset: 9e6c48c2582d Author: jjg Date: 2009-02-26 18:28 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/corba/rev/9e6c48c2582d 6809563: corba build in JDK uses invalid bootclasspath for javah Reviewed-by: ohair ! make/common/shared/Defs-java.gmk From jonathan.gibbons at sun.com Thu Feb 26 18:35:40 2009 From: jonathan.gibbons at sun.com (jonathan.gibbons at sun.com) Date: Fri, 27 Feb 2009 02:35:40 +0000 Subject: [security-dev 00623]: hg: jdk7/tl/corba: 6810915: Sun proprietary warnings in JDK build Message-ID: <20090227023541.747B5E26C@hg.openjdk.java.net> Changeset: db35452e8965 Author: jjg Date: 2009-02-26 18:32 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/corba/rev/db35452e8965 6810915: Sun proprietary warnings in JDK build Reviewed-by: ohair ! make/Makefile ! make/common/shared/Defs-java.gmk From Xuelei.Fan at Sun.COM Thu Feb 26 18:52:39 2009 From: Xuelei.Fan at Sun.COM (Xuelei Fan) Date: Fri, 27 Feb 2009 10:52:39 +0800 Subject: [security-dev 00624]: code review request: 4773451 Support IP address based virtual hosting in default KeyManager implementation Message-ID: <49A75577.2070709@Sun.COM> I need to get a code review for: 4773451 Support IP address based virtual hosting in default KeyManager implementation http://cr.openjdk.java.net/~xuelei/4773451/webrev.00/ Thanks, Xuelei The bug description: ------------------------------------------------- When using multiple SSLServerSockets with each listening on it's own IP address, the JVM is not correctly sending the correct certificate to the connecting client's web browser. Regardless of which domain/IP the browser attempts to connect to, the JVM always maps the domain/IP for the first listed certificate in the keystore. Example: domains abc.com, def.com, ghi.com each have their own self-signed certificate in keystore , each created using 'keytool -genkey' and created in same order. Each also being domain mapped to their own IP address and served through their own SSLServerSocket. When a client attempts to connect to abc.com, all is well. The correct certificate is presented to the client and connection succeeds. However, when the client attempt to connect to either def.com or ghi.com, they are presented with the certificate for abc.com. If client connecting to def.com or ghi.com elects to accept that incorrect certificate, connection succeeds to proper site, despite use of incorrect certificate. So correct domain/IP mapping is not the issue. From jonathan.gibbons at sun.com Thu Feb 26 18:54:47 2009 From: jonathan.gibbons at sun.com (jonathan.gibbons at sun.com) Date: Fri, 27 Feb 2009 02:54:47 +0000 Subject: [security-dev 00625]: hg: jdk7/tl/jdk: 6810915: Sun proprietary warnings in JDK build Message-ID: <20090227025459.28062E271@hg.openjdk.java.net> Changeset: 4f0b6455a977 Author: jjg Date: 2009-02-26 18:51 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/4f0b6455a977 6810915: Sun proprietary warnings in JDK build Reviewed-by: ohair ! make/common/shared/Defs-java.gmk ! make/docs/Makefile ! make/javax/swing/beaninfo/SwingBeans.gmk From michaeltandy at googlemail.com Fri Feb 27 02:21:10 2009 From: michaeltandy at googlemail.com (Michael Tandy) Date: Fri, 27 Feb 2009 10:21:10 +0000 Subject: [security-dev 00626]: Re: SNI support in JSSE In-Reply-To: <49A7407F.4010702@Sun.COM> References: <302aa0340902251149k2c373787h95cae3026e5c4a1d@mail.gmail.com> <49A7407F.4010702@Sun.COM> Message-ID: <302aa0340902270221ndf999ccv1be4e977669337af@mail.gmail.com> >> Would you foresee any problems with ClientHandshaker getting the >> server's name from Handshaker.getHostSE() ? [...] > For a SSLSocket, if it is created with a explicit hostname (such as > SSLSocketFactory.createSocket("the-target-server.sun.com", 443)), the > Handshaker.getHostSE() will return the explicit hostname, otherwise (such as > SSLSocketFactory.createSocket(InetAddress addr, int port)), will try to get > it from a the local system configured name server according to IP address, > if cannot get a resolved name, IP address will be use. Isn't getHostSE() what ClientHandshaker passes to X509ExtendedTrustManager to verify the certificate matches the hostname? So if we connect to a server by IP address, and it returns a certificate which doesn't match the resolved name, won't that cause a CertificateException anyway? In other words, if we request the certificate corresponding to the resolved name, doesn't that mean we are requesting the only certificate which doesn't cause a CertificateException? >> What would be your opinion about including client support but >> not server support? > > It's fine. But I have a question, how could you enable the SNI extension for > a client? Do you want to enable it all the time? I was thinking we could enable it all the time - it's standard behaviour so servers shouldn't have a problem with it. Firefox, for example, always sends it. Otherwise, we could add a ProtocolVersion for SNI so users can enable or disable it with setEnabledProtocols. That way we wouldn't need a new public API. What do you think? Michael >> >> There's also the issue that using ProtocolVersion SSL20Hello (which is >> on in the default ProtocolList) breaks SNI support because the 2.0 >> hello message doesn't support hello extensions. > > Maybe we need to make improvement, when enabled extensions, the SSLv2Hello > should be disabled. ?Will look into this. >> >> ?So if you're using >> (for example) an SSLSocketFactoryImpl, to get SNI support you have to >> wrap it in another SSLSocketFactory to call setEnabledProtocols on >> each SSLSocket and disable SSL20Hello. An example of this situation is >> using an HttpsURLConnection. I guess it would be OK to ask users who >> wanted SNI support to do that, though. What do you think? >> >> > > Yes, need to disable SSLv2Hello. But you can also choose to disable > SSLv2Hello when enabling SNI extension in the implementation. > > > Andrew >> >> Michael Tandy >> >> >> Xuelei Fan wrote: >> >>> >>> It is appreciate you'd like to investigate it. >>> >>> If you need more information about the current framework of TLS/JSSE, >>> please refer to JSSE reference guide[7]: >>> >>> Currently, there is no way to define a plug-in-able extension(that's my >>> plan in a long run), so if one want to implement a extension, he has to >>> hard-coded the handshaking, on both client side[1] and server side[2]. >>> >>> For SNI, there are requirements: >>> 1. For the client side, it meight need a public API in order to set the >>> peer hostname, otherwise get the host name from the request URI. >>> 2. For the server side, the simplest case is to choose a trust >>> certificate for the requested hostname. >>> 3. For virtual host and virtual machine, the server would like forward >>> IP or proxy a connection to the virtual one, so one need to define a >>> callback in order to provide the flexibility that the users could >>> customized their behaviors while getting a SNI extension. >>> >>> In order to meet those requirements on the current framework, one should: >>> 1. modify the clientHello HandshakeMessage [3], support the SNI >>> extensions. >>> 2. modify the trust manager[4] and the key manager[5], get them select >>> the proper certificate according to the SNI. >>> 4. modify the ClientHandshaker[1] and ServerHandshaker[2]. >>> 3. add new public API to SSLSocket, or a SSL parameter to SSLSocket[6], >>> indicate what behaviors should be taken when get such a SNI extension. >>> >>> However, because it is not possible to add a new public API at JDK7, >>> maybe you need to hard coded the behaviors while get a SNI at >>> Serverhandshaker.[2]. >>> >>> JDK 6 have support ECC extension, I think maybe you could get some hints >>> from there.[8][1][2] >>> >>> Thanks, >>> Xuelei >>> >>> [1]: >>> >>> http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/ClientHandshaker.java >>> [2]: >>> >>> http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/ServerHandshaker.java >>> [3]: >>> >>> http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/HandshakeMessage.java#ClientHello >>> [4]: >>> >>> http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/X509TrustManagerImpl.java >>> [5]: >>> >>> http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/X509KeyManagerImpl.java >>> [6]: >>> >>> http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/javax/net/ssl/SSLSocket.java >>> [7]: >>> >>> http://java.sun.com/javase/6/docs/technotes/guides/security/jsse/JSSERefGuide.html >>> [8]: >>> >>> http://www.jiema.org/xref/openjdk/jdk7/jdk/src/share/classes/sun/security/ssl/HandshakeMessage.java >>> >>> >>> >>> Xuelei Fan wrote: >>> >>>> >>>> No, and there is no plan to support it at jdk7 at present. >>>> >>>> Xuelei >>>> >>>> Richard Stupek wrote: >>>> >>>>> >>>>> Is SNI (Server name indication) slated to be in JDK7? >>>>> > > From Xuelei.Fan at Sun.COM Fri Feb 27 07:38:21 2009 From: Xuelei.Fan at Sun.COM (Xuelei Fan) Date: Fri, 27 Feb 2009 23:38:21 +0800 Subject: [security-dev 00627]: Re: SNI support in JSSE In-Reply-To: <302aa0340902270221ndf999ccv1be4e977669337af@mail.gmail.com> References: <302aa0340902251149k2c373787h95cae3026e5c4a1d@mail.gmail.com> <49A7407F.4010702@Sun.COM> <302aa0340902270221ndf999ccv1be4e977669337af@mail.gmail.com> Message-ID: <49A808ED.6020407@Sun.COM> An HTML attachment was scrubbed... URL: http://mail.openjdk.java.net/pipermail/security-dev/attachments/20090227/171c847f/attachment.html From michaeltandy at googlemail.com Fri Feb 27 10:19:48 2009 From: michaeltandy at googlemail.com (Michael Tandy) Date: Fri, 27 Feb 2009 18:19:48 +0000 Subject: [security-dev 00628]: Re: SNI support in JSSE In-Reply-To: <49A808ED.6020407@Sun.COM> References: <302aa0340902251149k2c373787h95cae3026e5c4a1d@mail.gmail.com> <49A7407F.4010702@Sun.COM> <302aa0340902270221ndf999ccv1be4e977669337af@mail.gmail.com> <49A808ED.6020407@Sun.COM> Message-ID: <302aa0340902271019p3c7a751ayf1ffb88535562fa1@mail.gmail.com> > We can enable it always, I think, just as what the EC extension do now. But > we need to consider a very small part of old servers which are not ready to > read any extension data field, so we might need a approach to disable all > extensions. Maybe adding a new system property to switch the extension is > not so bad . (Personally, I dislike using system property) Well, for old servers people have the option to use the SSL v2 Hello, in which case the extensions don't get sent. Do you think it's likely a server would require SSL3 or TLS, but wouldn't support hello extensions? From Sean.Mullan at Sun.COM Fri Feb 27 11:14:39 2009 From: Sean.Mullan at Sun.COM (Sean Mullan) Date: Fri, 27 Feb 2009 14:14:39 -0500 Subject: [security-dev 00629]: New W3C XML Security Specifications Message-ID: <49A83B9F.90201@sun.com> The W3C XML Security Working Group has just released 7 first public working drafts of new XML Signature and Encryption specifications. If you use or are interested in JSR 105 (Java XML Digital Signature API) or JSR 106 (Java XML Encryption API), please try to review them and send any comments you have to the XML Security working group. These drafts include revisions to XML Signature and Encryption to support new algorithms, a new document proposing simplifications to the XML Signature Transform model to enhance performance and security, and several other new specifications. Here is the announcement from the W3C Working Group chair: The W3C XML Security Working Group [1] has published [2] First Public Working Drafts related to XML Security and requests feedback on these documents. Comment may be sent to the list public-xmlsec-comments at w3.org . If possible please indicate the document in the subject line. (1) XML Signature Syntax and Processing Version 1.1 http://www.w3.org/TR/2009/WD-xmldsig-core1-20090226/ (2) XML Encryption Syntax and Processing Version 1.1 http://www.w3.org/TR/2009/WD-xmlenc-core1-20090226/ (3) XML Signature Transform Simplification: Requirements and Design http://www.w3.org/TR/2009/WD-xmldsig-simplify-20090226/ (4) XML Security Use Cases and Requirements http://www.w3.org/TR/2009/WD-xmlsec-reqs-20090226/ (5) XML Security Derived Keys http://www.w3.org/TR/2009/WD-xmlsec-derivedkeys-20090226/ (6) XML Signature Properties http://www.w3.org/TR/2009/WD-xmldsig-properties-20090226/ (7) XML Security Algorithm Cross-Reference http://www.w3.org/TR/2009/WD-xmlsec-algorithms-20090226/ The Working Group has also published an updated working draft of XML Signature Best Practices: (8) XML Signature Best Practices http://www.w3.org/TR/2009/WD-xmldsig-bestpractices-20090226/ The Working Group would appreciate review of these documents, with special attention to the algorithms listed in XML Signature 1.1 and XML Encryption 1.1, the proposed 2.0 changes in the Transform Simplification document and Use Cases and Requirements. Again, comment may be sent to the list public-xmlsec-comments at w3.org . Thank you regards, Frederick Frederick Hirsch, Nokia Chair XML Security WG [1] http://www.w3.org/2008/xmlsec/ [2] http://www.w3.org/News/2009#item25 From mandy.chung at sun.com Fri Feb 27 13:47:34 2009 From: mandy.chung at sun.com (mandy.chung at sun.com) Date: Fri, 27 Feb 2009 21:47:34 +0000 Subject: [security-dev 00630]: hg: jdk7/tl/jdk: 6799689: Make sun.misc.FloatingDecimal.hexFloatPattern static field initialized lazily Message-ID: <20090227214800.8D3CFE3DE@hg.openjdk.java.net> Changeset: de1d02ad2d1d Author: mchung Date: 2009-02-27 13:43 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/de1d02ad2d1d 6799689: Make sun.misc.FloatingDecimal.hexFloatPattern static field initialized lazily Summary: Lazily initialize the hexFloatPattern static field Reviewed-by: darcy ! src/share/classes/sun/misc/FloatingDecimal.java From mandy.chung at sun.com Fri Feb 27 16:38:07 2009 From: mandy.chung at sun.com (mandy.chung at sun.com) Date: Sat, 28 Feb 2009 00:38:07 +0000 Subject: [security-dev 00631]: hg: jdk7/tl/jdk: 6809504: Remove enctype="text/xml" from the offline registration page Message-ID: <20090228003831.99499E477@hg.openjdk.java.net> Changeset: 0da45c759116 Author: mchung Date: 2009-02-27 16:34 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/0da45c759116 6809504: Remove enctype="text/xml" from the offline registration page Summary: Remove enctype="text/xml" from register.html and other localized versions Reviewed-by: ksrini ! src/share/classes/com/sun/servicetag/resources/register.html ! src/share/classes/com/sun/servicetag/resources/register_ja.html ! src/share/classes/com/sun/servicetag/resources/register_zh_CN.html From bhavesh.patel at sun.com Fri Feb 27 19:01:50 2009 From: bhavesh.patel at sun.com (bhavesh.patel at sun.com) Date: Sat, 28 Feb 2009 03:01:50 +0000 Subject: [security-dev 00632]: hg: jdk7/tl/langtools: 6786690: Javadoc HTML WCAG 2.0 accessibility issues in standard doclet - DL tag and nesting issue Message-ID: <20090228030154.74B22E48B@hg.openjdk.java.net> Changeset: 5240b1120530 Author: bpatel Date: 2009-02-27 18:57 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/langtools/rev/5240b1120530 6786690: Javadoc HTML WCAG 2.0 accessibility issues in standard doclet - DL tag and nesting issue Reviewed-by: jjg ! src/share/classes/com/sun/tools/doclets/formats/html/AbstractIndexWriter.java ! src/share/classes/com/sun/tools/doclets/formats/html/AbstractMemberWriter.java ! src/share/classes/com/sun/tools/doclets/formats/html/AnnotationTypeOptionalMemberWriterImpl.java ! src/share/classes/com/sun/tools/doclets/formats/html/AnnotationTypeRequiredMemberWriterImpl.java ! src/share/classes/com/sun/tools/doclets/formats/html/AnnotationTypeWriterImpl.java ! src/share/classes/com/sun/tools/doclets/formats/html/ClassWriterImpl.java ! src/share/classes/com/sun/tools/doclets/formats/html/ConstructorWriterImpl.java ! src/share/classes/com/sun/tools/doclets/formats/html/EnumConstantWriterImpl.java ! src/share/classes/com/sun/tools/doclets/formats/html/FieldWriterImpl.java ! src/share/classes/com/sun/tools/doclets/formats/html/HtmlDocletWriter.java ! src/share/classes/com/sun/tools/doclets/formats/html/HtmlSerialFieldWriter.java ! src/share/classes/com/sun/tools/doclets/formats/html/HtmlSerialMethodWriter.java ! src/share/classes/com/sun/tools/doclets/formats/html/MethodWriterImpl.java ! src/share/classes/com/sun/tools/doclets/formats/html/NestedClassWriterImpl.java ! src/share/classes/com/sun/tools/doclets/formats/html/PackageTreeWriter.java ! src/share/classes/com/sun/tools/doclets/formats/html/TagletWriterImpl.java ! src/share/classes/com/sun/tools/doclets/formats/html/TreeWriter.java ! src/share/classes/com/sun/tools/doclets/formats/html/markup/HtmlDocWriter.java ! src/share/classes/com/sun/tools/doclets/formats/html/markup/HtmlWriter.java ! src/share/classes/com/sun/tools/doclets/internal/toolkit/SerializedFormWriter.java ! src/share/classes/com/sun/tools/doclets/internal/toolkit/builders/SerializedFormBuilder.java ! src/share/classes/com/sun/tools/doclets/internal/toolkit/resources/doclet.xml ! test/com/sun/javadoc/AuthorDD/AuthorDD.java ! test/com/sun/javadoc/testClassCrossReferences/TestClassCrossReferences.java ! test/com/sun/javadoc/testConstructorIndent/TestConstructorIndent.java ! test/com/sun/javadoc/testDeprecatedDocs/TestDeprecatedDocs.java ! test/com/sun/javadoc/testExternalOverridenMethod/TestExternalOverridenMethod.java ! test/com/sun/javadoc/testHref/TestHref.java + test/com/sun/javadoc/testHtmlDefinitionListTag/TestHtmlDefinitionListTag.java + test/com/sun/javadoc/testHtmlDefinitionListTag/pkg1/C1.java + test/com/sun/javadoc/testHtmlDefinitionListTag/pkg1/C2.java + test/com/sun/javadoc/testHtmlDefinitionListTag/pkg1/C3.java + test/com/sun/javadoc/testHtmlDefinitionListTag/pkg1/C4.java + test/com/sun/javadoc/testHtmlDefinitionListTag/pkg1/C5.java ! test/com/sun/javadoc/testIndex/TestIndex.java ! test/com/sun/javadoc/testInterface/TestInterface.java ! test/com/sun/javadoc/testLinkOption/TestLinkOption.java ! test/com/sun/javadoc/testLinkTaglet/TestLinkTaglet.java ! test/com/sun/javadoc/testMemberInheritence/TestMemberInheritence.java ! test/com/sun/javadoc/testNewLanguageFeatures/TestNewLanguageFeatures.java ! test/com/sun/javadoc/testOverridenMethods/TestOverridenPrivateMethods.java ! test/com/sun/javadoc/testOverridenMethods/TestOverridenPrivateMethodsWithPackageFlag.java ! test/com/sun/javadoc/testOverridenMethods/TestOverridenPrivateMethodsWithPrivateFlag.java ! test/com/sun/javadoc/testParamTaglet/TestParamTaglet.java ! test/com/sun/javadoc/testPrivateClasses/TestPrivateClasses.java ! test/com/sun/javadoc/testSerializedFormDeprecationInfo/TestSerializedFormDeprecationInfo.java ! test/com/sun/javadoc/testThrowsTag/TestThrowsTag.java From Xuelei.Fan at Sun.COM Fri Feb 27 19:13:07 2009 From: Xuelei.Fan at Sun.COM (Xuelei Fan) Date: Sat, 28 Feb 2009 11:13:07 +0800 Subject: [security-dev 00633]: Re: SNI support in JSSE In-Reply-To: <302aa0340902271019p3c7a751ayf1ffb88535562fa1@mail.gmail.com> References: <302aa0340902251149k2c373787h95cae3026e5c4a1d@mail.gmail.com> <49A7407F.4010702@Sun.COM> <302aa0340902270221ndf999ccv1be4e977669337af@mail.gmail.com> <49A808ED.6020407@Sun.COM> <302aa0340902271019p3c7a751ayf1ffb88535562fa1@mail.gmail.com> Message-ID: <49A8ABC3.3010800@Sun.COM> An HTML attachment was scrubbed... URL: http://mail.openjdk.java.net/pipermail/security-dev/attachments/20090228/2afd48db/attachment.html From michel.mcgregor at gmail.com Sat Feb 28 00:49:43 2009 From: michel.mcgregor at gmail.com (michel) Date: Sat, 28 Feb 2009 12:19:43 +0330 Subject: [security-dev 00634]: help me please Message-ID: <49a8fab2.0a1ad00a.5d0e.270b@mx.google.com> Dear friends, Two days ago, I sent you and email asked some questions about jvm and its source. But nobody answered me. I am at a critical opportunity and I need to know answer to those questions because I Am defining my final project on this topic and I should check its feasibility before delivering my proposal So some one guide me on this please. I have brought my old mail in the following Hi every body, I am new to your group, and I have some questions about jvm and its security model. I want to intercept method calls or object creation in jvm and do call some os library before it, now I would like to Know if I can do this by JNI(java native interface). Indeed I have seen that jvm 1.6.1 distribution contains a "src" folder which includes source code for java API, But I don`t know whether it contains c++ source for jvm itself or not. Any way I am going to have some manipulation on jvm security but I don`t know where to start from. Thanks before. Best Regards, Michel. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mail.openjdk.java.net/pipermail/security-dev/attachments/20090228/8804fa22/attachment.html From Xuelei.Fan at Sun.COM Sat Feb 28 01:22:58 2009 From: Xuelei.Fan at Sun.COM (Xuelei Fan) Date: Sat, 28 Feb 2009 17:22:58 +0800 Subject: [security-dev 00635]: Re: help me please In-Reply-To: <49a8fab2.0a1ad00a.5d0e.270b@mx.google.com> References: <49a8fab2.0a1ad00a.5d0e.270b@mx.google.com> Message-ID: <49A90272.9020902@Sun.COM> An HTML attachment was scrubbed... URL: http://mail.openjdk.java.net/pipermail/security-dev/attachments/20090228/77d2b402/attachment.html From Bradford.Wetmore at Sun.COM Sat Feb 28 13:22:05 2009 From: Bradford.Wetmore at Sun.COM (Brad Wetmore) Date: Sat, 28 Feb 2009 15:22:05 -0600 Subject: [security-dev 00636]: Re: help me please In-Reply-To: <49A90272.9020902@Sun.COM> References: <49a8fab2.0a1ad00a.5d0e.270b@mx.google.com> <49A90272.9020902@Sun.COM> Message-ID: <49A9AAFD.9050808@sun.com> >> Indeed I have seen that jvm 1.6.1 distribution contains a ?src? folder >> which includes source code for java API, >> >> But I don`t know whether it contains c++ source for jvm itself or not. If you look at the source for OpenJDK, which is what the SunJDK is based on, please see the JDK7 project at: http://openjdk.java.net/ That will give you the source for the hotspot JVM, plus the Java libraries and tools. The C++ JVM files you're looking for are there. Brad Xuelei Fan wrote: > michel wrote: >> >> Dear friends, >> >> Two days ago, I sent you and email asked some questions about jvm and >> its source. >> >> But nobody answered me. >> > It really does not look like a question about security. ;-) >> >> I am at a critical opportunity and I need to know answer to those >> questions because I >> >> Am defining my final project on this topic and I should check its >> feasibility before delivering my proposal >> >> So some one guide me on this please. >> >> >> >> I have brought my old mail in the following >> >> >> >> Hi every body, >> >> I am new to your group, and I have some questions about jvm and its >> security model. >> >> I want to intercept method calls or object creation in jvm and do call >> some os library before it, now I would like to >> >> Know if I can do this by JNI(java native interface). >> > Yes, you can. One approach, writing your own/your customized class > loader, call what ever you want by JNI if you want. Please refer to [1] > for a sample. > >> Indeed I have seen that jvm 1.6.1 distribution contains a ?src? folder >> which includes source code for java API, >> >> But I don`t know whether it contains c++ source for jvm itself or not. >> > Why not unzip and look into the "src'? You will find whatever inside. >> >> Any way I am going to have some manipulation on jvm security >> > Welcome! >> >> but I don`t know where to start from. >> > Security is a big concept, and covers many fields. Including sandbox, > access control, authentication, etc. What's your interested tech? I > would like you have to look at our guides[2], where describes the most > of the aspect of java security. > > Xuelei > [1]: > http://java.sun.com/developer/onlineTraining/Security/Fundamentals/magercises/ClassLoader/help.html > [2]: http://java.sun.com/javase/6/docs/technotes/guides/security/index.html >> >> Thanks before. >> >> >> >> Best Regards, >> >> >> >> Michel. >> >