On 8017264: Java app crash on it's startup after Java updated to 7u25 from 7u21

Weijun Wang weijun.wang at oracle.com
Tue Jun 25 18:23:55 PDT 2013

Hi, Hotspot guys

We (SE security) received a bug report on a new crash for 7u25 and need 
some help from you:


Here the top frames look like:

C  [msvcr100.dll+0x10b3b]  wcspbrk+0x12d
V  [jvm.dll+0xa9b63]
C  [w2k_lsa_auth.dll+0x167c]  JNI_OnUnload+0x1c1

acquireDefaultNativeCreds() is a native method and it's defined at


I'm not sure why JNI_OnUnload is called so immediately, and as you can 
see it's simply

       338     if ((*jvm)->GetEnv(jvm, (void **)&env, JNI_VERSION_1_2)) {
       339         return; /* Nothing else we can do */
       340     }
       342     if (ticketClass != NULL) {
       343         (*env)->DeleteWeakGlobalRef(env,ticketClass);
       344     }
       ... More DeleteWeakGlobalRefs

How is it able to call wcspbrk and get crashed?

BTW, the .c file has not been changed for 2 years.

Also, according to the report, the customer (whose automatic reply has 
"out of office with no internet access till 15 July") runs 7u25 b16 but 
the public release on java.com is b17. Does it matter?


More information about the security-dev mailing list