Fix for dealock issue in JDK's SPNEGO resulted in another deadlock

Peter Hansson peterhansson_se at yahoo.com
Mon Aug 28 17:57:46 UTC 2017


Maybe the attached can help. It is a minimalistic Java Swing application which will demonstrate the bug.

Also, you'll need a proxy (or endpoint) which is asking for credentials using Negotiate auth scheme.  If you don't have one I've created a minimal Dummy Proxy Server which is doing just enough to trigger the bug.


https://bitbucket.org/phansson/dummy-proxy-server

(it is not a real proxy server, it doesn't actually proxy, but for the sake of triggering the bug that doesn't matter)


/Peter





On Monday, August 28, 2017 5:04 PM, Weijun Wang <weijun.wang at oracle.com> wrote:



Ahh, IDEs are evil. :-)

I'll take a look.

Thanks
Max


> On Aug 28, 2017, at 10:10 PM, Peter Hansson <peterhansson_se at yahoo.com> wrote:
> 
> 
> 
> 
>> No simpler solution inside HTTP/SPNEGO?
> 
> 
> That's what I'm asking. :-)
> 
> 
> 
> Interestingly it seems there are similar bugs in the Eclipse and IntelliJ IDEA bug trackers.
> 
> 
> https://bugs.eclipse.org/bugs/show_bug.cgi?id=469116
> 
> https://youtrack.jetbrains.com/issue/IDEA-133187
> 
> 
> On Monday, August 28, 2017 3:46 AM, Weijun Wang <weijun.wang at oracle.com> wrote:
> 
> 
> 
> No simpler solution inside HTTP/SPNEGO?
> 
> --Max
> 
> ----- peterhansson_se at yahoo.com wrote:
> 
>> Hi
>> 
>> I'm trying to fix a deadlock in NetBeans IDE and NetBeans Platform.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: JDKBug8068184Example.zip
Type: application/x-zip-compressed
Size: 4917 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20170828/c2681a1c/JDKBug8068184Example.zip>


More information about the security-dev mailing list