Issue related to backport JDK-7092821

Hohensee, Paul hohensee at amazon.com
Tue Sep 24 02:09:06 UTC 2019


I’ve filed https://bugs.openjdk.java.net/browse/JDK-8231387 to track this.

Thanks,

Paul

From: "Shi, Tianmin" <tianshi at amazon.com>
Date: Monday, September 23, 2019 at 1:21 AM
To: "security-dev at openjdk.java.net" <security-dev at openjdk.java.net>
Cc: "Hohensee, Paul" <hohensee at amazon.com>
Subject: Re: Issue related to backport JDK-7092821

Hi Everyone,

I haven’t get any response yet for my previous email. so I would like to raise this issue again and also attached a small code sample to repo the issue.
This sample code works fine in JDK8 but print out this line in JDK13 due to the race condition "CertificateFactory.Fixed is NULL"

Thank you,



From: "Shi, Tianmin" <tianshi at amazon.com>
Date: Tuesday, September 17, 2019 at 12:46 PM
To: "security-dev at openjdk.java.net" <security-dev at openjdk.java.net>
Subject: Issue related to backport JDK-7092821


Hi Everyone,
  This is Tianmin Shi from the Amazon Corretto team. I am new to JDK development, please let me know if I missed anything.
  I am working on backport JDK-7092821<https://bugs.openjdk.java.net/browse/JDK-7092821> to 8u and 11u. however I think there is a potential race condition introduced by the change, which could cause method getService in class java.security.Provider to return incorrect results. Which is due to the read of legacyMap at line 1260 is not synchronized with clear and repopulate of the same map’s entries inside ensureLegacyParsed(), the fix is a simpler one liner in the attached webrev. Can we push this change to tip so I can backport it with JDK-7092821<https://bugs.openjdk.java.net/browse/JDK-7092821> together?

Thank you




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20190924/f7f6cf15/attachment.htm>


More information about the security-dev mailing list