[8u-dev] Request for approval: 8028780: JDK KRB5 module throws OutOfMemoryError when CCache is corrupt

[Seán Coffey]

Approved.

regards,
Sean.

On 30/06/14 01:55, Wang Weijun wrote:
> Hi All
>
> This is a request to backport a jdk9 fix into jdk8u-dev.
>
> 8028780: JDK KRB5 module throws OutOfMemoryError when CCache is corrupt
>
>     https://bugs.openjdk.java.net/browse/JDK-8028780
>
> The bug is about that a randomized corrupted ccache file could trigger OOME. The fix checks for invalid bits and fails gracefully.
>
> The fix is already included in jdk9 as:
>
>     http://hg.openjdk.java.net/jdk9/dev/jdk/rev/076738bb967d
>
> The review thread was
>
>     http://mail.openjdk.java.net/pipermail/security-dev/2013-December/009992.html
>
> The patch for jdk8u-dev is identical to the one in jdk9.
>
> The fix is low-risk, and isolated. new regression test added. Existing tests also run fine.
>
> Thanks
> Weijun