RHEL 9.0.0 Alpha bootstrap
The content of this branch was automatically imported from Fedora ELN with the following as its source: https://src.fedoraproject.org/rpms/java-11-openjdk#6b7cad5e576389f213b6e6e2b7e52012e71eca94
This commit is contained in:
Petr Šabata
parent
b63a1e513b
commit
6efed85db2
71
.gitignore
vendored
71
.gitignore
vendored
@ -0,0 +1,71 @@
|
|||||||
|
*.rpm
|
||||||
|
/systemtap_3.2_tapsets_hg-icedtea8-9d464368e06d.tar.xz
|
||||||
|
/shenandoah-jdk11-b516c8c7a0a4.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11+22.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11+28.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.1+13.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.1+13-20190101.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.2+7.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.3+6.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.3+7.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.4+2.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.4+3.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.4+4.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.4+5.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.4+6.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.4+7.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.4+8.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.4+9.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.4+10.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.4+11.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.5+1.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.5+2.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.5+2-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.5+9-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.5+9.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.5+10.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.5+10-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.6+1-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.6+2-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.6+9-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.6+10-4curve.tar.xz
|
||||||
|
/tapsets-icedtea-3.11.0.tar.xz
|
||||||
|
/tapsets-icedtea-3.15.0.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.7+1-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.7+2-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.7+3-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.7+3.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.7+4-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.7+4.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.7+5-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.7+5.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.7+6-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.7+6.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.7+7-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.7+7.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.7+8-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.7+8.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.7+9-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.7+9.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.7+10-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.7+10.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.8+1-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.8+2-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.8+3-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.8+4-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.8+5-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.8+6-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.8+7-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.8+8-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.8+9-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.8+10-4curve.tar.xz
|
||||||
|
/shenandoah-jdk11-shenandoah-jdk-11.0.9+1-4curve.tar.xz
|
||||||
|
/jdk-updates-jdk11u-jdk-11.0.9+2-4curve.tar.xz
|
||||||
|
/jdk-updates-jdk11u-jdk-11.0.9+3-4curve.tar.xz
|
||||||
|
/jdk-updates-jdk11u-jdk-11.0.9+4-4curve.tar.xz
|
||||||
|
/jdk-updates-jdk11u-jdk-11.0.9+5-4curve.tar.xz
|
||||||
|
/jdk-updates-jdk11u-jdk-11.0.9+6-4curve.tar.xz
|
||||||
|
/jdk-updates-jdk11u-jdk-11.0.9+7-4curve.tar.xz
|
||||||
|
/jdk-updates-jdk11u-jdk-11.0.9+8-4curve.tar.xz
|
||||||
|
/jdk-updates-jdk11u-jdk-11.0.9+9-4curve.tar.xz
|
||||||
|
/jdk-updates-jdk11u-jdk-11.0.9+10-4curve.tar.xz
|
||||||
749
NEWS
Normal file
749
NEWS
Normal file
@ -0,0 +1,749 @@
|
|||||||
|
Key:
|
||||||
|
|
||||||
|
JDK-X - https://bugs.openjdk.java.net/browse/JDK-X
|
||||||
|
CVE-XXXX-YYYY: https://cve.mitre.org/cgi-bin/cvename.cgi?name=XXXX-YYYY
|
||||||
|
|
||||||
|
New in release OpenJDK 11.0.8 (2020-07-14):
|
||||||
|
===========================================
|
||||||
|
Live versions of these release notes can be found at:
|
||||||
|
* https://bitly.com/oj1108
|
||||||
|
* https://builds.shipilev.net/backports-monitor/release-notes-11.0.8.txt
|
||||||
|
|
||||||
|
* Security fixes
|
||||||
|
- JDK-8230613: Better ASCII conversions
|
||||||
|
- JDK-8231800: Better listing of arrays
|
||||||
|
- JDK-8232014: Expand DTD support
|
||||||
|
- JDK-8233234: Better Zip Naming
|
||||||
|
- JDK-8233239, CVE-2020-14562: Enhance TIFF support
|
||||||
|
- JDK-8233255: Better Swing Buttons
|
||||||
|
- JDK-8234032: Improve basic calendar services
|
||||||
|
- JDK-8234042: Better factory production of certificates
|
||||||
|
- JDK-8234418: Better parsing with CertificateFactory
|
||||||
|
- JDK-8234836: Improve serialization handling
|
||||||
|
- JDK-8236191: Enhance OID processing
|
||||||
|
- JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
|
||||||
|
- JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
|
||||||
|
- JDK-8237592, CVE-2020-14577: Enhance certificate verification
|
||||||
|
- JDK-8238002, CVE-2020-14581: Better matrix operations
|
||||||
|
- JDK-8238013: Enhance String writing
|
||||||
|
- JDK-8238804: Enhance key handling process
|
||||||
|
- JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
|
||||||
|
- JDK-8238843: Enhanced font handing
|
||||||
|
- JDK-8238920, CVE-2020-14583: Better Buffer support
|
||||||
|
- JDK-8238925: Enhance WAV file playback
|
||||||
|
- JDK-8240119, CVE-2020-14593: Less Affine Transformations
|
||||||
|
- JDK-8240482: Improved WAV file playback
|
||||||
|
- JDK-8241379: Update JCEKS support
|
||||||
|
- JDK-8241522: Manifest improved jar headers redux
|
||||||
|
- JDK-8242136, CVE-2020-14621: Better XML namespace handling
|
||||||
|
* Other changes
|
||||||
|
- JDK-6933331: (d3d/ogl) java.lang.IllegalStateException: Buffers have not been created
|
||||||
|
- JDK-7124307: JSpinner and changing value by mouse
|
||||||
|
- JDK-8022574: remove HaltNode code after uncommon trap calls
|
||||||
|
- JDK-8039082: [TEST_BUG] Test java/awt/dnd/BadSerializationTest/BadSerializationTest.java fails
|
||||||
|
- JDK-8040630: Popup menus and tooltips flicker with previous popup contents when first shown
|
||||||
|
- JDK-8044365: (dc) MulticastSendReceiveTests.java failing with ENOMEM when joining group (OS X 10.9)
|
||||||
|
- JDK-8048215: [TESTBUG] java/lang/management/ManagementFactory/ThreadMXBeanProxy.java Expected non-null LockInfo
|
||||||
|
- JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails in nightly
|
||||||
|
- JDK-8080353: JShell: Better error message on attempting to add default method
|
||||||
|
- JDK-8139876: Exclude hanging nsk/stress/stack from execution with deoptimization enabled
|
||||||
|
- JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails with -XX:+DeoptimizeALot
|
||||||
|
- JDK-8153430: jdk regression test MletParserLocaleTest, ParserInfiniteLoopTest reduce default timeout
|
||||||
|
- JDK-8156207: Resource allocated BitMaps are often cleared unnecessarily
|
||||||
|
- JDK-8159740: JShell: corralled declarations do not have correct source to wrapper mapping
|
||||||
|
- JDK-8175984: ICC_Profile has un-needed, not-empty finalize method
|
||||||
|
- JDK-8176359: Frame#setMaximizedbounds not working properly in multi screen environments
|
||||||
|
- JDK-8183369: RFC unconformity of HttpURLConnection with proxy
|
||||||
|
- JDK-8187078: -XX:+VerifyOops finds numerous problems when running JPRT
|
||||||
|
- JDK-8191169: java/net/Authenticator/B4769350.java failed intermittently
|
||||||
|
- JDK-8191930: [Graal] emits unparseable XML into compile log
|
||||||
|
- JDK-8193879: Java debugger hangs on method invocation
|
||||||
|
- JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on Windows
|
||||||
|
- JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
|
||||||
|
- JDK-8198000: java/awt/List/EmptyListEventTest/EmptyListEventTest.java debug assert on Windows
|
||||||
|
- JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/WrongParentAfterRemoveMenu.java debug assert on Windows
|
||||||
|
- JDK-8198339: Test javax/swing/border/Test6981576.java is unstable
|
||||||
|
- JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows, after JDK-8198801
|
||||||
|
- JDK-8203264: JNI exception pending in PlainDatagramSocketImpl.c:740
|
||||||
|
- JDK-8203672: JNI exception pending in PlainSocketImpl.c
|
||||||
|
- JDK-8203673: JNI exception pending in DualStackPlainDatagramSocketImpl.c:398
|
||||||
|
- JDK-8204834: Fix confusing "allocate" naming in OopStorage
|
||||||
|
- JDK-8205399: Set node color on pinned HashMap.TreeNode deletion
|
||||||
|
- JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with handshake_failure
|
||||||
|
- JDK-8206179: com/sun/management/OperatingSystemMXBean/GetCommittedVirtualMemorySize.java fails with Committed virtual memory size illegal value
|
||||||
|
- JDK-8207334: VM times out in VM_HandshakeAllThreads::doit() with RunThese30M
|
||||||
|
- JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize) doesn't work with 1GB LargePages
|
||||||
|
- JDK-8209113: Use WeakReference for lastFontStrike for created Fonts
|
||||||
|
- JDK-8209333: Socket reset issue for TLS 1.3 socket close
|
||||||
|
- JDK-8209439: C2 library_call can potentially ignore Math.pow intrinsic or use null pointer
|
||||||
|
- JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/ArchivedModuleCompareTest.java fails with EnableJVMCI.
|
||||||
|
- JDK-8210147: adjust some WSAGetLastError usages in windows network coding
|
||||||
|
- JDK-8210284: "assert((av & 0x00000001) == 0) failed: unsupported V8" on Solaris 11.4
|
||||||
|
- JDK-8210303: VM_HandshakeAllThreads fails assert with "failed: blocked and not walkable"
|
||||||
|
- JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to check if EnableJVMCI is set.
|
||||||
|
- JDK-8210788: Javadoc for Thread.join(long, int) should specify that it waits forever when both arguments are zero
|
||||||
|
- JDK-8211301: [macos] support full window content options
|
||||||
|
- JDK-8211332: Space for stub routines (code_size2) is too small on new Skylake CPUs
|
||||||
|
- JDK-8211339: NPE during SSL handshake caused by HostnameChecker
|
||||||
|
- JDK-8211392: compiler/profiling/spectrapredefineclass_classloaders/Launcher.java times out in JDK12 CI
|
||||||
|
- JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when JVMTI walks AOT frames
|
||||||
|
- JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE when JVMCI is absent
|
||||||
|
- JDK-8212167: JShell : Stack trace of exception has wrong line number
|
||||||
|
- JDK-8212933: Thread-SMR: requesting a VM operation whilst holding a ThreadsListHandle can cause deadlocks
|
||||||
|
- JDK-8212986: Make Visual Studio compiler check less strict
|
||||||
|
- JDK-8213250: CDS archive creation aborts due to metaspace object allocation failure
|
||||||
|
- JDK-8213516: jck test api/javax_accessibility/AccessibleState/fields.html fails intermittent
|
||||||
|
- JDK-8213947: ARM32: failed check_simd should set UsePopCountInstruction to false
|
||||||
|
- JDK-8214418: half-closed SSLEngine status may cause application dead loop
|
||||||
|
- JDK-8214440: ldap over a TLS connection negotiate failed with "javax.net.ssl.SSLPeerUnverifiedException: hostname of the server '' does not match the hostname in the server's certificate"
|
||||||
|
- JDK-8214444: Wrong strncat limits in dfa.cpp
|
||||||
|
- JDK-8214481: freetype path does not disable TrueType hinting with AA+FM hints
|
||||||
|
- JDK-8214571: -Xdoclint of array serialField gives "error: array type not allowed here"
|
||||||
|
- JDK-8214856: Errors with JSZip in web console after upgrade to 3.1.5
|
||||||
|
- JDK-8214862: assert(proj != __null) at compile.cpp:3251
|
||||||
|
- JDK-8215369: Jcstress pollute /var/tmp with temporary files.
|
||||||
|
- JDK-8215551: Missing case label in nmethod::reloc_string_for()
|
||||||
|
- JDK-8215555: TieredCompilation C2 threads can excessively block handshakes
|
||||||
|
- JDK-8215711: Missing key_share extension for (EC)DHE key exchange should alert missing_extension
|
||||||
|
- JDK-8216151: [Graal] Module jdk.internal.vm.compiler.management has not been granted accessClassInPackage.org.graalvm.compiler.debug
|
||||||
|
- JDK-8216154: C4819 warnings at HotSpot sources on Windows
|
||||||
|
- JDK-8216541: CompiledICHolders of VM locked unloaded nmethods are released too late
|
||||||
|
- JDK-8217230: assert(t == t_no_spec) failure in NodeHash::check_no_speculative_types()
|
||||||
|
- JDK-8217404: --with-jvm-features doesn't work when multiple features are explicitly disabled
|
||||||
|
- JDK-8217447: Develop flag TraceICs is broken
|
||||||
|
- JDK-8217606: LdapContext#reconnect always opens a new connection
|
||||||
|
- JDK-8218807: Compilation database (compile_commands.json) may contain obsolete items
|
||||||
|
- JDK-8219214: Infinite Loop in CodeSection::dump()
|
||||||
|
- JDK-8219904: ClassCastException when calling FlightRecorderMXBean#getRecordings()
|
||||||
|
- JDK-8219991: New fix of the deadlock in sun.security.ssl.SSLSocketImpl
|
||||||
|
- JDK-8221121: applications/microbenchmarks are encountering crashes in tier5
|
||||||
|
- JDK-8221445: FastSysexMessage constructor crashes MIDI receiption thread
|
||||||
|
- JDK-8221482: Initialize VMRegImpl::regName[] earlier to prevent assert during PrintStubCode
|
||||||
|
- JDK-8221741: ClassCastException can happen when fontconfig.properties is used
|
||||||
|
- JDK-8221823: Requested JDialog width is ignored
|
||||||
|
- JDK-8223108: Test java/awt/EventQueue/NonComponentSourcePost.java is unstable
|
||||||
|
- JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails on windows10
|
||||||
|
- JDK-8224109: Text spaced incorrectly by drawString under rotation with fractional metric
|
||||||
|
- JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/RemoveDropTargetCrashTest.java fails on MacOS
|
||||||
|
- JDK-8224793: os::die() does not honor CreateCoredumpOnCrash option
|
||||||
|
- JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java fails with reserved greater than expected
|
||||||
|
- JDK-8224931: disable JAOTC invokedynamic support until 8223533 is fixed
|
||||||
|
- JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption throws ShortBufferException
|
||||||
|
- JDK-8225068: Remove DocuSign root certificate that is expiring in May 2020
|
||||||
|
- JDK-8225069: Remove Comodo root certificate that is expiring in May 2020
|
||||||
|
- JDK-8225126: Test SetBoundsPaintTest.html faild on Windows when desktop is scaled
|
||||||
|
- JDK-8225325: Add tests for redefining a class' private method during resolution of the bootstrap specifier
|
||||||
|
- JDK-8225622: [AOT] runtime/SharedArchiveFile/TestInterpreterMethodEntries.java crashed with AOTed java.base
|
||||||
|
- JDK-8225653: Provide more information when hitting SIGILL from HaltNode
|
||||||
|
- JDK-8225783: Incorrect use of binary operators on booleans in type.cpp
|
||||||
|
- JDK-8225789: Empty method parameter type should generate ClassFormatError
|
||||||
|
- JDK-8226198: use of & instead of && in LibraryCallKit::arraycopy_restore_alloc_state
|
||||||
|
- JDK-8226253: JAWS reports wrong number of radio buttons when buttons are hidden.
|
||||||
|
- JDK-8226653: [accessibility] Can edit text cell correctly, but Accessibility Tool reads nothing about editor
|
||||||
|
- JDK-8226806: [macOS 10.14] Methods of Java Robot should be called from appropriate thread
|
||||||
|
- JDK-8226879: Memory leak in Type::hashcons
|
||||||
|
- JDK-8227632: Incorrect PrintCompilation message: made not compilable on levels 0 1 2 3 4
|
||||||
|
- JDK-8228407: JVM crashes with shared archive file mismatch
|
||||||
|
- JDK-8228482: fix xlc16/xlclang comparison of distinct pointer types and string literal conversion warnings
|
||||||
|
- JDK-8228757: Fail fast if the handshake type is unknown
|
||||||
|
- JDK-8229158: make UseSwitchProfiling non-experimental or false by-default
|
||||||
|
- JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is flawed
|
||||||
|
- JDK-8229855: C2 fails with assert(false) failed: bad AD file
|
||||||
|
- JDK-8230591: AArch64: Missing intrinsics for Math.ceil, floor, rint
|
||||||
|
- JDK-8231118: ARM32: Math tests failures
|
||||||
|
- JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
|
||||||
|
- JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
|
||||||
|
- JDK-8231438: [macOS] Dark mode for the desktop is not supported
|
||||||
|
- JDK-8231550: C2: ShouldNotReachHere() in verify_strip_mined_scheduling
|
||||||
|
- JDK-8231564: setMaximizedBounds is broken with large display scale and multiple monitors
|
||||||
|
- JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in libosxsecurity
|
||||||
|
- JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails intermittently with NPE
|
||||||
|
- JDK-8231671: Fix copyright headers in hotspot (missing comma after year)
|
||||||
|
- JDK-8231720: Some perf regressions after 8225653
|
||||||
|
- JDK-8231779: crash HeapWord*ParallelScavengeHeap::failed_mem_allocate
|
||||||
|
- JDK-8231863: Crash if classpath is read from @argument file and the main gets option argument
|
||||||
|
- JDK-8232080: jlink plugins for vendor information and run-time options
|
||||||
|
- JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3 instructions on processors which don't support it
|
||||||
|
- JDK-8232134: Change to Visual Studio 2017 15.9.16 for building on Windows at Oracle
|
||||||
|
- JDK-8232226: [macos 10.15] test/jdk/java/awt/color/EqualityTest/EqualityTest.java may fail
|
||||||
|
- JDK-8232357: Compare version info of Santuario to legal notice
|
||||||
|
- JDK-8232572: Add hooks for custom output dir in Bundles.gmk
|
||||||
|
- JDK-8232634: Problem List ICMColorDataTest.java
|
||||||
|
- JDK-8232748: Build static versions of certain JDK libraries
|
||||||
|
- JDK-8232846: ProcessHandle.Info command with non-English shows question marks
|
||||||
|
- JDK-8233033: C2 produces wrong result while unswitching a loop due to lost control dependencies
|
||||||
|
- JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java fails after 8232080
|
||||||
|
- JDK-8233197: Invert JvmtiExport::post_vm_initialized() and Jfr:on_vm_start() start-up order for correct option parsing
|
||||||
|
- JDK-8233291: [TESTBUG] tools/jlink/plugins/VendorInfoPluginsTest.java fails with debug or non-server VMs
|
||||||
|
- JDK-8233364: Fix undefined behavior in Canonicalizer::do_ShiftOp
|
||||||
|
- JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration) may throw ClassCastException
|
||||||
|
- JDK-8233608: Minimal build broken after JDK-8233494
|
||||||
|
- JDK-8233621: Mismatch in jsse.enableMFLNExtension property name
|
||||||
|
- JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is ON
|
||||||
|
- JDK-8233707: systemScale.cpp could not compile with VS2019
|
||||||
|
- JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
|
||||||
|
- JDK-8233880: Support compilers with multi-digit major version numbers
|
||||||
|
- JDK-8233920: MethodHandles::tryFinally generates illegal bytecode for long/double return type
|
||||||
|
- JDK-8234137: The "AutoTestOnTop.java" test may run external applications
|
||||||
|
- JDK-8234146: compiler/jsr292/ContinuousCallSiteTargetChange.java times out on SPARC
|
||||||
|
- JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/ModalDialogEnterExitEventsTest.java fails in Windows
|
||||||
|
- JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect numbers for Compiler area
|
||||||
|
- JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/DisposeDialogNotActivateOwnerTest/DisposeDialogNotActivateOwnerTest.java fails on linux-x64 nightly
|
||||||
|
- JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with GetDeviceCaps
|
||||||
|
- JDK-8234522: [macos] Crash with use of native file dialog
|
||||||
|
- JDK-8234691: Potential double-free in ParallelSPCleanupTask constructor
|
||||||
|
- JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java times out
|
||||||
|
- JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests support TLSv1.3
|
||||||
|
- JDK-8234728: Some security tests should support TLSv1.3
|
||||||
|
- JDK-8234779: Provide idiom for declaring classes noncopyable
|
||||||
|
- JDK-8234968: check calloc rv in libinstrument InvocationAdapter
|
||||||
|
- JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/DrawImageBG/SystemBgColorTest.java fails
|
||||||
|
- JDK-8235183: Remove the "HACK CODE" in comment
|
||||||
|
- JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
|
||||||
|
- JDK-8235311: Tag mismatch may alert bad_record_mac
|
||||||
|
- JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with -XX:+StressGCM
|
||||||
|
- JDK-8235452: Strip mined loop verification fails with assert(is_OuterStripMinedLoop()) failed: invalid node class
|
||||||
|
- JDK-8235584: UseProfiledLoopPredicate fails with assert(_phase->get_loop(c) == loop) failed: have to be in the same loop
|
||||||
|
- JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
|
||||||
|
- JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
|
||||||
|
- JDK-8235686: Add more custom hooks in Bundles.gmk
|
||||||
|
- JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
|
||||||
|
- JDK-8235762: JVM crash in SWPointer during C2 compilation
|
||||||
|
- JDK-8235834: IBM-943 charset encoder needs updating
|
||||||
|
- JDK-8235874: The ordering of Cipher Suites is not maintained provided through jdk.tls.client.cipherSuites and jdk.tls.server.cipherSuites system property.
|
||||||
|
- JDK-8235908: omit ThreadPriorityPolicy warning when value is set from image
|
||||||
|
- JDK-8235984: C2: assert(out->in(PhiNode::Region) == head || out->in(PhiNode::Region) == slow_head) failed: phi must be either part of the slow or the fast loop
|
||||||
|
- JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is skipped in all testing
|
||||||
|
- JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash algorithm as AlgorithmId
|
||||||
|
- JDK-8236545: Compilation error in mach5 java/awt/FileDialog/MacOSGoToFolderCrash.java
|
||||||
|
- JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
|
||||||
|
- JDK-8236759: ShouldNotReachHere in PhaseIdealLoop::verify_strip_mined_scheduling
|
||||||
|
- JDK-8236897: Fix the copyright header for pkcs11gcm2.h
|
||||||
|
- JDK-8236921: Add build target to produce a JDK image suitable for a Graal/SVM build
|
||||||
|
- JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
|
||||||
|
- JDK-8236996: Incorrect Roboto font rendering on Windows with subpixel antialiasing
|
||||||
|
- JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI -XX:JVMCICounterSize=2147483648
|
||||||
|
- JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails with release VMs
|
||||||
|
- JDK-8237086: assert(is_MachReturn()) running CTW with fix for JDK-8231291
|
||||||
|
- JDK-8237192: Generate stripped/public pdbs on Windows for jdk images
|
||||||
|
- JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger barriers
|
||||||
|
- JDK-8237474: Default SSLEngine should create in server role
|
||||||
|
- JDK-8237859: C2: Crash when loads float above range check
|
||||||
|
- JDK-8237951: CTW: C2 compilation fails with "malformed control flow"
|
||||||
|
- JDK-8237962: give better error output for invalid OCSP response intervals in CertPathValidator checks
|
||||||
|
- JDK-8238190: [JVMCI] Fix single implementor speculation for diamond shapes.
|
||||||
|
- JDK-8238356: CodeHeap::blob_count() overestimates the number of blobs
|
||||||
|
- JDK-8238452: Keytool generates wrong expiration date if validity is set to 2050/01/01
|
||||||
|
- JDK-8238555: Allow Initialization of SunPKCS11 with NSS when there are external FIPS modules in the NSSDB
|
||||||
|
- JDK-8238575: DragSourceEvent.getLocation() returns wrong value on HiDPI screens (Windows)
|
||||||
|
- JDK-8238676: jni crashes on accessing it from process exit hook
|
||||||
|
- JDK-8238721: Add failing client jtreg tests to the Problem List
|
||||||
|
- JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to report a gone audio device
|
||||||
|
- JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN || !((n)->is_dead()))) failed: can not use dead node
|
||||||
|
- JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle precedence edges from unmatched CFG nodes correctly
|
||||||
|
- JDK-8238898: Missing hash characters for header on license file
|
||||||
|
- JDK-8238942: Rendering artifacts with LCD text and fractional metrics
|
||||||
|
- JDK-8238985: [TESTBUG] The arrow image is blue instead of green
|
||||||
|
- JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
|
||||||
|
- JDK-8239055: Wrong implementation of VMState.hasListener
|
||||||
|
- JDK-8239091: Reversed arguments in call to strstr in freetype "debug" code.
|
||||||
|
- JDK-8239142: C2's UseUniqueSubclasses optimization is broken for array accesses
|
||||||
|
- JDK-8239224: libproc_impl.c previous_thr may be used uninitialized warning
|
||||||
|
- JDK-8239351: Give more meaningful InternalError messages in Deflater.c
|
||||||
|
- JDK-8239365: ProcessBuilder test modifications for AIX execution
|
||||||
|
- JDK-8239456: vtable stub generation: assert failure (code size estimate)
|
||||||
|
- JDK-8239457: call ReleaseStringUTFChars before early returns in Java_sun_security_pkcs11_wrapper_PKCS11_connect
|
||||||
|
- JDK-8239462: jdk.hotspot.agent misses some ReleaseStringUTFChars calls in case of early returns
|
||||||
|
- JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating "END." marker at lastline is not always true
|
||||||
|
- JDK-8239787: AArch64: String.indexOf may incorrectly handle empty strings
|
||||||
|
- JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
|
||||||
|
- JDK-8239798: SSLSocket closes socket both socket endpoints on a SocketTimeoutException
|
||||||
|
- JDK-8239819: XToolkit: Misread of screen information memory
|
||||||
|
- JDK-8239852: java/util/concurrent tests fail with -XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed: verification should have failed
|
||||||
|
- JDK-8239893: Windows handle Leak when starting processes using ProcessBuilder
|
||||||
|
- JDK-8239915: Zero VM crashes when handling dynamic constant
|
||||||
|
- JDK-8239931: [win][x86] vtable stub generation: assert failure (code size estimate) follow-up
|
||||||
|
- JDK-8239976: Put JDK-8239965 on the ProblemList.txt
|
||||||
|
- JDK-8240073: Fix 'test-make' build target in 11u
|
||||||
|
- JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK characters
|
||||||
|
- JDK-8240202: A few client tests leave mouse buttons pressed
|
||||||
|
- JDK-8240220: IdealLoopTree::dump_head predicate printing is broken
|
||||||
|
- JDK-8240223: Use consistent predicate order in and with PhaseIdealLoop::find_predicate
|
||||||
|
- JDK-8240227: Loop predicates should be copied to unswitched loops
|
||||||
|
- JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/compiler/loopopts/superword/SumRedAbsNeg_Float.java
|
||||||
|
- JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in Windows Print
|
||||||
|
- JDK-8240529: CheckUnhandledOops breaks NULL check in Modules::define_module
|
||||||
|
- JDK-8240576: JVM crashes after transformation in C2 IdealLoopTree::merge_many_backedges
|
||||||
|
- JDK-8240603: Windows 32bit compile error after 8238676
|
||||||
|
- JDK-8240629: argfiles parsing broken for argfiles with comment cross 4096 bytes chunk
|
||||||
|
- JDK-8240711: TestJstatdPort.java failed due to "ExportException: Port already in use:"
|
||||||
|
- JDK-8240786: [TESTBUG] The test java/awt/Window/GetScreenLocation/GetScreenLocationTest.java fails on HiDPI screen
|
||||||
|
- JDK-8240824: enhance print_full_memory_info on Linux by THP related information
|
||||||
|
- JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use fiber-friendly java.util.concurrent.locks in JSSE"
|
||||||
|
- JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed: multiple Memories being matched at once?
|
||||||
|
- JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
|
||||||
|
- JDK-8241445: Fix copyright in test/jdk/tools/launcher/ArgFileSyntax.java
|
||||||
|
- JDK-8241458: [JVMCI] add mark value to expose CodeOffsets::Frame_Complete
|
||||||
|
- JDK-8241464: [11u] Backport: make rehashing be a needed guaranteed safepoint cleanup action
|
||||||
|
- JDK-8241556: Memory leak if -XX:CompileCommand is set
|
||||||
|
- JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX failure with IOE "Operation not permitted"
|
||||||
|
- JDK-8241586: compiler/cpuflags/TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
|
||||||
|
- JDK-8241638: launcher time metrics always report 1 on Linux when _JAVA_LAUNCHER_DEBUG set
|
||||||
|
- JDK-8241660: Add virtualization information output to hs_err file on macOS
|
||||||
|
- JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
|
||||||
|
- JDK-8241888: Mirror jdk.security.allowNonCaAnchor system property with a security one
|
||||||
|
- JDK-8241900: Loop unswitching may cause dependence on null check to be lost
|
||||||
|
- JDK-8241948: enhance list of environment variables printed in hs_err file
|
||||||
|
- JDK-8241996: on linux set full relro in the linker flags
|
||||||
|
- JDK-8242108: Performance regression after fix for JDK-8229496
|
||||||
|
- JDK-8242141: New System Properties to configure the TLS signature schemes
|
||||||
|
- JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
|
||||||
|
- JDK-8242174: [macos] The NestedModelessDialogTest test make the macOS unstable
|
||||||
|
- JDK-8242239: [Graal] javax/management/generified/GenericTest.java fails: FAILED: queryMBeans sets same
|
||||||
|
- JDK-8242294: JSSE Client does not throw SSLException when an alert occurs during handshaking
|
||||||
|
- JDK-8242379: [TESTBUG] compiler/loopopts/TestLoopUnswitchingLostCastDependency.java fails with release VMs
|
||||||
|
- JDK-8242470: Update Xerces to Version 2.12.1
|
||||||
|
- JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads to JVM crash
|
||||||
|
- JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open, x-IBM834 and x-IBM949C)
|
||||||
|
- JDK-8242626: enhance posix print_rlimit_info
|
||||||
|
- JDK-8243059: Build fails when --with-vendor-name contains a comma
|
||||||
|
- JDK-8243539: Copyright info (Year) should be updated for fix of 8241638
|
||||||
|
- JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
|
||||||
|
- JDK-8244407: JVM crashes after transformation in C2 IdealLoopTree::split_fall_in
|
||||||
|
- JDK-8244520: problemlist java/awt/font/Rotate/RotatedFontTest.java on linux
|
||||||
|
- JDK-8244777: ClassLoaderStats VM Op uses constant hash value
|
||||||
|
- JDK-8244853: The static build of libextnet is missing the JNI_OnLoad_extnet function
|
||||||
|
- JDK-8244951: Missing entitlements for hardened runtime
|
||||||
|
- JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to unordered Load (acquire semantics missing)
|
||||||
|
- JDK-8245649: Revert 8245397 backport of 8230591
|
||||||
|
- JDK-8246031: SSLSocket.getSession() doesn't close connection for timeout/ interrupts
|
||||||
|
- JDK-8246613: Choose the default SecureRandom algo based on registration ordering
|
||||||
|
- JDK-8248505: Unexpected NoSuchAlgorithmException when using secure random impl from BCFIPS provider
|
||||||
|
|
||||||
|
Notes on individual issues:
|
||||||
|
===========================
|
||||||
|
|
||||||
|
security-libs/java.security:
|
||||||
|
|
||||||
|
JDK-8244167: Removal of Comodo Root CA Certificate
|
||||||
|
==================================================
|
||||||
|
The following expired Comodo root CA certificate was removed from the `cacerts` keystore: +
|
||||||
|
alias name "addtrustclass1ca [jdk]"
|
||||||
|
|
||||||
|
Distinguished Name: CN=AddTrust Class 1 CA Root, OU=AddTrust TTP Network, O=AddTrust AB, C=SE
|
||||||
|
|
||||||
|
JDK-8244166: Removal of DocuSign Root CA Certificate
|
||||||
|
====================================================
|
||||||
|
The following expired DocuSign root CA certificate was removed from the `cacerts` keystore: +
|
||||||
|
alias name "keynectisrootca [jdk]"
|
||||||
|
|
||||||
|
Distinguished Name: CN=KEYNECTIS ROOT CA, OU=ROOT, O=KEYNECTIS, C=FR
|
||||||
|
|
||||||
|
security-libs/javax.crypto:pkcs11:
|
||||||
|
|
||||||
|
JDK-8240191: Allow SunPKCS11 initialization with NSS when external FIPS modules are present in the Security Modules Database
|
||||||
|
============================================================================================================================
|
||||||
|
The SunPKCS11 security provider can now be initialized with NSS when
|
||||||
|
FIPS-enabled external modules are configured in the Security Modules
|
||||||
|
Database (NSSDB). Prior to this change, the SunPKCS11 provider would
|
||||||
|
throw a RuntimeException with the message: "FIPS flag set for
|
||||||
|
non-internal module" when such a library was configured for NSS in
|
||||||
|
non-FIPS mode.
|
||||||
|
|
||||||
|
This change allows the JDK to work properly with recent NSS releases
|
||||||
|
in GNU/Linux operating systems when the system-wide FIPS policy is
|
||||||
|
turned on.
|
||||||
|
|
||||||
|
Further information can be found in JDK-8238555.
|
||||||
|
|
||||||
|
security-libs/javax.net.ssl:
|
||||||
|
|
||||||
|
JDK-8245077: Default SSLEngine Should Create in Server Role
|
||||||
|
===========================================================
|
||||||
|
In JDK 11 and later, `javax.net.ssl.SSLEngine` by default used client
|
||||||
|
mode when handshaking. As a result, the set of default enabled
|
||||||
|
protocols may differ to what is expected. `SSLEngine` would usually be
|
||||||
|
used in server mode. From this JDK release onwards, `SSLEngine` will
|
||||||
|
default to server mode. The
|
||||||
|
`javax.net.ssl.SSLEngine.setUseClientMode(boolean mode)` method may
|
||||||
|
be used to configure the mode.
|
||||||
|
|
||||||
|
JDK-8242147: New System Properties to Configure the TLS Signature Schemes
|
||||||
|
=========================================================================
|
||||||
|
|
||||||
|
Two new System Properties are added to customize the TLS signature
|
||||||
|
schemes in JDK. `jdk.tls.client.SignatureSchemes` is added for TLS
|
||||||
|
client side, and `jdk.tls.server.SignatureSchemes` is added for server
|
||||||
|
side.
|
||||||
|
|
||||||
|
Each System Property contains a comma-separated list of supported
|
||||||
|
signature scheme names specifying the signature schemes that could be
|
||||||
|
used for the TLS connections.
|
||||||
|
|
||||||
|
The names are described in the "Signature Schemes" section of the
|
||||||
|
*Java Security Standard Algorithm Names Specification*.
|
||||||
|
|
||||||
|
New in release OpenJDK 11.0.7 (2020-04-14):
|
||||||
|
===========================================
|
||||||
|
Live versions of these release notes can be found at:
|
||||||
|
* https://bitly.com/oj1107
|
||||||
|
* https://builds.shipilev.net/backports-monitor/release-notes-11.0.7.txt
|
||||||
|
|
||||||
|
* Security fixes
|
||||||
|
- JDK-8223898, CVE-2020-2754: Forward references to Nashorn
|
||||||
|
- JDK-8223904, CVE-2020-2755: Improve Nashorn matching
|
||||||
|
- JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
|
||||||
|
- JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
|
||||||
|
- JDK-8225603: Enhancement for big integers
|
||||||
|
- JDK-8226346: Build better binary builders
|
||||||
|
- JDK-8227467: Better class method invocations
|
||||||
|
- JDK-8227542: Manifest improved jar headers
|
||||||
|
- JDK-8229733: TLS message handling improvements
|
||||||
|
- JDK-8231415, CVE-2020-2773: Better signatures in XML
|
||||||
|
- JDK-8231785: Improved socket permissions
|
||||||
|
- JDK-8232424, CVE-2020-2778: More constrained algorithms
|
||||||
|
- JDK-8232581, CVE-2020-2767: Improve TLS verification
|
||||||
|
- JDK-8233250: Better X11 rendering
|
||||||
|
- JDK-8233410: Better Build Scripting
|
||||||
|
- JDK-8234027: Better JCEKS key support
|
||||||
|
- JDK-8234408, CVE-2020-2781: Improve TLS session handling
|
||||||
|
- JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
|
||||||
|
- JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
|
||||||
|
- JDK-8235274, CVE-2020-2805: Enhance typing of methods
|
||||||
|
- JDK-8235691, CVE-2020-2816: Enhance TLS connectivity
|
||||||
|
- JDK-8236201, CVE-2020-2830: Better Scanner conversions
|
||||||
|
- JDK-8238960: linux-i586 builds are inconsistent as the newly build jdk is not able to reserve enough space for object heap
|
||||||
|
* Other changes
|
||||||
|
- JDK-4919790: Errors in alert ssl message does not reflect the actual certificate status
|
||||||
|
- JDK-4949105: Access Bridge lacks html tags parsing
|
||||||
|
- JDK-7092821: java.security.Provider.getService() is synchronized and became scalability bottleneck
|
||||||
|
- JDK-7143743: Potential memory leak with zip provider
|
||||||
|
- JDK-8005819: Support cross-realm MSSFU
|
||||||
|
- JDK-8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/4983388/bug4983388.java fails with shortcuts on menus do not work
|
||||||
|
- JDK-8068184: Fix for JDK-8032832 caused a deadlock
|
||||||
|
- JDK-8145845: [AOT] NullPointerException in compiler/whitebox/GetCodeHeapEntriesTest.java
|
||||||
|
- JDK-8152988: [AOT] Update test batch definitions to include aot-ed java.base module mode into hs-comp testing
|
||||||
|
- JDK-8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle cross-compilation
|
||||||
|
- JDK-8163083: SocketListeningConnector does not allow invocations with port 0
|
||||||
|
- JDK-8163251: Hard coded loop limit prevents reading of smart card data greater than 8k
|
||||||
|
- JDK-8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java fails with -XX:-EliminateAllocations
|
||||||
|
- JDK-8169718: nsk/jdb/locals/locals002: ERROR: Cannot find boolVar with expected value: false
|
||||||
|
- JDK-8176556: java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails for JFIF
|
||||||
|
- JDK-8178798: Two compiler/aot/verification/vmflags tests fail by timeout with UseAVX=3
|
||||||
|
- JDK-8183107: PKCS11 regression regarding checkKeySize
|
||||||
|
- JDK-8185005: Improve performance of ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
|
||||||
|
- JDK-8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
|
||||||
|
- JDK-8189861: Refactor CacheFind
|
||||||
|
- JDK-8193042: NativeLookup::lookup_critical_entry() should only load shared library once
|
||||||
|
- JDK-8193596: java/net/DatagramPacket/ReuseBuf.java failed due to timeout
|
||||||
|
- JDK-8194944: Regression automated test 'open/test/jdk/javax/swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java' fails
|
||||||
|
- JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
|
||||||
|
- JDK-8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java causes NPE
|
||||||
|
- JDK-8198321: javax/swing/JEditorPane/5076514/bug5076514.java fails
|
||||||
|
- JDK-8198398: Test javax/swing/JColorChooser/Test6199676.java fails in mach5
|
||||||
|
- JDK-8199072: Test javax/swing/GroupLayout/6613904/bug6613904.java is unstable
|
||||||
|
- JDK-8200432: javadoc fails with ClassCastException on {@link byte[]}
|
||||||
|
- JDK-8201349: build broken when configured with --with-zlib=bundled on gcc 7.3
|
||||||
|
- JDK-8201355: Avoid native memory allocation in sun.security.mscapi.PRNG.generateSeed
|
||||||
|
- JDK-8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
|
||||||
|
- JDK-8203364: Some serviceability/sa/ tests intermittently fail with java.io.IOException: LingeredApp terminated with non-zero exit code 3
|
||||||
|
- JDK-8203687: javax/net/ssl/compatibility/Compatibility.java supports TLS 1.3
|
||||||
|
- JDK-8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The divider location is wrong
|
||||||
|
- JDK-8203911: Test runtime/modules/getModuleJNI/GetModule fails with -Xcheck:jni
|
||||||
|
- JDK-8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out of java heap
|
||||||
|
- JDK-8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent 7 timed out
|
||||||
|
- JDK-8204551: Event descriptions are truncated in logs
|
||||||
|
- JDK-8206963: [AOT] bug with multiple class loaders
|
||||||
|
- JDK-8207367: 10 vmTestbase/nsk/jdi tests timed out when running with jtreg
|
||||||
|
- JDK-8207832: serviceability/sa/ClhsdbCDSCore.java failed with "Couldn't find core file location"
|
||||||
|
- JDK-8207938: At step6,Click Add button,case failed automatically.
|
||||||
|
- JDK-8208157: requires.VMProps throws NPE for missing properties in "release" file
|
||||||
|
- JDK-8208379: compiler/jvmci/events/JvmciNotifyInstallEventTest.java failed with "Got unexpected event count after 2nd install attempt: expected 9 to equal 2"
|
||||||
|
- JDK-8208658: Make CDS archived heap regions usable even if compressed oop encoding has changed
|
||||||
|
- JDK-8208715: Conversion of milliseconds to nanoseconds in UNIXProcess contains bug
|
||||||
|
- JDK-8209361: [AOT] Unexpected number of references for JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111-->111]: 0 (expected at least 1)
|
||||||
|
- JDK-8209385: CDS runtime classpath checking is too strict when only classes from the system modules are archived
|
||||||
|
- JDK-8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
|
||||||
|
- JDK-8209418: Synchronize test/jdk/sanity/client/lib/jemmy with code-tools/jemmy/v2
|
||||||
|
- JDK-8209494: Create a test for SwingSet InternalFrameDemo
|
||||||
|
- JDK-8209499: Create test for SwingSet EditorPaneDemo
|
||||||
|
- JDK-8209574: [AOT] breakpoint events are generated in different threads does not meet expected count
|
||||||
|
- JDK-8209686: cleanup arguments to PhaseIdealLoop() constructor
|
||||||
|
- JDK-8209789: Synchronize test/jdk/sanity/client/lib/jemmy with code-tools/jemmy/v2
|
||||||
|
- JDK-8209802: Garbage collectors should register JFR types themselves to avoid build errors.
|
||||||
|
- JDK-8209807: improve handling exception in requires.VMProps
|
||||||
|
- JDK-8209817: stack is executable when building with Clang on Linux
|
||||||
|
- JDK-8209824: Improve the code coverage for ThreadLocal
|
||||||
|
- JDK-8209826: Undefined reference to os::write after JDK-8209657 (filemap.hpp cleanup)
|
||||||
|
- JDK-8209850: Allow NamedThreads to use GlobalCounter critical sections
|
||||||
|
- JDK-8209976: Improve iteration over non-JavaThreads
|
||||||
|
- JDK-8209993: Create a test for SwingSet3 ToolTipDemo
|
||||||
|
- JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
|
||||||
|
- JDK-8210052: Enable testing for all the available look and feels in SwingSet3 demo tests
|
||||||
|
- JDK-8210055: Enable different look and feel tests in SwingSet3 demo tests
|
||||||
|
- JDK-8210057: Enable different look and feels in SwingSet3 demo test InternalFrameDemoTest
|
||||||
|
- JDK-8210058: Algorithmic Italic font leans opposite angle in Printing
|
||||||
|
- JDK-8210220: [AOT] jdwp test cases are failing with error # ERROR: TEST FAILED: Cought IOException while receiving event packet
|
||||||
|
- JDK-8210289: ArchivedKlassSubGraphInfoRecord is incomplete
|
||||||
|
- JDK-8210459: Add support for generating compile_commands.json
|
||||||
|
- JDK-8210476: sun/security/mscapi/PrngSlow.java fails with Still too slow
|
||||||
|
- JDK-8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/referringObjects/referringObjects002/referringObjects002.java fails with unexpected size of ClassLoaderReference.referringObjects
|
||||||
|
- JDK-8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java crash
|
||||||
|
- JDK-8210632: Add key exchange algorithm to javax/net/ssl/TLSCommon/CipherSuite.java
|
||||||
|
- JDK-8210699: Problem list tests which times out in Xcomp mode
|
||||||
|
- JDK-8210793: [JVMCI] AllocateCompileIdTest.java failed to find DiagnosticCommand.class
|
||||||
|
- JDK-8210910: Create test for FileChooserDemo
|
||||||
|
- JDK-8210994: Create test for SwingSet3 FrameDemo
|
||||||
|
- JDK-8211139: Increase timeout value in all tests under jdk/sanity/client/SwingSet/src
|
||||||
|
- JDK-8211160: Handle different look and feels in JInternalFrameOperator
|
||||||
|
- JDK-8211211: vmTestbase/metaspace/stressDictionary/StressDictionary.java timeout
|
||||||
|
- JDK-8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
|
||||||
|
- JDK-8211443: Enable different look and feels in SwingSet3 demo test SplitPaneDemoTest
|
||||||
|
- JDK-8211703: JInternalFrame : java.lang.AssertionError: cannot find the internal frame
|
||||||
|
- JDK-8211781: re-building fails after changing Graal sources
|
||||||
|
- JDK-8212897: Some improvements in the EditorPaneDemotest
|
||||||
|
- JDK-8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04 LTS
|
||||||
|
- JDK-8213009: Refactoring existing SunMSCAPI classes
|
||||||
|
- JDK-8213010: Supporting keys created with certmgr.exe
|
||||||
|
- JDK-8213168: Enable different look and feel tests in SwingSet3 demo test FileChooserDemoTest
|
||||||
|
- JDK-8213348: jdk.internal.vm.compiler.management service providers missing in module descriptor
|
||||||
|
- JDK-8213906: Update arm devkits with libXrandr headers
|
||||||
|
- JDK-8213908: AssertionError in DeferredAttr at setOverloadKind
|
||||||
|
- JDK-8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
|
||||||
|
- JDK-8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed: elembt=byte; loadbt=void; unsigned=0
|
||||||
|
- JDK-8214345: infinite recursion while checking super class
|
||||||
|
- JDK-8214471: Enable different look and feel tests in SwingSet3 demo test ToolTipDemoTest
|
||||||
|
- JDK-8214534: Setting of THIS_FILE in the build is broken
|
||||||
|
- JDK-8214557: Filter out VM flags which don't affect AOT code generation
|
||||||
|
- JDK-8214578: [macos] Problem with backslashes on macOS/JIS keyboard: Java ignores system settings
|
||||||
|
- JDK-8214840: runtime/NMT/MallocStressTest.java timed out
|
||||||
|
- JDK-8214850: Rename vm_operations.?pp files to vmOperations.?pp files
|
||||||
|
- JDK-8214904: Test8004741.java failed due to "Too few ThreadDeath hits; expected at least 6 but saw only 5"
|
||||||
|
- JDK-8215322: add @file support to jaotc
|
||||||
|
- JDK-8215355: Object monitor deadlock with no threads holding the monitor (using jemalloc 5.1)
|
||||||
|
- JDK-8215396: JTabbedPane preferred size calculation is wrong for SCROLL_TAB_LAYOUT
|
||||||
|
- JDK-8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java crashed with AOT enabled
|
||||||
|
- JDK-8216353: Use utility APIs introduced in org/netbeans/jemmy/util/LookAndFeel class in client sanity test cases
|
||||||
|
- JDK-8216354: Syntax error in toolchain_windows.m4
|
||||||
|
- JDK-8216472: (se) Stack overflow during selection operation leads to crash (win)
|
||||||
|
- JDK-8216535: tools/jimage/JImageExtractTest.java timed out
|
||||||
|
- JDK-8217235: Create automated test for SwingSet ColorChooserDemoTest
|
||||||
|
- JDK-8217297: Add support for multiple look and feel for SwingSet SliderDemoTest
|
||||||
|
- JDK-8217338: [Containers] Improve systemd slice memory limit support
|
||||||
|
- JDK-8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
|
||||||
|
- JDK-8217634: RunTest documentation and usability update
|
||||||
|
- JDK-8217717: ZGC: Broken oop map in C1 load barrier stub
|
||||||
|
- JDK-8217728: Speed up incremental rerun of "make hotspot"
|
||||||
|
- JDK-8218268: Javac treats Manifest Class-Path entries as Paths instead of URLs
|
||||||
|
- JDK-8218662: Allow 204 responses with Content-Length:0
|
||||||
|
- JDK-8218882: NET_Writev is declared, NET_WriteV is defined
|
||||||
|
- JDK-8218889: Improperly use of the Optional API
|
||||||
|
- JDK-8219205: JFR file without license header
|
||||||
|
- JDK-8219597: (bf) Heap buffer state changes could provoke unexpected exceptions
|
||||||
|
- JDK-8219723: javax/net/ssl/compatibility/Compatibility.java failed on some SNI cases
|
||||||
|
- JDK-8220348: [ntintel] asserts about copying unaligned array
|
||||||
|
- JDK-8220451: jdi/EventQueue/remove/remove004 failed due to "ERROR: thread2 is not alive"
|
||||||
|
- JDK-8220456: jdi/EventQueue/remove_l/remove_l004 failed due to "TIMEOUT while waiting for event"
|
||||||
|
- JDK-8220479: java/nio/channels/Selector/SelectWithConsumer.java failed at testTwoChannels()
|
||||||
|
- JDK-8220613: java/util/Arrays/TimSortStackSize2.java times out with fastdebug build
|
||||||
|
- JDK-8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed out
|
||||||
|
- JDK-8220786: Create new switch to redirect error reporting output to stdout or stderr
|
||||||
|
- JDK-8221270: Duplicated synchronized keywords in SSLSocketImpl
|
||||||
|
- JDK-8221312: test/jdk/sanity/client/SwingSet/src/ColorChooserDemoTest.java failed
|
||||||
|
- JDK-8221851: Use of THIS_FILE in hotspot invalidates precompiled header on Linux/GCC
|
||||||
|
- JDK-8221885: Add intermittent test in the JavaSound to the ProblemList
|
||||||
|
- JDK-8222264: Windows incremental build is broken with JDK-8217728
|
||||||
|
- JDK-8222391: javax/net/ssl/compatibility/Compatibility.java should be more flexible
|
||||||
|
- JDK-8222448: java/lang/reflect/PublicMethods/PublicMethodsTest.java times out
|
||||||
|
- JDK-8222519: ButtonDemoScreenshotTest fails randomly with "still state to be reached"
|
||||||
|
- JDK-8222741: jdi/EventQueue/remove/remove004 fails due to VMDisconnectedException
|
||||||
|
- JDK-8223003: SunMSCAPI keys are not cleaned up
|
||||||
|
- JDK-8223063: Support CNG RSA keys
|
||||||
|
- JDK-8223158: Docked MacBook cannot start any Java Swing applications
|
||||||
|
- JDK-8223260: NamingManager should cache InitialContextFactory
|
||||||
|
- JDK-8223464: Improve version string for Oracle CI builds
|
||||||
|
- JDK-8223558: Java does not render Myanmar script correctly
|
||||||
|
- JDK-8223627: jdk-13+20 bundle name contains null instead of ea
|
||||||
|
- JDK-8223638: Replace wildcard address with loopback or local host in tests - part 6
|
||||||
|
- JDK-8223678: Add Visual Studio Code workspace generation support (for native code)
|
||||||
|
- JDK-8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due to hang in LdapRequest.getReplyBer
|
||||||
|
- JDK-8223769: Assert triggers with -XX:+StressReflectiveCode
|
||||||
|
- JDK-8224187: Refactor arraycopy_prologue to allow ZGC read barriers on arraycopy
|
||||||
|
- JDK-8224475: JTextPane does not show images in HTML rendering
|
||||||
|
- JDK-8224673: Adjust permission for delayed starting of debugging
|
||||||
|
- JDK-8224705: Tests that need to be problem-listed or have printer resources
|
||||||
|
- JDK-8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot find J2Ddemo.jar
|
||||||
|
- JDK-8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/NoAutotransferToDisabledCompTest.java fails linux-x64
|
||||||
|
- JDK-8224830: test/jdk/java/awt/Focus/ModalExcludedWindowClickTest/ModalExcludedWindowClickTest.java fails on linux-x64
|
||||||
|
- JDK-8224851: AArch64: fix warnings and errors with Clang and GCC 8.3
|
||||||
|
- JDK-8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with stream closed
|
||||||
|
- JDK-8225007: java/awt/print/PrinterJob/LandscapeStackOverflow.java may hang
|
||||||
|
- JDK-8225105: java/awt/Focus/ShowFrameCheckForegroundTest/ShowFrameCheckForegroundTest.java fails in Windows 10
|
||||||
|
- JDK-8225117: java/math/BigInteger/SymmetricRangeTests.java fails with ParseException
|
||||||
|
- JDK-8225128: Add exception for expiring DocuSign root to VerifyCACerts test
|
||||||
|
- JDK-8225130: Add exception for expiring Comodo roots to VerifyCACerts test
|
||||||
|
- JDK-8225144: [macos] In Aqua L&F backspace key does not delete when Shift is pressed
|
||||||
|
- JDK-8225180: SignedObject with invalid Key not throwing the InvalidKeyException in Windows
|
||||||
|
- JDK-8225182: JNI exception pending in DestroyXIMCallback of awt_InputMethod.c:1327
|
||||||
|
- JDK-8225199: [Graal] compiler/jvmci/compilerToVM/IsMatureVsReprofileTest.java fails with -XX:CompileThresholdScaling=0.1
|
||||||
|
- JDK-8225305: ProblemList java/lang/invoke/VarHandles tests
|
||||||
|
- JDK-8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java timed out
|
||||||
|
- JDK-8225430: Replace wildcard address with loopback or local host in tests - part 14
|
||||||
|
- JDK-8225435: Upgrade IANA Language Subtag Registry to the latest for JDK14
|
||||||
|
- JDK-8225487: giflib legal file is missing attribution for openbsd-reallocarray.c
|
||||||
|
- JDK-8225567: Wrong file headers with 8202414 fix changeset
|
||||||
|
- JDK-8225684: [AOT] vmTestbase/vm/oom/production/AlwaysOOMProduction tests fail with AOTed java.base
|
||||||
|
- JDK-8225766: Curve in certificate should not affect signature scheme when using TLSv1.3
|
||||||
|
- JDK-8225797: OldObjectSample event creates unexpected amount of checkpoint data
|
||||||
|
- JDK-8226381: ProblemList java/lang/reflect/PublicMethods/PublicMethodsTest.java
|
||||||
|
- JDK-8226406: JVM fails to detect mismatched or corrupt CDS archive
|
||||||
|
- JDK-8226608: Hide the onjcmd option from the help output
|
||||||
|
- JDK-8226892: ActionListeners on JRadioButtons don't get notified when selection is changed with arrow keys
|
||||||
|
- JDK-8227112: exclude compiler/intrinsics/sha/sanity tests from AOT runs
|
||||||
|
- JDK-8227324: Upgrade to freetype 2.10.1
|
||||||
|
- JDK-8227528: TestAbortVMOnSafepointTimeout.java failed due to "RuntimeException: 'Safepoint sync time longer than' missing from stdout/stderr"
|
||||||
|
- JDK-8227645: Some tests in serviceability/sa run with fixed -Xmx values and risk running out of memory
|
||||||
|
- JDK-8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
|
||||||
|
- JDK-8227662: freetype seeks to index at the end of the font data
|
||||||
|
- JDK-8228479: Correct the format of ColorChooserDemoTest
|
||||||
|
- JDK-8228613: java.security.Provider#getServices order is no longer deterministic
|
||||||
|
- JDK-8228969: 2019-09-28 public suffix list update
|
||||||
|
- JDK-8229236: CriticalJNINatives: dll handling should be done in native thread state
|
||||||
|
- JDK-8229345: Memory leak due to vtable stubs not being shared on SPARC
|
||||||
|
- JDK-8229888: (zipfs) Updating an existing zip file does not preserve original permissions
|
||||||
|
- JDK-8229994: assert(false) failed: Bad graph detected in get_early_ctrl_for_expensive
|
||||||
|
- JDK-8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
|
||||||
|
- JDK-8230235: Rendering HTML with empty img attribute and documentBaseKey cause Exception
|
||||||
|
- JDK-8230390: Problemlist SA tests with AOT
|
||||||
|
- JDK-8230400: Missing constant pool entry for a method in stacktrace
|
||||||
|
- JDK-8230459: Test failed to resume JVMCI CompilerThread
|
||||||
|
- JDK-8230480: check malloc/calloc results in java.desktop
|
||||||
|
- JDK-8230597: Update GIFlib library to the 5.2.1
|
||||||
|
- JDK-8230611: infinite loop in LogOutputList::wait_until_no_readers()
|
||||||
|
- JDK-8230624: [TESTBUG] Problemlist JFR compiler/TestCodeSweeper.java
|
||||||
|
- JDK-8230677: Should disable Escape Analysis if JVMTI capability can_get_owned_monitor_info was taken
|
||||||
|
- JDK-8230926: [macosx] Two apostrophes are entered instead of one with "U.S. International - PC" layout
|
||||||
|
- JDK-8231025: Incorrect method tag offset for big endian platform
|
||||||
|
- JDK-8231081: TestMetadataRetention fails due to missing symbol id
|
||||||
|
- JDK-8231387: java.security.Provider.getService returns random result due to race condition with mutating methods in the same class
|
||||||
|
- JDK-8231430: C2: Memory stomp in max_array_length() for T_ILLEGAL type
|
||||||
|
- JDK-8231445: check ZALLOC return values in awt coding
|
||||||
|
- JDK-8231507: Update Apache Santuario (XML Signature) to version 2.1.4
|
||||||
|
- JDK-8231584: Deadlock with ClassLoader.findLibrary and System.loadLibrary call
|
||||||
|
- JDK-8231753: use more Posix functionality in aix os::print_os_info
|
||||||
|
- JDK-8231810: javax/net/ssl/templates/SSLSocketSSLEngineTemplate.java fails intermittently with "java.lang.Exception: Unexpected EOF"
|
||||||
|
- JDK-8232003: (fs) Files.write can leak file descriptor in the exception case
|
||||||
|
- JDK-8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC: Heap too small
|
||||||
|
- JDK-8232060: add some initializations using sigemptyset in os_aix.cpp
|
||||||
|
- JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
|
||||||
|
- JDK-8232167: Visual Studio install found through --with-tools-dir value is discarded
|
||||||
|
- JDK-8232170: FSInfo#getJarClassPath throws an exception not declared in its throws clause
|
||||||
|
- JDK-8232200: [macos 10.15] Windows in fullscreen tests jumps around the screen
|
||||||
|
- JDK-8232207: Linux os::available_memory re-reads cgroup configuration on every invocation
|
||||||
|
- JDK-8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
|
||||||
|
- JDK-8232370: Refactor some com.sun.jdi tests to enable IDE integration
|
||||||
|
- JDK-8232433: [macos 10.15] java/awt/Window/LocationAtScreenCorner/LocationAtScreenCorner.java may fail
|
||||||
|
- JDK-8232571: Add missing SIGINFO signal
|
||||||
|
- JDK-8232692: [TESTBUG] compiler/aot/fingerprint/SelfChangedCDS.java fails when cds is disabled
|
||||||
|
- JDK-8232713: Update BCEL version to 6.3.1 in license file
|
||||||
|
- JDK-8232806: Introduce a system property to disable eager lambda initialization
|
||||||
|
- JDK-8232834: RunTest sometimes fails to produce valid exitcode.txt
|
||||||
|
- JDK-8232880: Update test documentation with additional settings for client UI tooltip tests
|
||||||
|
- JDK-8232950: SUNPKCS11 Provider incorrectly check key length for PSS Signatures.
|
||||||
|
- JDK-8233018: Add a new test to verify that DatagramSocket is not interruptible
|
||||||
|
- JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong result if Klass* is aligned to 32bit
|
||||||
|
- JDK-8233032: assert(in_bb(n)) failed: must be
|
||||||
|
- JDK-8233078: fix minimal VM build on Linux ppc64(le)
|
||||||
|
- JDK-8233328: fix minimal VM build on Linux s390x
|
||||||
|
- JDK-8233383: Various minor fixes
|
||||||
|
- JDK-8233466: aarch64: remove unnecessary load of mdo when profiling return and parameters type
|
||||||
|
- JDK-8233491: Crash in AdapterHandlerLibrary::get_adapter with CDS due to code cache exhaustion
|
||||||
|
- JDK-8233529: loopTransform.cpp:2984: Error: assert(p_f->Opcode() == Op_IfFalse) failed
|
||||||
|
- JDK-8233548: Update CUP to v0.11b
|
||||||
|
- JDK-8233649: Update ProblemList.txt to exclude failing headful tests on macos
|
||||||
|
- JDK-8233656: assert(d->is_CFG() && n->is_CFG()) failed: must have CFG nodes
|
||||||
|
- JDK-8233657: Intermittent NPE in Component.validate()
|
||||||
|
- JDK-8234288: Turkey Time Zone returns incorrect time zone name
|
||||||
|
- JDK-8234323: NULL-check return value of SurfaceData_InitOps on macosx
|
||||||
|
- JDK-8234339: replace JLI_StrTok in java_md_solinux.c
|
||||||
|
- JDK-8234340: Bump update version for OpenJDK: jdk-11.0.7
|
||||||
|
- JDK-8234350: assert(mode == ControlAroundStripMined && (use == sfpt || !use->is_reachable_from_root())) failed: missed a node
|
||||||
|
- JDK-8234386: [macos] NPE was thrown at expanding Choice from maximized frame
|
||||||
|
- JDK-8234397: add OS uptime information to os::print_os_info output
|
||||||
|
- JDK-8234423: Modifying ArrayList.subList().subList() resets modCount of subList
|
||||||
|
- JDK-8234466: Class loading deadlock involving X509Factory#commitEvent()
|
||||||
|
- JDK-8234501: remove obsolete NET_ReadV
|
||||||
|
- JDK-8234525: enable link-time section-gc for linux s390x to remove unused code
|
||||||
|
- JDK-8234610: MaxVectorSize set wrongly when UseAVX=3 is specified after JDK-8221092
|
||||||
|
- JDK-8234617: C1: Incorrect result of field load due to missing narrowing conversion
|
||||||
|
- JDK-8234723: javax/net/ssl/TLS tests support TLSv1.3
|
||||||
|
- JDK-8234724: javax/net/ssl/templates/SSLSocketSSLEngineTemplate.java supports TLSv1.3
|
||||||
|
- JDK-8234741: enhance os::get_core_path on macOS
|
||||||
|
- JDK-8234769: Duplicate attribution in freetype.md
|
||||||
|
- JDK-8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
|
||||||
|
- JDK-8234809: set relro in linker flags when building with gcc
|
||||||
|
- JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java fails on Windows 10
|
||||||
|
- JDK-8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
|
||||||
|
- JDK-8235288: AVX 512 instructions inadvertently used on Xeon for small vector width operations
|
||||||
|
- JDK-8235325: build failure on Linux after 8235243
|
||||||
|
- JDK-8235383: C1 compilation fails with -XX:+PrintIRDuringConstruction -XX:+Verbose
|
||||||
|
- JDK-8235489: handle return values of sscanf calls in hotspot
|
||||||
|
- JDK-8235509: Backport for JDK-8209657 Refactor filemap.hpp to simplify integration with Serviceability Agent.
|
||||||
|
- JDK-8235510: java.util.zip.CRC32 performance drop after 8200067
|
||||||
|
- JDK-8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java does not handle archive mapping failure
|
||||||
|
- JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if prelink is enabled
|
||||||
|
- JDK-8235671: enhance print_rlimit_info in os_posix
|
||||||
|
- JDK-8235744: PIT: test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java times out in linux-x64
|
||||||
|
- JDK-8235904: Infinite loop when rendering huge lines
|
||||||
|
- JDK-8235998: [c2] Memory leaks during tracing after '8224193: stringStream should not use Resource Area'.
|
||||||
|
- JDK-8236039: JSSE Client does not accept status_request extension in CertificateRequest messages for TLS 1.3
|
||||||
|
- JDK-8236140: assert(!VerifyHashTableKeys || _hash_lock == 0) failed: remove node from hash table before modifying it
|
||||||
|
- JDK-8236179: C1 register allocation error with T_ADDRESS
|
||||||
|
- JDK-8236488: Support for configure option --with-native-debug-symbols=internal is impossible on Windows
|
||||||
|
- JDK-8236500: Windows ucrt.dll should be looked up in versioned WINSDK subdirectory
|
||||||
|
- JDK-8236709: struct SwitchRange in HS violates C++ One Definition Rule
|
||||||
|
- JDK-8236848: [JDK 11u] make run-test-tier1 fails after backport of JDK-8232834
|
||||||
|
- JDK-8236873: Worker has a deadlock bug
|
||||||
|
- JDK-8237217: Incorrect G1StringDedupEntry type used in StringDedupTable destructor
|
||||||
|
- JDK-8237368: Problem with NullPointerException in RMI TCPEndpoint.read
|
||||||
|
- JDK-8237375: SimpleThresholdPolicy misses CounterDecay timestamp initialization
|
||||||
|
- JDK-8237508: Simplify JarFile.isInitializing
|
||||||
|
- JDK-8237540: Missing files in backport of JDK-8210910
|
||||||
|
- JDK-8237541: Missing files in backport of JDK-8236528
|
||||||
|
- JDK-8237600: Test SunJSSEFIPSInit fails on Ubuntu
|
||||||
|
- JDK-8237819: s390x - remove unused pd_zero_to_words_large
|
||||||
|
- JDK-8237869: exclude jtreg test security/infra/java/security/cert/CertPathValidator/certification/LuxTrustCA.java because of instabilities
|
||||||
|
- JDK-8237879: make 4.3 breaks build
|
||||||
|
- JDK-8237945: CTW: C2 compilation fails with assert(just_allocated_object(alloc_ctl) == ptr) failed: most recent allo
|
||||||
|
- JDK-8238225: Issues reported after replacing symlink at Contents/MacOS/libjli.dylib with binary
|
||||||
|
- JDK-8238247: CTW runner should sweep nmethods more aggressively
|
||||||
|
- JDK-8238366: CTW runner closes standard output on exit
|
||||||
|
- JDK-8238438: SuperWord::co_locate_pack picks memory state of first instead of last load
|
||||||
|
- JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
|
||||||
|
- JDK-8238534: Deep sign macOS bundles before bundle archive is being created
|
||||||
|
- JDK-8238591: CTW: Split applications/ctw/modules/jdk_localedata.java
|
||||||
|
- JDK-8238596: AVX enabled by default for Skylake even when unsupported
|
||||||
|
- JDK-8238811: C2: assert(i >= req() || i == 0 || is_Region() || is_Phi()) with -XX:+VerifyGraphEdges
|
||||||
|
- JDK-8239005: [TESTBUG] test/hotspot/jtreg/runtime/StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must initialize static state before calling do_overflow()
|
||||||
|
- JDK-8239466: Loss of precision in counter decay calculation in 11u backport of JDK-8237375
|
||||||
|
- JDK-8239856: [ntintel] asserts about copying unaligned array element
|
||||||
|
- JDK-8240724: [test] jdk11 downport of 8224475 misses binary file test/jdk/javax/swing/JTextPane/arrow.png
|
||||||
|
- JDK-8241296: Segfault in JNIHandleBlock::oops_do()
|
||||||
|
|
||||||
|
Notes on individual issues:
|
||||||
|
===========================
|
||||||
|
|
||||||
|
security-libs/javax.xml.crypto:
|
||||||
|
|
||||||
|
JDK-8239467: Apache Santuario Library Updated to Version 2.1.4
|
||||||
|
==============================================================
|
||||||
|
The Apache Santuario library has been upgraded to version 2.1.4. As a
|
||||||
|
result, a new system property
|
||||||
|
`com.sun.org.apache.xml.internal.security.parser.pool-size` has been
|
||||||
|
introduced.
|
||||||
|
|
||||||
|
This new system property sets the pool size of the internal
|
||||||
|
`DocumentBuilder` cache used when processing XML Signatures. The
|
||||||
|
function is equivalent to the
|
||||||
|
`org.apache.xml.security.parser.pool-size` system property used in
|
||||||
|
Apache Santuario and has the same default value of 20.
|
||||||
9
README.md
Normal file
9
README.md
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
Package of LTS OpenJDK 11
|
||||||
|
OpenJDK have release cadence of 6 months. but 3/4 of them are Short Term Supported for 6 months only. This package is designed to harbore them. Currently it is build on openJDK 11. LTSs (next is 15) will go as separate packages.
|
||||||
|
|
||||||
|
JDK11 is last LTS release of Java platform. It is bringing many cool improvements - http://openjdk.java.net/projects/jdk/11/ and is landing to your Fedora. Where it will be maintained for several years. You will always be allowed to install Used LTSs in build root, and alongside via alternatives.
|
||||||
|
|
||||||
|
See announcement: http://mail.openjdk.java.net/pipermail/discuss/2017-September/004281.html
|
||||||
|
See java SIG plans: https://jvanek.fedorapeople.org/devconf/2018/changesInjavaReleaseProcess.pdf
|
||||||
|
|
||||||
|
https://fedoraproject.org/wiki/Changes/java-11-openjdk-TechPreview
|
||||||
72
TestCryptoLevel.java
Normal file
72
TestCryptoLevel.java
Normal file
@ -0,0 +1,72 @@
|
|||||||
|
/* TestCryptoLevel -- Ensure unlimited crypto policy is in use.
|
||||||
|
Copyright (C) 2012 Red Hat, Inc.
|
||||||
|
|
||||||
|
This program is free software: you can redistribute it and/or modify
|
||||||
|
it under the terms of the GNU Affero General Public License as
|
||||||
|
published by the Free Software Foundation, either version 3 of the
|
||||||
|
License, or (at your option) any later version.
|
||||||
|
|
||||||
|
This program is distributed in the hope that it will be useful,
|
||||||
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||||
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||||
|
GNU Affero General Public License for more details.
|
||||||
|
|
||||||
|
You should have received a copy of the GNU Affero General Public License
|
||||||
|
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||||
|
*/
|
||||||
|
|
||||||
|
import java.lang.reflect.Field;
|
||||||
|
import java.lang.reflect.Method;
|
||||||
|
import java.lang.reflect.InvocationTargetException;
|
||||||
|
|
||||||
|
import java.security.Permission;
|
||||||
|
import java.security.PermissionCollection;
|
||||||
|
|
||||||
|
public class TestCryptoLevel
|
||||||
|
{
|
||||||
|
public static void main(String[] args)
|
||||||
|
throws NoSuchFieldException, ClassNotFoundException,
|
||||||
|
IllegalAccessException, InvocationTargetException
|
||||||
|
{
|
||||||
|
Class<?> cls = null;
|
||||||
|
Method def = null, exempt = null;
|
||||||
|
|
||||||
|
try
|
||||||
|
{
|
||||||
|
cls = Class.forName("javax.crypto.JceSecurity");
|
||||||
|
}
|
||||||
|
catch (ClassNotFoundException ex)
|
||||||
|
{
|
||||||
|
System.err.println("Running a non-Sun JDK.");
|
||||||
|
System.exit(0);
|
||||||
|
}
|
||||||
|
try
|
||||||
|
{
|
||||||
|
def = cls.getDeclaredMethod("getDefaultPolicy");
|
||||||
|
exempt = cls.getDeclaredMethod("getExemptPolicy");
|
||||||
|
}
|
||||||
|
catch (NoSuchMethodException ex)
|
||||||
|
{
|
||||||
|
System.err.println("Running IcedTea with the original crypto patch.");
|
||||||
|
System.exit(0);
|
||||||
|
}
|
||||||
|
def.setAccessible(true);
|
||||||
|
exempt.setAccessible(true);
|
||||||
|
PermissionCollection defPerms = (PermissionCollection) def.invoke(null);
|
||||||
|
PermissionCollection exemptPerms = (PermissionCollection) exempt.invoke(null);
|
||||||
|
Class<?> apCls = Class.forName("javax.crypto.CryptoAllPermission");
|
||||||
|
Field apField = apCls.getDeclaredField("INSTANCE");
|
||||||
|
apField.setAccessible(true);
|
||||||
|
Permission allPerms = (Permission) apField.get(null);
|
||||||
|
if (defPerms.implies(allPerms) && (exemptPerms == null || exemptPerms.implies(allPerms)))
|
||||||
|
{
|
||||||
|
System.err.println("Running with the unlimited policy.");
|
||||||
|
System.exit(0);
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
System.err.println("WARNING: Running with a restricted crypto policy.");
|
||||||
|
System.exit(-1);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
49
TestECDSA.java
Normal file
49
TestECDSA.java
Normal file
@ -0,0 +1,49 @@
|
|||||||
|
/* TestECDSA -- Ensure ECDSA signatures are working.
|
||||||
|
Copyright (C) 2016 Red Hat, Inc.
|
||||||
|
|
||||||
|
This program is free software: you can redistribute it and/or modify
|
||||||
|
it under the terms of the GNU Affero General Public License as
|
||||||
|
published by the Free Software Foundation, either version 3 of the
|
||||||
|
License, or (at your option) any later version.
|
||||||
|
|
||||||
|
This program is distributed in the hope that it will be useful,
|
||||||
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||||
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||||
|
GNU Affero General Public License for more details.
|
||||||
|
|
||||||
|
You should have received a copy of the GNU Affero General Public License
|
||||||
|
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||||
|
*/
|
||||||
|
|
||||||
|
import java.math.BigInteger;
|
||||||
|
import java.security.KeyPair;
|
||||||
|
import java.security.KeyPairGenerator;
|
||||||
|
import java.security.Signature;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* @test
|
||||||
|
*/
|
||||||
|
public class TestECDSA {
|
||||||
|
|
||||||
|
public static void main(String[] args) throws Exception {
|
||||||
|
KeyPairGenerator keyGen = KeyPairGenerator.getInstance("EC");
|
||||||
|
KeyPair key = keyGen.generateKeyPair();
|
||||||
|
|
||||||
|
byte[] data = "This is a string to sign".getBytes("UTF-8");
|
||||||
|
|
||||||
|
Signature dsa = Signature.getInstance("NONEwithECDSA");
|
||||||
|
dsa.initSign(key.getPrivate());
|
||||||
|
dsa.update(data);
|
||||||
|
byte[] sig = dsa.sign();
|
||||||
|
System.out.println("Signature: " + new BigInteger(1, sig).toString(16));
|
||||||
|
|
||||||
|
Signature dsaCheck = Signature.getInstance("NONEwithECDSA");
|
||||||
|
dsaCheck.initVerify(key.getPublic());
|
||||||
|
dsaCheck.update(data);
|
||||||
|
boolean success = dsaCheck.verify(sig);
|
||||||
|
if (!success) {
|
||||||
|
throw new RuntimeException("Test failed. Signature verification error");
|
||||||
|
}
|
||||||
|
System.out.println("Test passed.");
|
||||||
|
}
|
||||||
|
}
|
||||||
43
TestSecurityProperties.java
Normal file
43
TestSecurityProperties.java
Normal file
@ -0,0 +1,43 @@
|
|||||||
|
import java.io.File;
|
||||||
|
import java.io.FileInputStream;
|
||||||
|
import java.security.Security;
|
||||||
|
import java.util.Properties;
|
||||||
|
|
||||||
|
public class TestSecurityProperties {
|
||||||
|
// JDK 11
|
||||||
|
private static final String JDK_PROPS_FILE_JDK_11 = System.getProperty("java.home") + "/conf/security/java.security";
|
||||||
|
// JDK 8
|
||||||
|
private static final String JDK_PROPS_FILE_JDK_8 = System.getProperty("java.home") + "/lib/security/java.security";
|
||||||
|
|
||||||
|
public static void main(String[] args) {
|
||||||
|
Properties jdkProps = new Properties();
|
||||||
|
loadProperties(jdkProps);
|
||||||
|
for (Object key: jdkProps.keySet()) {
|
||||||
|
String sKey = (String)key;
|
||||||
|
String securityVal = Security.getProperty(sKey);
|
||||||
|
String jdkSecVal = jdkProps.getProperty(sKey);
|
||||||
|
if (!securityVal.equals(jdkSecVal)) {
|
||||||
|
String msg = "Expected value '" + jdkSecVal + "' for key '" +
|
||||||
|
sKey + "'" + " but got value '" + securityVal + "'";
|
||||||
|
throw new RuntimeException("Test failed! " + msg);
|
||||||
|
} else {
|
||||||
|
System.out.println("DEBUG: " + sKey + " = " + jdkSecVal + " as expected.");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
System.out.println("TestSecurityProperties PASSED!");
|
||||||
|
}
|
||||||
|
|
||||||
|
private static void loadProperties(Properties props) {
|
||||||
|
String javaVersion = System.getProperty("java.version");
|
||||||
|
System.out.println("Debug: Java version is " + javaVersion);
|
||||||
|
String propsFile = JDK_PROPS_FILE_JDK_11;
|
||||||
|
if (javaVersion.startsWith("1.8.0")) {
|
||||||
|
propsFile = JDK_PROPS_FILE_JDK_8;
|
||||||
|
}
|
||||||
|
try (FileInputStream fin = new FileInputStream(new File(propsFile))) {
|
||||||
|
props.load(fin);
|
||||||
|
} catch (Exception e) {
|
||||||
|
throw new RuntimeException("Test failed!", e);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
157
generate_source_tarball.sh
Executable file
157
generate_source_tarball.sh
Executable file
@ -0,0 +1,157 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
# Generates the 'source tarball' for JDK projects.
|
||||||
|
#
|
||||||
|
# Example:
|
||||||
|
# When used from local repo set REPO_ROOT pointing to file:// with your repo
|
||||||
|
# If your local repo follows upstream forests conventions, it may be enough to set OPENJDK_URL
|
||||||
|
# If you want to use a local copy of patch PR3802, set the path to it in the PR3802 variable
|
||||||
|
#
|
||||||
|
# In any case you have to set PROJECT_NAME REPO_NAME and VERSION. eg:
|
||||||
|
# PROJECT_NAME=jdk
|
||||||
|
# REPO_NAME=jdk
|
||||||
|
# VERSION=tip
|
||||||
|
# or to eg prepare systemtap:
|
||||||
|
# icedtea7's jstack and other tapsets
|
||||||
|
# VERSION=6327cf1cea9e
|
||||||
|
# REPO_NAME=icedtea7-2.6
|
||||||
|
# PROJECT_NAME=release
|
||||||
|
# OPENJDK_URL=http://icedtea.classpath.org/hg/
|
||||||
|
# TO_COMPRESS="*/tapset"
|
||||||
|
#
|
||||||
|
# They are used to create correct name and are used in construction of sources url (unless REPO_ROOT is set)
|
||||||
|
|
||||||
|
# This script creates a single source tarball out of the repository
|
||||||
|
# based on the given tag and removes code not allowed in fedora/rhel. For
|
||||||
|
# consistency, the source tarball will always contain 'openjdk' as the top
|
||||||
|
# level folder, name is created, based on parameter
|
||||||
|
#
|
||||||
|
|
||||||
|
if [ ! "x$PR3802" = "x" ] ; then
|
||||||
|
if [ ! -f "$PR3802" ] ; then
|
||||||
|
echo "You have specified PR3802 as $PR3802 but it does not exist. Exiting"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
set -e
|
||||||
|
|
||||||
|
OPENJDK_URL_DEFAULT=http://hg.openjdk.java.net
|
||||||
|
COMPRESSION_DEFAULT=xz
|
||||||
|
|
||||||
|
if [ "x$1" = "xhelp" ] ; then
|
||||||
|
echo -e "Behaviour may be specified by setting the following variables:\n"
|
||||||
|
echo "VERSION - the version of the specified OpenJDK project"
|
||||||
|
echo "PROJECT_NAME -- the name of the OpenJDK project being archived (optional; only needed by defaults)"
|
||||||
|
echo "REPO_NAME - the name of the OpenJDK repository (optional; only needed by defaults)"
|
||||||
|
echo "OPENJDK_URL - the URL to retrieve code from (optional; defaults to ${OPENJDK_URL_DEFAULT})"
|
||||||
|
echo "COMPRESSION - the compression type to use (optional; defaults to ${COMPRESSION_DEFAULT})"
|
||||||
|
echo "FILE_NAME_ROOT - name of the archive, minus extensions (optional; defaults to PROJECT_NAME-REPO_NAME-VERSION)"
|
||||||
|
echo "REPO_ROOT - the location of the Mercurial repository to archive (optional; defaults to OPENJDK_URL/PROJECT_NAME/REPO_NAME)"
|
||||||
|
echo "TO_COMPRESS - what part of clone to pack (default is openjdk)"
|
||||||
|
echo "PR3802 - the path to the PR3802 patch to apply (optional; downloaded if unavailable)"
|
||||||
|
exit 1;
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
if [ "x$VERSION" = "x" ] ; then
|
||||||
|
echo "No VERSION specified"
|
||||||
|
exit -2
|
||||||
|
fi
|
||||||
|
echo "Version: ${VERSION}"
|
||||||
|
|
||||||
|
# REPO_NAME is only needed when we default on REPO_ROOT and FILE_NAME_ROOT
|
||||||
|
if [ "x$FILE_NAME_ROOT" = "x" -o "x$REPO_ROOT" = "x" ] ; then
|
||||||
|
if [ "x$PROJECT_NAME" = "x" ] ; then
|
||||||
|
echo "No PROJECT_NAME specified"
|
||||||
|
exit -1
|
||||||
|
fi
|
||||||
|
echo "Project name: ${PROJECT_NAME}"
|
||||||
|
if [ "x$REPO_NAME" = "x" ] ; then
|
||||||
|
echo "No REPO_NAME specified"
|
||||||
|
exit -3
|
||||||
|
fi
|
||||||
|
echo "Repository name: ${REPO_NAME}"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ "x$OPENJDK_URL" = "x" ] ; then
|
||||||
|
OPENJDK_URL=${OPENJDK_URL_DEFAULT}
|
||||||
|
echo "No OpenJDK URL specified; defaulting to ${OPENJDK_URL}"
|
||||||
|
else
|
||||||
|
echo "OpenJDK URL: ${OPENJDK_URL}"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ "x$COMPRESSION" = "x" ] ; then
|
||||||
|
# rhel 5 needs tar.gz
|
||||||
|
COMPRESSION=${COMPRESSION_DEFAULT}
|
||||||
|
fi
|
||||||
|
echo "Creating a tar.${COMPRESSION} archive"
|
||||||
|
|
||||||
|
if [ "x$FILE_NAME_ROOT" = "x" ] ; then
|
||||||
|
FILE_NAME_ROOT=${PROJECT_NAME}-${REPO_NAME}-${VERSION}
|
||||||
|
echo "No file name root specified; default to ${FILE_NAME_ROOT}"
|
||||||
|
fi
|
||||||
|
if [ "x$REPO_ROOT" = "x" ] ; then
|
||||||
|
REPO_ROOT="${OPENJDK_URL}/${PROJECT_NAME}/${REPO_NAME}"
|
||||||
|
echo "No repository root specified; default to ${REPO_ROOT}"
|
||||||
|
fi;
|
||||||
|
|
||||||
|
if [ "x$TO_COMPRESS" = "x" ] ; then
|
||||||
|
TO_COMPRESS="openjdk"
|
||||||
|
echo "No to be compressed targets specified, ; default to ${TO_COMPRESS}"
|
||||||
|
fi;
|
||||||
|
|
||||||
|
if [ -d ${FILE_NAME_ROOT} ] ; then
|
||||||
|
echo "exists exists exists exists exists exists exists "
|
||||||
|
echo "reusing reusing reusing reusing reusing reusing "
|
||||||
|
echo ${FILE_NAME_ROOT}
|
||||||
|
else
|
||||||
|
mkdir "${FILE_NAME_ROOT}"
|
||||||
|
pushd "${FILE_NAME_ROOT}"
|
||||||
|
echo "Cloning ${VERSION} root repository from ${REPO_ROOT}"
|
||||||
|
hg clone ${REPO_ROOT} openjdk -r ${VERSION}
|
||||||
|
popd
|
||||||
|
fi
|
||||||
|
pushd "${FILE_NAME_ROOT}"
|
||||||
|
if [ -d openjdk/src ]; then
|
||||||
|
pushd openjdk
|
||||||
|
echo "Removing EC source code we don't build"
|
||||||
|
CRYPTO_PATH=src/jdk.crypto.ec/share/native/libsunec/impl
|
||||||
|
rm -vf ${CRYPTO_PATH}/ec2.h
|
||||||
|
rm -vf ${CRYPTO_PATH}/ec2_163.c
|
||||||
|
rm -vf ${CRYPTO_PATH}/ec2_193.c
|
||||||
|
rm -vf ${CRYPTO_PATH}/ec2_233.c
|
||||||
|
rm -vf ${CRYPTO_PATH}/ec2_aff.c
|
||||||
|
rm -vf ${CRYPTO_PATH}/ec2_mont.c
|
||||||
|
rm -vf ${CRYPTO_PATH}/ecp_192.c
|
||||||
|
rm -vf ${CRYPTO_PATH}/ecp_224.c
|
||||||
|
|
||||||
|
echo "Syncing EC list with NSS"
|
||||||
|
if [ "x$PR3802" = "x" ] ; then
|
||||||
|
# get pr3802.patch (from http://icedtea.classpath.org/hg/icedtea11) from most correct tag
|
||||||
|
# Do not push it or publish it (see http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=3751)
|
||||||
|
echo "PR3802 not found. Downloading..."
|
||||||
|
wget http://icedtea.classpath.org/hg/icedtea11/raw-file/tip/patches/pr3802-4curve.patch
|
||||||
|
echo "Applying ${PWD}/pr3802.patch"
|
||||||
|
patch -Np1 < pr3802.patch
|
||||||
|
rm pr3802.patch
|
||||||
|
else
|
||||||
|
echo "Applying ${PR3802}"
|
||||||
|
patch -Np1 < $PR3802
|
||||||
|
fi;
|
||||||
|
find . -name '*.orig' -exec rm -vf '{}' ';'
|
||||||
|
popd
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "Compressing remaining forest"
|
||||||
|
if [ "X$COMPRESSION" = "Xxz" ] ; then
|
||||||
|
SWITCH=cJf
|
||||||
|
else
|
||||||
|
SWITCH=czf
|
||||||
|
fi
|
||||||
|
TARBALL_NAME=${FILE_NAME_ROOT}-4curve.tar.${COMPRESSION}
|
||||||
|
tar --exclude-vcs -$SWITCH ${TARBALL_NAME} $TO_COMPRESS
|
||||||
|
mv ${TARBALL_NAME} ..
|
||||||
|
popd
|
||||||
|
echo "Done. You may want to remove the uncompressed version - $FILE_NAME_ROOT."
|
||||||
|
|
||||||
|
|
||||||
97
icedtea_sync.sh
Executable file
97
icedtea_sync.sh
Executable file
@ -0,0 +1,97 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# Copyright (C) 2019 Red Hat, Inc.
|
||||||
|
# Written by Andrew John Hughes <gnu.andrew@redhat.com>.
|
||||||
|
#
|
||||||
|
# This program is free software: you can redistribute it and/or modify
|
||||||
|
# it under the terms of the GNU Affero General Public License as
|
||||||
|
# published by the Free Software Foundation, either version 3 of the
|
||||||
|
# License, or (at your option) any later version.
|
||||||
|
#
|
||||||
|
# This program is distributed in the hope that it will be useful,
|
||||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||||
|
# GNU Affero General Public License for more details.
|
||||||
|
#
|
||||||
|
# You should have received a copy of the GNU Affero General Public License
|
||||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||||
|
|
||||||
|
ICEDTEA_VERSION=3.15.0
|
||||||
|
ICEDTEA_URL=https://icedtea.classpath.org/download/source
|
||||||
|
ICEDTEA_SIGNING_KEY=CFDA0F9B35964222
|
||||||
|
|
||||||
|
set -e
|
||||||
|
|
||||||
|
if test "x${WGET}" = "x"; then
|
||||||
|
WGET=$(which wget);
|
||||||
|
if test "x${WGET}" = "x"; then
|
||||||
|
echo "wget not found";
|
||||||
|
exit 1;
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
if test "x${CHECKSUM}" = "x"; then
|
||||||
|
CHECKSUM=$(which sha256sum)
|
||||||
|
if test "x${CHECKSUM}" = "x"; then
|
||||||
|
echo "sha256sum not found";
|
||||||
|
exit 2;
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
if test "x${PGP}" = "x"; then
|
||||||
|
PGP=$(which gpg)
|
||||||
|
if test "x${PGP}" = "x"; then
|
||||||
|
echo "gpg not found";
|
||||||
|
exit 3;
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
if test "x${TAR}" = "x"; then
|
||||||
|
TAR=$(which tar)
|
||||||
|
if test "x${TAR}" = "x"; then
|
||||||
|
echo "tar not found";
|
||||||
|
exit 4;
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "Dependencies:";
|
||||||
|
echo -e "\tWGET: ${WGET}";
|
||||||
|
echo -e "\tCHECKSUM: ${CHECKSUM}";
|
||||||
|
echo -e "\tPGP: ${PGP}\n";
|
||||||
|
echo -e "\tTAR: ${TAR}\n";
|
||||||
|
|
||||||
|
echo "Checking for IcedTea signing key ${ICEDTEA_SIGNING_KEY}...";
|
||||||
|
if ! gpg --list-keys ${ICEDTEA_SIGNING_KEY}; then
|
||||||
|
echo "IcedTea signing key ${ICEDTEA_SIGNING_KEY} not installed.";
|
||||||
|
exit 5;
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "Downloading IcedTea release tarball...";
|
||||||
|
${WGET} -v ${ICEDTEA_URL}/icedtea-${ICEDTEA_VERSION}.tar.xz
|
||||||
|
echo "Downloading IcedTea tarball signature...";
|
||||||
|
${WGET} -v ${ICEDTEA_URL}/icedtea-${ICEDTEA_VERSION}.tar.xz.sig
|
||||||
|
echo "Downloading IcedTea tarball checksums...";
|
||||||
|
${WGET} -v ${ICEDTEA_URL}/icedtea-${ICEDTEA_VERSION}.sha256
|
||||||
|
|
||||||
|
echo "Verifying checksums...";
|
||||||
|
${CHECKSUM} --check --ignore-missing icedtea-${ICEDTEA_VERSION}.sha256
|
||||||
|
|
||||||
|
echo "Checking signature...";
|
||||||
|
${PGP} --verify icedtea-${ICEDTEA_VERSION}.tar.xz.sig
|
||||||
|
|
||||||
|
echo "Extracting files...";
|
||||||
|
${TAR} xJf icedtea-${ICEDTEA_VERSION}.tar.xz \
|
||||||
|
icedtea-${ICEDTEA_VERSION}/tapset \
|
||||||
|
icedtea-${ICEDTEA_VERSION}/jconsole.desktop.in
|
||||||
|
|
||||||
|
echo "Replacing desktop files...";
|
||||||
|
mv -v icedtea-${ICEDTEA_VERSION}/jconsole.desktop.in .
|
||||||
|
|
||||||
|
echo "Creating new tapset tarball...";
|
||||||
|
mv -v icedtea-${ICEDTEA_VERSION} openjdk
|
||||||
|
${TAR} cJf tapsets-icedtea-${ICEDTEA_VERSION}.tar.xz openjdk
|
||||||
|
|
||||||
|
rm -rvf openjdk
|
||||||
|
rm -vf icedtea-${ICEDTEA_VERSION}.tar.xz
|
||||||
|
rm -vf icedtea-${ICEDTEA_VERSION}.tar.xz.sig
|
||||||
|
rm -vf icedtea-${ICEDTEA_VERSION}.sha256
|
||||||
2546
java-11-openjdk.spec
Normal file
2546
java-11-openjdk.spec
Normal file
File diff suppressed because it is too large
Load Diff
10
jconsole.desktop.in
Normal file
10
jconsole.desktop.in
Normal file
@ -0,0 +1,10 @@
|
|||||||
|
[Desktop Entry]
|
||||||
|
Name=OpenJDK @JAVA_VER@ for @target_cpu@ Monitoring & Management Console (@OPENJDK_VER@)
|
||||||
|
Comment=Monitor and manage OpenJDK applications
|
||||||
|
Exec=_SDKBINDIR_/jconsole
|
||||||
|
Icon=java-@JAVA_VER@-@JAVA_VENDOR@
|
||||||
|
Terminal=false
|
||||||
|
Type=Application
|
||||||
|
StartupWMClass=sun-tools-jconsole-JConsole
|
||||||
|
Categories=Development;Profiling;Java;
|
||||||
|
Version=1.0
|
||||||
5
nss.cfg.in
Normal file
5
nss.cfg.in
Normal file
@ -0,0 +1,5 @@
|
|||||||
|
name = NSS
|
||||||
|
nssLibraryDirectory = @NSS_LIBDIR@
|
||||||
|
nssDbMode = noDb
|
||||||
|
attributes = compatibility
|
||||||
|
handleStartupErrors = ignoreMultipleInitialisation
|
||||||
@ -0,0 +1,88 @@
|
|||||||
|
|
||||||
|
# HG changeset patch
|
||||||
|
# User andrew
|
||||||
|
# Date 1478057514 0
|
||||||
|
# Node ID 1c4d5cb2096ae55106111da200b0bcad304f650c
|
||||||
|
# Parent 3d53f19b48384e5252f4ec8891f7a3a82d77af2a
|
||||||
|
PR3694: Support Fedora/RHEL system crypto policy
|
||||||
|
diff -r 3d53f19b4838 -r 1c4d5cb2096a src/java.base/share/classes/java/security/Security.java
|
||||||
|
--- a/src/java.base/share/classes/java/security/Security.java Wed Oct 26 03:51:39 2016 +0100
|
||||||
|
+++ b/src/java.base/share/classes/java/security/Security.java Wed Nov 02 03:31:54 2016 +0000
|
||||||
|
@@ -43,6 +43,9 @@
|
||||||
|
* implementation-specific location, which is typically the properties file
|
||||||
|
* {@code conf/security/java.security} in the Java installation directory.
|
||||||
|
*
|
||||||
|
+ * <p>Additional default values of security properties are read from a
|
||||||
|
+ * system-specific location, if available.</p>
|
||||||
|
+ *
|
||||||
|
* @author Benjamin Renaud
|
||||||
|
* @since 1.1
|
||||||
|
*/
|
||||||
|
@@ -52,6 +55,10 @@
|
||||||
|
private static final Debug sdebug =
|
||||||
|
Debug.getInstance("properties");
|
||||||
|
|
||||||
|
+ /* System property file*/
|
||||||
|
+ private static final String SYSTEM_PROPERTIES =
|
||||||
|
+ "/etc/crypto-policies/back-ends/java.config";
|
||||||
|
+
|
||||||
|
/* The java.security properties */
|
||||||
|
private static Properties props;
|
||||||
|
|
||||||
|
@@ -93,6 +100,7 @@
|
||||||
|
if (sdebug != null) {
|
||||||
|
sdebug.println("reading security properties file: " +
|
||||||
|
propFile);
|
||||||
|
+ sdebug.println(props.toString());
|
||||||
|
}
|
||||||
|
} catch (IOException e) {
|
||||||
|
if (sdebug != null) {
|
||||||
|
@@ -114,6 +122,31 @@
|
||||||
|
}
|
||||||
|
|
||||||
|
if ("true".equalsIgnoreCase(props.getProperty
|
||||||
|
+ ("security.useSystemPropertiesFile"))) {
|
||||||
|
+
|
||||||
|
+ // now load the system file, if it exists, so its values
|
||||||
|
+ // will win if they conflict with the earlier values
|
||||||
|
+ try (BufferedInputStream bis =
|
||||||
|
+ new BufferedInputStream(new FileInputStream(SYSTEM_PROPERTIES))) {
|
||||||
|
+ props.load(bis);
|
||||||
|
+ loadedProps = true;
|
||||||
|
+
|
||||||
|
+ if (sdebug != null) {
|
||||||
|
+ sdebug.println("reading system security properties file " +
|
||||||
|
+ SYSTEM_PROPERTIES);
|
||||||
|
+ sdebug.println(props.toString());
|
||||||
|
+ }
|
||||||
|
+ } catch (IOException e) {
|
||||||
|
+ if (sdebug != null) {
|
||||||
|
+ sdebug.println
|
||||||
|
+ ("unable to load security properties from " +
|
||||||
|
+ SYSTEM_PROPERTIES);
|
||||||
|
+ e.printStackTrace();
|
||||||
|
+ }
|
||||||
|
+ }
|
||||||
|
+ }
|
||||||
|
+
|
||||||
|
+ if ("true".equalsIgnoreCase(props.getProperty
|
||||||
|
("security.overridePropertiesFile"))) {
|
||||||
|
|
||||||
|
String extraPropFile = System.getProperty
|
||||||
|
diff -r 3d53f19b4838 -r 1c4d5cb2096a src/java.base/share/conf/security/java.security
|
||||||
|
--- a/src/java.base/share/conf/security/java.security Wed Oct 26 03:51:39 2016 +0100
|
||||||
|
+++ b/src/java.base/share/conf/security/java.security Wed Nov 02 03:31:54 2016 +0000
|
||||||
|
@@ -276,6 +276,13 @@
|
||||||
|
security.overridePropertiesFile=true
|
||||||
|
|
||||||
|
#
|
||||||
|
+# Determines whether this properties file will be appended to
|
||||||
|
+# using the system properties file stored at
|
||||||
|
+# /etc/crypto-policies/back-ends/java.config
|
||||||
|
+#
|
||||||
|
+security.useSystemPropertiesFile=true
|
||||||
|
+
|
||||||
|
+#
|
||||||
|
# Determines the default key and trust manager factory algorithms for
|
||||||
|
# the javax.net.ssl package.
|
||||||
|
#
|
||||||
78
pr3695-toggle_system_crypto_policy.patch
Normal file
78
pr3695-toggle_system_crypto_policy.patch
Normal file
@ -0,0 +1,78 @@
|
|||||||
|
# HG changeset patch
|
||||||
|
# User andrew
|
||||||
|
# Date 1545198926 0
|
||||||
|
# Wed Dec 19 05:55:26 2018 +0000
|
||||||
|
# Node ID f2cbd688824c128db7fa848c8732fb0ab3507776
|
||||||
|
# Parent 81f07f6d1f8b7b51b136d3974c61bc8bb513770c
|
||||||
|
PR3695: Allow use of system crypto policy to be disabled by the user
|
||||||
|
Summary: Read user overrides first so security.useSystemPropertiesFile can be disabled and add -Djava.security.disableSystemPropertiesFile
|
||||||
|
|
||||||
|
diff --git a/src/java.base/share/classes/java/security/Security.java b/src/java.base/share/classes/java/security/Security.java
|
||||||
|
--- a/src/java.base/share/classes/java/security/Security.java
|
||||||
|
+++ b/src/java.base/share/classes/java/security/Security.java
|
||||||
|
@@ -125,31 +125,6 @@
|
||||||
|
}
|
||||||
|
|
||||||
|
if ("true".equalsIgnoreCase(props.getProperty
|
||||||
|
- ("security.useSystemPropertiesFile"))) {
|
||||||
|
-
|
||||||
|
- // now load the system file, if it exists, so its values
|
||||||
|
- // will win if they conflict with the earlier values
|
||||||
|
- try (BufferedInputStream bis =
|
||||||
|
- new BufferedInputStream(new FileInputStream(SYSTEM_PROPERTIES))) {
|
||||||
|
- props.load(bis);
|
||||||
|
- loadedProps = true;
|
||||||
|
-
|
||||||
|
- if (sdebug != null) {
|
||||||
|
- sdebug.println("reading system security properties file " +
|
||||||
|
- SYSTEM_PROPERTIES);
|
||||||
|
- sdebug.println(props.toString());
|
||||||
|
- }
|
||||||
|
- } catch (IOException e) {
|
||||||
|
- if (sdebug != null) {
|
||||||
|
- sdebug.println
|
||||||
|
- ("unable to load security properties from " +
|
||||||
|
- SYSTEM_PROPERTIES);
|
||||||
|
- e.printStackTrace();
|
||||||
|
- }
|
||||||
|
- }
|
||||||
|
- }
|
||||||
|
-
|
||||||
|
- if ("true".equalsIgnoreCase(props.getProperty
|
||||||
|
("security.overridePropertiesFile"))) {
|
||||||
|
|
||||||
|
String extraPropFile = System.getProperty
|
||||||
|
@@ -215,6 +190,33 @@
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
+ String disableSystemProps = System.getProperty("java.security.disableSystemPropertiesFile");
|
||||||
|
+ if (disableSystemProps == null &&
|
||||||
|
+ "true".equalsIgnoreCase(props.getProperty
|
||||||
|
+ ("security.useSystemPropertiesFile"))) {
|
||||||
|
+
|
||||||
|
+ // now load the system file, if it exists, so its values
|
||||||
|
+ // will win if they conflict with the earlier values
|
||||||
|
+ try (BufferedInputStream bis =
|
||||||
|
+ new BufferedInputStream(new FileInputStream(SYSTEM_PROPERTIES))) {
|
||||||
|
+ props.load(bis);
|
||||||
|
+ loadedProps = true;
|
||||||
|
+
|
||||||
|
+ if (sdebug != null) {
|
||||||
|
+ sdebug.println("reading system security properties file " +
|
||||||
|
+ SYSTEM_PROPERTIES);
|
||||||
|
+ sdebug.println(props.toString());
|
||||||
|
+ }
|
||||||
|
+ } catch (IOException e) {
|
||||||
|
+ if (sdebug != null) {
|
||||||
|
+ sdebug.println
|
||||||
|
+ ("unable to load security properties from " +
|
||||||
|
+ SYSTEM_PROPERTIES);
|
||||||
|
+ e.printStackTrace();
|
||||||
|
+ }
|
||||||
|
+ }
|
||||||
|
+ }
|
||||||
|
+
|
||||||
|
if (!loadedProps) {
|
||||||
|
initializeStatic();
|
||||||
|
if (sdebug != null) {
|
||||||
131
remove-intree-libraries.sh
Normal file
131
remove-intree-libraries.sh
Normal file
@ -0,0 +1,131 @@
|
|||||||
|
#!/bin/sh
|
||||||
|
|
||||||
|
ZIP_SRC=src/java.base/share/native/libzip/zlib/
|
||||||
|
JPEG_SRC=src/java.desktop/share/native/libjavajpeg/
|
||||||
|
GIF_SRC=src/java.desktop/share/native/libsplashscreen/giflib/
|
||||||
|
PNG_SRC=src/java.desktop/share/native/libsplashscreen/libpng/
|
||||||
|
LCMS_SRC=src/java.desktop/share/native/liblcms/
|
||||||
|
|
||||||
|
cd openjdk
|
||||||
|
|
||||||
|
echo "Removing built-in libs (they will be linked)"
|
||||||
|
|
||||||
|
echo "Removing zlib"
|
||||||
|
if [ ! -d ${ZIP_SRC} ]; then
|
||||||
|
echo "${ZIP_SRC} does not exist. Refusing to proceed."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
rm -rvf ${ZIP_SRC}
|
||||||
|
|
||||||
|
echo "Removing libjpeg"
|
||||||
|
if [ ! -f ${JPEG_SRC}/jdhuff.c ]; then # some file that sound definitely exist
|
||||||
|
echo "${JPEG_SRC} does not contain jpeg sources. Refusing to proceed."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
rm -vf ${JPEG_SRC}/jcomapi.c
|
||||||
|
rm -vf ${JPEG_SRC}/jdapimin.c
|
||||||
|
rm -vf ${JPEG_SRC}/jdapistd.c
|
||||||
|
rm -vf ${JPEG_SRC}/jdcoefct.c
|
||||||
|
rm -vf ${JPEG_SRC}/jdcolor.c
|
||||||
|
rm -vf ${JPEG_SRC}/jdct.h
|
||||||
|
rm -vf ${JPEG_SRC}/jddctmgr.c
|
||||||
|
rm -vf ${JPEG_SRC}/jdhuff.c
|
||||||
|
rm -vf ${JPEG_SRC}/jdhuff.h
|
||||||
|
rm -vf ${JPEG_SRC}/jdinput.c
|
||||||
|
rm -vf ${JPEG_SRC}/jdmainct.c
|
||||||
|
rm -vf ${JPEG_SRC}/jdmarker.c
|
||||||
|
rm -vf ${JPEG_SRC}/jdmaster.c
|
||||||
|
rm -vf ${JPEG_SRC}/jdmerge.c
|
||||||
|
rm -vf ${JPEG_SRC}/jdphuff.c
|
||||||
|
rm -vf ${JPEG_SRC}/jdpostct.c
|
||||||
|
rm -vf ${JPEG_SRC}/jdsample.c
|
||||||
|
rm -vf ${JPEG_SRC}/jerror.c
|
||||||
|
rm -vf ${JPEG_SRC}/jerror.h
|
||||||
|
rm -vf ${JPEG_SRC}/jidctflt.c
|
||||||
|
rm -vf ${JPEG_SRC}/jidctfst.c
|
||||||
|
rm -vf ${JPEG_SRC}/jidctint.c
|
||||||
|
rm -vf ${JPEG_SRC}/jidctred.c
|
||||||
|
rm -vf ${JPEG_SRC}/jinclude.h
|
||||||
|
rm -vf ${JPEG_SRC}/jmemmgr.c
|
||||||
|
rm -vf ${JPEG_SRC}/jmemsys.h
|
||||||
|
rm -vf ${JPEG_SRC}/jmemnobs.c
|
||||||
|
rm -vf ${JPEG_SRC}/jmorecfg.h
|
||||||
|
rm -vf ${JPEG_SRC}/jpegint.h
|
||||||
|
rm -vf ${JPEG_SRC}/jpeglib.h
|
||||||
|
rm -vf ${JPEG_SRC}/jquant1.c
|
||||||
|
rm -vf ${JPEG_SRC}/jquant2.c
|
||||||
|
rm -vf ${JPEG_SRC}/jutils.c
|
||||||
|
rm -vf ${JPEG_SRC}/jcapimin.c
|
||||||
|
rm -vf ${JPEG_SRC}/jcapistd.c
|
||||||
|
rm -vf ${JPEG_SRC}/jccoefct.c
|
||||||
|
rm -vf ${JPEG_SRC}/jccolor.c
|
||||||
|
rm -vf ${JPEG_SRC}/jcdctmgr.c
|
||||||
|
rm -vf ${JPEG_SRC}/jchuff.c
|
||||||
|
rm -vf ${JPEG_SRC}/jchuff.h
|
||||||
|
rm -vf ${JPEG_SRC}/jcinit.c
|
||||||
|
rm -vf ${JPEG_SRC}/jconfig.h
|
||||||
|
rm -vf ${JPEG_SRC}/jcmainct.c
|
||||||
|
rm -vf ${JPEG_SRC}/jcmarker.c
|
||||||
|
rm -vf ${JPEG_SRC}/jcmaster.c
|
||||||
|
rm -vf ${JPEG_SRC}/jcparam.c
|
||||||
|
rm -vf ${JPEG_SRC}/jcphuff.c
|
||||||
|
rm -vf ${JPEG_SRC}/jcprepct.c
|
||||||
|
rm -vf ${JPEG_SRC}/jcsample.c
|
||||||
|
rm -vf ${JPEG_SRC}/jctrans.c
|
||||||
|
rm -vf ${JPEG_SRC}/jdtrans.c
|
||||||
|
rm -vf ${JPEG_SRC}/jfdctflt.c
|
||||||
|
rm -vf ${JPEG_SRC}/jfdctfst.c
|
||||||
|
rm -vf ${JPEG_SRC}/jfdctint.c
|
||||||
|
rm -vf ${JPEG_SRC}/jversion.h
|
||||||
|
rm -vf ${JPEG_SRC}/README
|
||||||
|
|
||||||
|
echo "Removing giflib"
|
||||||
|
if [ ! -d ${GIF_SRC} ]; then
|
||||||
|
echo "${GIF_SRC} does not exist. Refusing to proceed."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
rm -rvf ${GIF_SRC}
|
||||||
|
|
||||||
|
echo "Removing libpng"
|
||||||
|
if [ ! -d ${PNG_SRC} ]; then
|
||||||
|
echo "${PNG_SRC} does not exist. Refusing to proceed."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
rm -rvf ${PNG_SRC}
|
||||||
|
|
||||||
|
echo "Removing lcms"
|
||||||
|
if [ ! -d ${LCMS_SRC} ]; then
|
||||||
|
echo "${LCMS_SRC} does not exist. Refusing to proceed."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
rm -vf ${LCMS_SRC}/cmscam02.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmscgats.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmscnvrt.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmserr.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmsgamma.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmsgmt.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmshalf.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmsintrp.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmsio0.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmsio1.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmslut.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmsmd5.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmsmtrx.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmsnamed.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmsopt.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmspack.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmspcs.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmsplugin.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmsps2.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmssamp.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmssm.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmstypes.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmsvirt.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmswtpnt.c
|
||||||
|
rm -vf ${LCMS_SRC}/cmsxform.c
|
||||||
|
rm -vf ${LCMS_SRC}/lcms2.h
|
||||||
|
rm -vf ${LCMS_SRC}/lcms2_internal.h
|
||||||
|
rm -vf ${LCMS_SRC}/lcms2_plugin.h
|
||||||
|
|
||||||
|
|
||||||
61
rh1566890-CVE_2018_3639-speculative_store_bypass.patch
Normal file
61
rh1566890-CVE_2018_3639-speculative_store_bypass.patch
Normal file
@ -0,0 +1,61 @@
|
|||||||
|
diff --git openjdk/src/hotspot/os/linux/os_linux.cpp openjdk/src/hotspot/os/linux/os_linux.cpp
|
||||||
|
--- openjdk/src/hotspot/os/linux/os_linux.cpp
|
||||||
|
+++ openjdk/src/hotspot/os/linux/os_linux.cpp
|
||||||
|
@@ -107,6 +107,8 @@
|
||||||
|
# include <inttypes.h>
|
||||||
|
# include <sys/ioctl.h>
|
||||||
|
|
||||||
|
+#include <sys/prctl.h>
|
||||||
|
+
|
||||||
|
#ifndef _GNU_SOURCE
|
||||||
|
#define _GNU_SOURCE
|
||||||
|
#include <sched.h>
|
||||||
|
@@ -4984,6 +4986,48 @@
|
||||||
|
extern void report_error(char* file_name, int line_no, char* title,
|
||||||
|
char* format, ...);
|
||||||
|
|
||||||
|
+/* Per task speculation control */
|
||||||
|
+#ifndef PR_GET_SPECULATION_CTRL
|
||||||
|
+# define PR_GET_SPECULATION_CTRL 52
|
||||||
|
+#endif
|
||||||
|
+#ifndef PR_SET_SPECULATION_CTRL
|
||||||
|
+# define PR_SET_SPECULATION_CTRL 53
|
||||||
|
+#endif
|
||||||
|
+/* Speculation control variants */
|
||||||
|
+#ifndef PR_SPEC_STORE_BYPASS
|
||||||
|
+# define PR_SPEC_STORE_BYPASS 0
|
||||||
|
+#endif
|
||||||
|
+/* Return and control values for PR_SET/GET_SPECULATION_CTRL */
|
||||||
|
+
|
||||||
|
+#ifndef PR_SPEC_NOT_AFFECTED
|
||||||
|
+# define PR_SPEC_NOT_AFFECTED 0
|
||||||
|
+#endif
|
||||||
|
+#ifndef PR_SPEC_PRCTL
|
||||||
|
+# define PR_SPEC_PRCTL (1UL << 0)
|
||||||
|
+#endif
|
||||||
|
+#ifndef PR_SPEC_ENABLE
|
||||||
|
+# define PR_SPEC_ENABLE (1UL << 1)
|
||||||
|
+#endif
|
||||||
|
+#ifndef PR_SPEC_DISABLE
|
||||||
|
+# define PR_SPEC_DISABLE (1UL << 2)
|
||||||
|
+#endif
|
||||||
|
+#ifndef PR_SPEC_FORCE_DISABLE
|
||||||
|
+# define PR_SPEC_FORCE_DISABLE (1UL << 3)
|
||||||
|
+#endif
|
||||||
|
+#ifndef PR_SPEC_DISABLE_NOEXEC
|
||||||
|
+# define PR_SPEC_DISABLE_NOEXEC (1UL << 4)
|
||||||
|
+#endif
|
||||||
|
+
|
||||||
|
+static void set_speculation() __attribute__((constructor));
|
||||||
|
+static void set_speculation() {
|
||||||
|
+ if ( prctl(PR_SET_SPECULATION_CTRL,
|
||||||
|
+ PR_SPEC_STORE_BYPASS,
|
||||||
|
+ PR_SPEC_DISABLE_NOEXEC, 0, 0) == 0 ) {
|
||||||
|
+ return;
|
||||||
|
+ }
|
||||||
|
+ prctl(PR_SET_SPECULATION_CTRL, PR_SPEC_STORE_BYPASS, PR_SPEC_DISABLE, 0, 0);
|
||||||
|
+}
|
||||||
|
+
|
||||||
|
// this is called _before_ most of the global arguments have been parsed
|
||||||
|
void os::init(void) {
|
||||||
|
char dummy; // used to get a guess on initial stack address
|
||||||
18
rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch
Normal file
18
rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch
Normal file
@ -0,0 +1,18 @@
|
|||||||
|
diff -uNr openjdk/src/java.desktop/share/classes/java/awt/Toolkit.java jdk8/jdk/src/java.desktop/share/classes/java/awt/Toolkit.java
|
||||||
|
--- openjdk/src/java.desktop/share/classes/java/awt/Toolkit.java
|
||||||
|
+++ openjdk/src/java.desktop/share/classes/java/awt/Toolkit.java
|
||||||
|
@@ -883,9 +883,13 @@
|
||||||
|
return null;
|
||||||
|
}
|
||||||
|
});
|
||||||
|
if (!GraphicsEnvironment.isHeadless()) {
|
||||||
|
- loadAssistiveTechnologies();
|
||||||
|
+ try {
|
||||||
|
+ loadAssistiveTechnologies();
|
||||||
|
+ } catch (AWTError error) {
|
||||||
|
+ // ignore silently
|
||||||
|
+ }
|
||||||
|
}
|
||||||
|
}
|
||||||
|
return toolkit;
|
||||||
|
}
|
||||||
@ -0,0 +1,11 @@
|
|||||||
|
diff -r 5b86f66575b7 src/share/lib/security/java.security-linux
|
||||||
|
--- openjdk/src/java.base/share/conf/security/java.security Tue May 16 13:29:05 2017 -0700
|
||||||
|
+++ openjdk/src/java.base/share/conf/security/java.security Tue Jun 06 14:05:12 2017 +0200
|
||||||
|
@@ -83,6 +83,7 @@
|
||||||
|
#ifndef solaris
|
||||||
|
security.provider.tbd=SunPKCS11
|
||||||
|
#endif
|
||||||
|
+#security.provider.tbd=SunPKCS11 ${java.home}/lib/security/nss.cfg
|
||||||
|
|
||||||
|
#
|
||||||
|
# A list of preferred providers for specific algorithms. These providers will
|
||||||
20
rh1648644-java_access_bridge_privileged_security.patch
Normal file
20
rh1648644-java_access_bridge_privileged_security.patch
Normal file
@ -0,0 +1,20 @@
|
|||||||
|
--- openjdk/src/java.base/share/conf/security/java.security
|
||||||
|
+++ openjdk/src/java.base/share/conf/security/java.security
|
||||||
|
@@ -304,6 +304,8 @@
|
||||||
|
#
|
||||||
|
package.access=sun.misc.,\
|
||||||
|
sun.reflect.,\
|
||||||
|
+ org.GNOME.Accessibility.,\
|
||||||
|
+ org.GNOME.Bonobo.,\
|
||||||
|
|
||||||
|
#
|
||||||
|
# List of comma-separated packages that start with or equal this string
|
||||||
|
@@ -316,6 +318,8 @@
|
||||||
|
#
|
||||||
|
package.definition=sun.misc.,\
|
||||||
|
sun.reflect.,\
|
||||||
|
+ org.GNOME.Accessibility.,\
|
||||||
|
+ org.GNOME.Bonobo.,\
|
||||||
|
|
||||||
|
#
|
||||||
|
# Determines whether this properties file can be appended to
|
||||||
@ -0,0 +1,19 @@
|
|||||||
|
Remove uses of FAR in jpeg code
|
||||||
|
|
||||||
|
Upstream libjpeg-trubo removed the (empty) FAR macro:
|
||||||
|
http://sourceforge.net/p/libjpeg-turbo/code/1312/
|
||||||
|
|
||||||
|
Adjust our code to not use the undefined FAR macro anymore.
|
||||||
|
|
||||||
|
diff --git a/jdk/src/java.desktop/share/native/libjavajpeg/imageioJPEG.c b/jdk/src/java.desktop/share/native/libjavajpeg/imageioJPEG.c
|
||||||
|
--- openjdk/src/java.desktop/share/native/libjavajpeg/imageioJPEG.c
|
||||||
|
+++ openjdk/src/java.desktop/share/native/libjavajpeg/imageioJPEG.c
|
||||||
|
@@ -1385,7 +1385,7 @@
|
||||||
|
/* and fill it in */
|
||||||
|
dst_ptr = icc_data;
|
||||||
|
for (seq_no = first; seq_no < last; seq_no++) {
|
||||||
|
- JOCTET FAR *src_ptr = icc_markers[seq_no]->data + ICC_OVERHEAD_LEN;
|
||||||
|
+ JOCTET *src_ptr = icc_markers[seq_no]->data + ICC_OVERHEAD_LEN;
|
||||||
|
unsigned int length =
|
||||||
|
icc_markers[seq_no]->data_length - ICC_OVERHEAD_LEN;
|
||||||
|
|
||||||
12
s390-8214206_fix.patch
Normal file
12
s390-8214206_fix.patch
Normal file
@ -0,0 +1,12 @@
|
|||||||
|
diff --git openjdk.orig/jdk/src/hotspot/share/runtime/os.cpp openjdk/jdk/src/hotspot/share/runtime/os.cpp
|
||||||
|
--- openjdk.orig/src/hotspot/share/runtime/os.cpp
|
||||||
|
+++ openjdk/src/hotspot/share/runtime/os.cpp
|
||||||
|
@@ -1368,7 +1368,7 @@
|
||||||
|
}
|
||||||
|
|
||||||
|
void os::set_memory_serialize_page(address page) {
|
||||||
|
- int count = log2_intptr(sizeof(class JavaThread)) - log2_int(64);
|
||||||
|
+ int count = log2_intptr((uintptr_t) sizeof(class JavaThread)) - log2_int(64);
|
||||||
|
_mem_serialize_page = (volatile int32_t *)page;
|
||||||
|
// We initialize the serialization page shift count here
|
||||||
|
// We assume a cache line size of 64 bytes
|
||||||
2
sources
Normal file
2
sources
Normal file
@ -0,0 +1,2 @@
|
|||||||
|
SHA512 (tapsets-icedtea-3.15.0.tar.xz) = c752a197cb3d812d50c35e11e4722772be40096c81d2a57933e0d9b8a3c708b9c157b8108a4e33a06ca7bb81648170994408c75d6f69d5ff12785d0c31009671
|
||||||
|
SHA512 (jdk-updates-jdk11u-jdk-11.0.9+10-4curve.tar.xz) = 58c181b24374e711c1dc0d4bf636ba5dc2b51defcdc00c38cea9bc20572e9ae376f239994e98ae795f14a92890d792fe0095617b2173986d4c45dc45eeaf264c
|
||||||
42
update_package.sh
Normal file
42
update_package.sh
Normal file
@ -0,0 +1,42 @@
|
|||||||
|
#!/bin/bash -x
|
||||||
|
# this file contains defaults for currently generated source tarballs
|
||||||
|
|
||||||
|
set -e
|
||||||
|
|
||||||
|
# OpenJDK from Shenandoah project
|
||||||
|
export PROJECT_NAME="shenandoah"
|
||||||
|
export REPO_NAME="jdk11"
|
||||||
|
# warning, clonning without shenadnaoh prefix, you will clone pure jdk - thus without shenandaoh GC
|
||||||
|
export VERSION="shenandoah-jdk-11.0.3+7"
|
||||||
|
export COMPRESSION=xz
|
||||||
|
# unset tapsets overrides
|
||||||
|
export OPENJDK_URL=""
|
||||||
|
export TO_COMPRESS=""
|
||||||
|
# warning, filename and filenameroot creation is duplicated here from generate_source_tarball.sh
|
||||||
|
export FILE_NAME_ROOT=${PROJECT_NAME}-${REPO_NAME}-${VERSION}
|
||||||
|
FILENAME=${FILE_NAME_ROOT}.tar.${COMPRESSION}
|
||||||
|
|
||||||
|
if [ ! -f ${FILENAME} ] ; then
|
||||||
|
echo "Generating ${FILENAME}"
|
||||||
|
sh ./generate_source_tarball.sh
|
||||||
|
else
|
||||||
|
echo "exists exists exists exists exists exists exists "
|
||||||
|
echo "reusing reusing reusing reusing reusing reusing "
|
||||||
|
echo ${FILENAME}
|
||||||
|
fi
|
||||||
|
|
||||||
|
set +e
|
||||||
|
|
||||||
|
major=`echo $REPO_NAME | sed 's/[a-zA-Z]*//g'`
|
||||||
|
build=`echo $VERSION | sed 's/.*+//g'`
|
||||||
|
name_helper=`echo $FILENAME | sed s/$major/'%{majorver}'/g `
|
||||||
|
name_helper=`echo $name_helper | sed s/$build/'%{buildver}'/g `
|
||||||
|
echo "align specfile acordingly:"
|
||||||
|
echo " sed 's/^Source0:.*/Source0: $name_helper/' -i *.spec"
|
||||||
|
echo " sed 's/^Source8:.*/Source8: $TAPSET/' -i *.spec"
|
||||||
|
echo " sed 's/^%global buildver.*/%global buildver $build/' -i *.spec"
|
||||||
|
echo " sed 's/Release:.*/Release: 1%{?dist}/' -i *.spec"
|
||||||
|
echo "and maybe others...."
|
||||||
|
echo "you should fedpkg/rhpkg new-sources $TAPSET $FILENAME"
|
||||||
|
echo "you should fedpkg/rhpkg prep --arch XXXX on all architectures: x86_64 i386 i586 i686 ppc ppc64 ppc64le s390 s390x aarch64 armv7hl"
|
||||||
|
|
||||||
Loading…
Reference in New Issue
Block a user