Do not let internal JDK zlib symbols leak out of fastdebug libzip.so
fweimer at redhat.com
Mon Mar 4 11:02:00 UTC 2013
On 02/22/2013 11:03 PM, Martin Buchholz wrote:
> I've finally figured out why fastdebug jdk occasionally gives InternalError
> in the zip code.
In the distant past, I also saw this with product builds. Triggering
conditions involved a JNI DSO calling dlopen(RTLD_GLOBAL) on another DSO
which eventually triggered loading the system zlib. This might still be
relevant on stock OpenJDK 7.
IcedTea avoids this by linking against system zlib.
Florian Weimer / Red Hat Product Security Team
More information about the core-libs-dev