[PATCH] jdk7u121-b00 retro-active security patch review

Tue Nov 15 03:41:35 UTC 2016

We have a new release of IcedTea (http://bitly.com/it20608) and a new OpenJDK
7 release, u121-b00, to go with it. This is made from the current state of the
OpenJDK 7u repositories plus backports of the new security fixes included in 8u111.

The tarball is available here:

https://java.net/projects/openjdk7/downloads/download/openjdk7u121-b00.tar.xz

SHA256 checksum:

291f0aa2f3aa04d215e88bec01a1dbe90d972e950370ad29efe6bfd30a9c33c9  openjdk7u121-b00.tar.xz

Changes since u111-b01:
  - S6624200: Regression test fails: test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
  - S6882559: new JEditorPane("text/plain","") fails for null context class loader
  - S7090158: Networking Libraries don't build with javac -Werror
  - S7125055: ContentHandler.getContent API changed in error
  - S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on windows
  - S7172012: Make test-in-build an option (Queens)
  - S7187051: ShortRSAKeynnn.sh tests should do cleanup before start test
  - S8000626: Implement dead key detection for KeyEvent on Linux
  - S8000897: VM crash in CompileBroker
  - S8003890: corelibs test scripts should pass TESTVMOPTS
  - S8005629: javac warnings compiling java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
  - S8010297: Missing isLoggable() checks in logging code
  - S8010782: clean up source files containing carriage return characters
  - S8014431: cleanup warnings indicated by the -Wunused-value compiler option on linux
  - S8015265: revise the fix for 8007037
  - S8016491: PPC64 (part 2): Clean up PPC defines.
  - S8016586: PPC64 (part 3): basic changes for PPC64
  - S8016696: PPC64 (part 4): add relocation for trampoline stubs
  - S8016747: Replace deprecated PlatformLogger isLoggable(int) with isLoggable(Level)
  - S8017313: PPC64 (part 6): stack handling improvements
  - S8017317: PPC64 (part 7): cppInterpreter: implement support for biased locking
  - S8019517: PPC64 (part 102): cppInterpreter: implement G1 support
  - S8019518: PPC64 (part 103): cppInterpreter: implement support for compressed Oops
  - S8019519: PPC64 (part 105): C interpreter: implement support for jvmti early return.
  - S8019929: PPC64 (part 107): Extend ELF-decoder to support PPC64 function descriptor tables
  - S8019973: PPC64 (part 11): Fix IA64 preprocessor conditionals on AIX.
  - S8020121: PPC64: fix build in cppInterpreter after 8019519
  - S8020190: Fatal: Bug in native code: jfieldID must match object
  - S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame demo
  - S8024344: PPC64 (part 112): C argument in register AND stack slot.
  - S8024468: PPC64 (part 201): cppInterpreter: implement bytecode profiling
  - S8024469: PPC64 (part 202): cppInterpreter: support for OSR.
  - S8024756: method grouping tabs are not selectable
  - S8024854: PPC64: Basic changes and files to build the class library on AIX
  - S8024900: PPC64: Enable new build on AIX (jdk part)
  - S8026741: jdk8 l10n resource file translation update 5
  - S8029957: PPC64 (part 213): cppInterpreter: memory ordering for object initialization
  - S8033168: PPC64: gcc 4.8 warning in output_c.cpp
  - S8034797: AIX: Fix os::naked_short_sleep() in os_aix.cpp after 8028280
  - S8035396: Introduce accessor for tmp_oop in frame.
  - S8035647: PPC64: Support for elf v2 abi.
  - S8036767: PPC64: Support for little endian execution model
  - S8036976: PPC64: implement the template interpreter
  - S8037915: PPC64/AIX: Several smaller fixes
  - S8042309: Some bugfixes for the ppc64 port
  - S8048147: Privilege tests with JAAS Subject.doAs
  - S8048357: PKCS basic tests
  - S8049171: Additional tests for jarsigner's warnings
  - S8050942: PPC64: implement template interpreter for ppc64le
  - S8050972: Concurrency problem in PcDesc cache
  - S8056122: Upgrade JDK to use LittleCMS 2.6
  - S8057934: Upgrade to LittleCMS 2.6 breaks AIX build
  - S8059177: jdk8u40 l10n resource file translation update 1
  - S8067364: Printing to Postscript doesn't support dieresis
  - S8069590: AIX port of "8050807: Better performing performance data handling"
  - S8075584: test for 8067364 depends on hardwired text advance
  - S8076486: [TESTBUG] javax/security/auth/Subject/doAs/NestedActions.java fails if extra VM options are given
  - S8077953: [TEST_BUG] com/sun/management/OperatingSystemMXBean/TestTotalSwap.java Compilation failed after JDK-8077387
  - S8078482: ppc: pass thread to throw_AbstractMethodError
  - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
  - S8080628: No mnemonics on Open and Save buttons in JFileChooser
  - S8083601: jdk8u60 l10n resource file translation update 2
  - S8139258: PPC64LE: argument passing problem when passing 15 floats in native call
  - S8139421: PPC64LE: MacroAssembler::bxx64_patchable kill register R12
  - S8140530: Creating a VolatileImage with size 0,0 results in no longer working g2d.drawString
  - S8142926: OutputAnalyzer's shouldXXX() calls return this
  - S8143134: L10n resource file translation update
  - S8147077: IllegalArgumentException thrown by api/java_awt/Component/FlipBufferStrategy/indexTGF_General
  - S8148127: IllegalArgumentException thrown by JCK test api/java_awt/Component/FlipBufferStrategy/indexTGF_General in opengl pipeline
  - S8148487: PPC64: Better byte behavior
  - S8150611: Security problem on sun.misc.resources.Messages*
  - S8151921: Improved page resolution
  - S8155968: Update command line options
  - S8155973: Tighten jar checks
  - S8157176: Improved classfile parsing
  - S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
  - S8157739: Classloader Consistency Checking
  - S8157749: Improve handling of DNS error replies
  - S8157753: Audio replay enhancement
  - S8157759: LCMS Transform Sampling Enhancement
  - S8157764: Better handling of interpolation plugins
  - S8158260: PPC64: unaligned Unsafe.getInt can lead to the generation of illegal instructions
  - S8158302: Handle contextual glyph substitutions
  - S8158734: JEditorPane.createEditorKitForContentType throws NPE after 6882559
  - S8158993: Service Menu services
  - S8159495: Fix index offsets
  - S8159503: Amend Annotation Actions
  - S8159511: Stack map validation
  - S8159515: Improve indy validation
  - S8159519: Reformat JDWP messages
  - S8159684: (tz) Support tzdata2016f
  - S8160090: Better signature handling in pack200
  - S8160094: Improve pack200 layout
  - S8160098: Clean up color profiles
  - S8160591: Improve internal array handling
  - S8160838: Better HTTP service
  - S8160934: isnan() is not available on older MSVC compilers
  - S8162411: Service Menu services 2
  - S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh failing after JDK-8155968
  - S8162511: 8u111 L10n resource file updates
  - S8162792: Remove constraint DSA keySize < 1024 from jdk.jar.disabledAlgorithms in jdk8
  - S8164452: 8u111 L10n resource file update - msgdrop 20
  - S8165807: PPC64: Backport PPC64 port to OpenJDK 7
  - S8165816: jarsigner -verify shows jar unsigned if it was signed with a weak algorithm
  - S8166381: Back out changes to the java.security file to not disable MD5
  - S8167144: Fix aix after 8022507: SIGSEGV at ParMarkBitMap::verify_clear()
  - S8167198: Changes to make AIX compile after the merge
  - S8167335: Fix build on Linux with 64kb default page size

Webrevs for the new changes:

http://cr.openjdk.java.net/~andrew/openjdk7/20161018/root/
http://cr.openjdk.java.net/~andrew/openjdk7/20161018/corba/
http://cr.openjdk.java.net/~andrew/openjdk7/20161018/jaxp/
http://cr.openjdk.java.net/~andrew/openjdk7/20161018/jaxws/
http://cr.openjdk.java.net/~andrew/openjdk7/20161018/hotspot/
http://cr.openjdk.java.net/~andrew/openjdk7/20161018/jdk/
http://cr.openjdk.java.net/~andrew/openjdk7/20161018/langtools/

Once approved, I'll push these to the OpenJDK 7 repository.
-- 
Andrew :)

Senior Free Java Software Engineer
Red Hat, Inc. (http://www.redhat.com)

PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
Fingerprint = 5132 579D D154 0ED2 3E04  C5A0 CFDA 0F9B 3596 4222