On 8017264: Java app crash on it's startup after Java updated to 7u25 from 7u21

Weijun Wang weijun.wang at oracle.com
Tue Jun 25 18:23:55 PDT 2013


Hi, Hotspot guys

We (SE security) received a bug report on a new crash for 7u25 and need 
some help from you:

    http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=8017264

Here the top frames look like:

C  [msvcr100.dll+0x10b3b]  wcspbrk+0x12d
V  [jvm.dll+0xa9b63]
C  [w2k_lsa_auth.dll+0x167c]  JNI_OnUnload+0x1c1
j 
sun.security.krb5.Credentials.acquireDefaultNativeCreds()Lsun/security/krb5/Credentials;+0

acquireDefaultNativeCreds() is a native method and it's defined at

 
http://hg.openjdk.java.net/jdk8/jdk8/jdk/file/3c08c9ebd1fb/src/windows/native/sun/security/krb5/NativeCreds.c

I'm not sure why JNI_OnUnload is called so immediately, and as you can 
see it's simply

       338     if ((*jvm)->GetEnv(jvm, (void **)&env, JNI_VERSION_1_2)) {
       339         return; /* Nothing else we can do */
       340     }
       341
       342     if (ticketClass != NULL) {
       343         (*env)->DeleteWeakGlobalRef(env,ticketClass);
       344     }
       ... More DeleteWeakGlobalRefs

How is it able to call wcspbrk and get crashed?

BTW, the .c file has not been changed for 2 years.

Also, according to the report, the customer (whose automatic reply has 
"out of office with no internet access till 15 July") runs 7u25 b16 but 
the public release on java.com is b17. Does it matter?

Thanks
Max


More information about the security-dev mailing list