Kerberos Bug Introduced in d777e2918a77?

Weijun Wang weijun.wang at oracle.com
Wed Apr 29 01:10:11 UTC 2015



On 4/28/2015 10:57 PM, Daniel Jones wrote:
> Hi (is it Max or Weijun? I don't want to be rude!)

Either is OK.

>
> I've read through the code changes and static analysis with my eyes
> suggests the change looks good. The client is not in the habit of
> building OpenJDK regularly, but there's no reason we can't give it a go.
>
> I had a look on http://hg.openjdk.java.net/jdk8u/ and I can't see the
> changeset anywhere. Is there a specific revision I should be looking
> for? I'm more familiar with Git than Mercurial, so may be missing
> something obvious.

It's still in code review and not in dev repo yet.

--Max

>
> Cheers!
>
> On Tue, Apr 28, 2015 at 12:43 PM, Weijun Wang <weijun.wang at oracle.com
> <mailto:weijun.wang at oracle.com>> wrote:
>
>
>     On 4/28/2015 6:14 PM, Daniel Jones wrote:
>
>         I noticed in the bug report Internet Explorer is mentioned. We
>         see the
>         same behaviour with IE, Firefox and Chrome.
>
>
>     Thanks. I've mentioned that in the comment.
>
>     BTW, are you able to build jdk yourself? If so, can you try out the fix?
>
>     http://cr.openjdk.java.net/~weijun/8078439/webrev.01/
>
>     It applies to both both jdk8u (without the module name in src path)
>     and jdk9.
>
>     I've done some local tests but it would be more confident if it
>     works for your environment.
>
>     Thanks
>     Max
>
>
>
>
> --
> Regards,
>
> Daniel Jones
> EngineerBetter.com


More information about the security-dev mailing list