updated to OpenJDK 17.0.9 (2023-10-17)
- adjsuted generate_source_tarball - removed icedtea_sync - dropped standalone licenses - added usntripped subpkg - added docs subpkg - adjsuted versions of bundled libraries - build refactored to several solid methods following gnu_andrew - removed no longer needed jdk8305995-footprint_regression_from_jdk_8224957, nss.fips.cfg.in, rh1648644-java_access_bridge_privileged_security.patch - added jdk8312489-max_sig_default_increase.patch - aligned fips-17u-51e1d00be4e.patch (gnu_andrew) - fixed '--without release' build-ability by moving docs and misc to if-release only
This commit is contained in:
Jiri
parent
860f685b4f
commit
289d0e958f
|
|
@ -37,3 +37,4 @@
|
|||
/openjdk-jdk17u-jdk-17.0.6+10.tar.xz
|
||||
/openjdk-jdk17u-jdk-17.0.7+7.tar.xz
|
||||
/openjdk-jdk17u-jdk-17.0.8+7.tar.xz
|
||||
/openjdk-17.0.9+9.tar.xz
|
||||
|
|
|
|||
485
NEWS
485
NEWS
|
|
@ -3,6 +3,490 @@ Key:
|
|||
JDK-X - https://bugs.openjdk.java.net/browse/JDK-X
|
||||
CVE-XXXX-YYYY: https://cve.mitre.org/cgi-bin/cvename.cgi?name=XXXX-YYYY
|
||||
|
||||
New in release OpenJDK 17.0.9 (2023-10-17):
|
||||
===========================================
|
||||
Live versions of these release notes can be found at:
|
||||
* https://bit.ly/openjdk1709
|
||||
|
||||
* CVEs
|
||||
- CVE-2023-22081
|
||||
- CVE-2023-22025
|
||||
* Security fixes
|
||||
- JDK-8286503, JDK-8312367: Enhance security classes
|
||||
- JDK-8296581: Better system proxy support
|
||||
- JDK-8297856: Improve handling of Bidi characters
|
||||
- JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
|
||||
- JDK-8306881, JDK-8307286: Update FreeType to 2.13.0
|
||||
- JDK-8309966: Enhanced TLS connections
|
||||
- JDK-8312248: Enhanced archival support redux
|
||||
- JDK-8314649: Enhanced archival support redux
|
||||
- JDK-8317121: vector_masked_load instruction is moved too early after JDK-8286941
|
||||
* New features
|
||||
- JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
|
||||
* Other changes
|
||||
- JDK-6176679: Application freezes when copying an animated gif image to the system clipboard
|
||||
- JDK-6381945: (cal) Japanese calendar unit test system should avoid multiple static imports
|
||||
- JDK-8040793: vmTestbase/nsk/monitoring/stress/lowmem fails on calling isCollectionUsageThresholdExceeded()
|
||||
- JDK-8153837: AArch64: Handle special cases for MaxINode & MinINode
|
||||
- JDK-8156889: ListKeychainStore.sh fails in some virtualized environments
|
||||
- JDK-8171221: Remove -XX:+CheckMemoryInitialization
|
||||
- JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh to Java Jtreg Test
|
||||
- JDK-8195589: T6587786.java failed after JDK-8189997
|
||||
- JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
|
||||
- JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java fails on Windows
|
||||
- JDK-8229147: Linux os::create_thread() overcounts guardpage size with newer glibc (>=2.27)
|
||||
- JDK-8252713: jtreg time out of CtrlASCII.java seems to hang the Xserver.
|
||||
- JDK-8255548: Missing coverage for javax.xml.crypto.dom.DOMCryptoContext
|
||||
- JDK-8263044: jdk/jfr/jvm/TestDumpOnCrash.java timed out
|
||||
- JDK-8267188: gc/stringdedup/TestStringDeduplicationInterned.java fails with Shenandoah
|
||||
- JDK-8267341: macos attempt_reserve_memory_at(arg1, arg2, true) failure
|
||||
- JDK-8267517: async logging for stdout and stderr
|
||||
- JDK-8267860: Off-by-one bug when searching arrays in AlpnGreaseTest
|
||||
- JDK-8268852: AsyncLogWriter should not overide is_Named_thread()
|
||||
- JDK-8269091: javax/sound/sampled/Clip/SetPositionHang.java failed with ArrayIndexOutOfBoundsException: Array index out of range: -4
|
||||
- JDK-8269466: Factor out the common code for initializing and starting internal VM JavaThreads
|
||||
- JDK-8270331: [TESTBUG] Error: Not a test or directory containing tests: java/awt/print/PrinterJob/InitToBlack.java
|
||||
- JDK-8270794: Avoid loading Klass* twice in TypeArrayKlass::oop_size()
|
||||
- JDK-8270894: Use acquire semantics in ObjectSynchronizer::read_stable_mark()
|
||||
- JDK-8271707: migrate tests to use jdk.test.whitebox.WhiteBox
|
||||
- JDK-8271898: disable os.release_multi_mappings_vm on macOS-X64
|
||||
- JDK-8272586: emit abstract machine code in hs-err logs
|
||||
- JDK-8272654: Mark word accesses should not use Access API
|
||||
- JDK-8273092: Sort classlist in JDK image
|
||||
- JDK-8273803: Zero: Handle "zero" variant in CommandLineOptionTest.java
|
||||
- JDK-8274986: max code printed in hs-err logs should be configurable
|
||||
- JDK-8275031: runtime/ErrorHandling/MachCodeFramesInErrorFile.java fails when hsdis is present
|
||||
- JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java fails with D3D basic render driver
|
||||
- JDK-8275415: Prepare Leak Profiler for Lilliput
|
||||
- JDK-8275662: remove test/lib/sun/hotspot
|
||||
- JDK-8276333: jdk/jfr/event/oldobject/TestLargeRootSet.java failed "assert(!contains(edge->reference())) failed: invariant"
|
||||
- JDK-8276651: java/lang/ProcessHandle tests fail with "RuntimeException: Input/output error" in java.lang.ProcessHandleImpl$Info.info0
|
||||
- JDK-8276696: ParallelObjectIterator freed at the wrong time in VM_HeapDumper
|
||||
- JDK-8277102: Dubious PrintCompilation output
|
||||
- JDK-8277353: java/security/MessageDigest/ThreadSafetyTest.java test times out
|
||||
- JDK-8277417: C1 LIR instruction for load-klass
|
||||
- JDK-8277427: Update jib-profiles.js to use JMH 1.33 devkit
|
||||
- JDK-8277654: Shenandoah: Don't produce new memory state in C2 LRB runtime call
|
||||
- JDK-8277860: PPC: Remove duplicate info != NULL check
|
||||
- JDK-8278141: LIR_OpLoadKlass::_info shadows the field of the same name from LIR_Op
|
||||
- JDK-8278456: Define jtreg jdk_desktop test group time-based sub-tasks for use by headful testing.
|
||||
- JDK-8279545: Buffer overrun in reverse_words of sharedRuntime_x86_64.cpp:3517
|
||||
- JDK-8280032: Update jib-profiles.js to use JMH 1.34 devkit
|
||||
- JDK-8280396: G1: Full gc mark stack draining should prefer to make work available to other threads
|
||||
- JDK-8280885: Shenandoah: Some tests failed with "EA: missing allocation reference path"
|
||||
- JDK-8281507: Two javac tests have bad jtreg `@clean` tags
|
||||
- JDK-8281717: Cover logout method for several LoginModule
|
||||
- JDK-8282404: DrawStringWithInfiniteXform.java failed with "RuntimeException: drawString with InfiniteXform transform takes long time"
|
||||
- JDK-8282651: ZGC: vmTestbase/gc/ArrayJuggle/ tests fails intermittently with exit code 97
|
||||
- JDK-8282665: [REDO] ByteBufferTest.java: replace endless recursion with RuntimeException in void ck(double x, double y)
|
||||
- JDK-8283056: show abstract machine code in hs-err for all VM crashes
|
||||
- JDK-8283276: java/io/ObjectStreamClass/ObjectStreamClassCaching.java fails with various GCs
|
||||
- JDK-8283326: Implement SafeFetch statically
|
||||
- JDK-8283724: Incorrect description for jtreg-failure-handler option
|
||||
- JDK-8283756: (zipfs) ZipFSOutputStreamTest.testOutputStream should only check inflated bytes
|
||||
- JDK-8283865: riscv: Break down -XX:+UseRVB into seperate options for each bitmanip extension
|
||||
- JDK-8283929: GHA: Add RISC-V build config
|
||||
- JDK-8284068: riscv: should call Atomic::release_store in JavaThread::set_thread_state
|
||||
- JDK-8284090: com/sun/security/auth/module/AllPlatforms.java fails to compile
|
||||
- JDK-8284273: Early crashes in os::print_context on AArch64
|
||||
- JDK-8284760: Correct type/array element offset in LibraryCallKit::get_state_from_digest_object()
|
||||
- JDK-8284772: GHA: Use GCC Major Version Dependencies Only
|
||||
- JDK-8284910: Buffer clean in PasswordCallback
|
||||
- JDK-8284937: riscv: should not allocate special register for temp
|
||||
- JDK-8284997: arm32 build crashes since JDK-8283326
|
||||
- JDK-8285303: riscv: Incorrect register mask in call_native_base
|
||||
- JDK-8285437: riscv: Fix MachNode size mismatch for MacroAssembler::verify_oops*
|
||||
- JDK-8285630: Fix a configure error in RISC-V cross build
|
||||
- JDK-8285675: Temporary fix for arm32 SafeFetch
|
||||
- JDK-8285699: riscv: Provide information when hitting a HaltNode
|
||||
- JDK-8285711: riscv: RVC: Support disassembler show-bytes option
|
||||
- JDK-8285756: clean up use of bad arguments for `@clean` in langtools tests
|
||||
- JDK-8285980: Several tests in compiler/c2/irTests miss @requires vm.compiler2.enabled
|
||||
- JDK-8286481: Exception printed to stdout on Windows when storing transparent image in clipboard
|
||||
- JDK-8286620: Create regression test for verifying setMargin() of JRadioButton
|
||||
- JDK-8286623: Bundle zlib by default with JDK on macos aarch64
|
||||
- JDK-8287227: Shenandoah: A couple of virtual thread tests failed with iu mode even without Loom enabled.
|
||||
- JDK-8287418: riscv: Fix correctness issue of MacroAssembler::movptr
|
||||
- JDK-8287552: riscv: Fix comment typo in li64
|
||||
- JDK-8287970: riscv: jdk/incubator/vector/*VectorTests failing
|
||||
- JDK-8288719: [arm32] SafeFetch32 thumb interleaving causes random crashes
|
||||
- JDK-8289077: Add manual tests to open
|
||||
- JDK-8289238: Refactoring changes to PassFailJFrame Test Framework
|
||||
- JDK-8289510: Improve test coverage for XPath Axes: namespace
|
||||
- JDK-8289512: Fix GCC 12 warnings for adlc output_c.cpp
|
||||
- JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java
|
||||
- JDK-8289646: configure script failed on WSL
|
||||
- JDK-8289688: jfr command hangs when it processes invalid file
|
||||
- JDK-8289748: C2 compiled code crashes with SIGFPE with -XX:+StressLCM and -XX:+StressGCM
|
||||
- JDK-8289797: tools/launcher/I18NArgTest.java fails on Japanese Windows environment
|
||||
- JDK-8289917: Metadata for regionsRefilled of G1EvacuationStatistics event is wrong
|
||||
- JDK-8290137: riscv: small refactoring for add_memory_int32/64
|
||||
- JDK-8290164: compiler/runtime/TestConstantsInError.java fails on riscv
|
||||
- JDK-8290464: Optimize ResourceArea zapping on ResourceMark release
|
||||
- JDK-8290469: Add new positioning options to PassFailJFrame test framework
|
||||
- JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11
|
||||
- JDK-8291444: GHA builds/tests won't run manually if disabled from automatic running
|
||||
- JDK-8291830: jvmti/RedefineClasses/StressRedefine failed: assert(!is_null(v)) failed: narrow klass value can never be zero
|
||||
- JDK-8291893: riscv: remove fence.i used in user space
|
||||
- JDK-8291947: riscv: fail to build after JDK-8290840
|
||||
- JDK-8291952: riscv: Remove PRAGMA_NONNULL_IGNORED
|
||||
- JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup required permissions for jtreg version 7 jar
|
||||
- JDK-8292315: Tests should not rely on specific JAR file names (hotspot)
|
||||
- JDK-8292316: Tests should not rely on specific JAR file names (jpackage)
|
||||
- JDK-8292683: Remove BadKeyUsageTest.java from Problem List
|
||||
- JDK-8292698: Improve performance of DataInputStream
|
||||
- JDK-8292716: Configure should check that jtreg is of the required version
|
||||
- JDK-8292763: JDK-8292716 breaks configure without jtreg
|
||||
- JDK-8292867: RISC-V: Simplify weak CAS return value handling
|
||||
- JDK-8293012: ConstantPool::print_on can crash if _cache is NULL
|
||||
- JDK-8293050: RISC-V: Remove redundant non-null assertions about macro-assembler
|
||||
- JDK-8293098: GHA: Harmonize GCC version handling for host and cross builds
|
||||
- JDK-8293100: RISC-V: Need to save and restore callee-saved FloatRegisters in StubGenerator::generate_call_stub
|
||||
- JDK-8293107: GHA: Bump to Ubuntu 22.04
|
||||
- JDK-8293114: JVM should trim the native heap
|
||||
- JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux ppc64le and Linux aarch64
|
||||
- JDK-8293177: Verify version numbers in legal files
|
||||
- JDK-8293180: JQuery UI license file not updated
|
||||
- JDK-8293252: Shenandoah: ThreadMXBean synchronizer tests crash with aggressive heuristics
|
||||
- JDK-8293361: GHA: dump config.log in case of configure failure
|
||||
- JDK-8293474: RISC-V: Unify the way of moving function pointer
|
||||
- JDK-8293524: RISC-V: Use macro-assembler functions as appropriate
|
||||
- JDK-8293566: RISC-V: Clean up push and pop registers
|
||||
- JDK-8293811: Provide a reason for PassFailJFrame.forceFail
|
||||
- JDK-8293851: hs_err should print more stack in hex dump
|
||||
- JDK-8294012: RISC-V: get/put_native_u8 missing the case when address&7 is 6
|
||||
- JDK-8294083: RISC-V: Minimal build failed with --disable-precompiled-headers
|
||||
- JDK-8294086: RISC-V: Cleanup InstructionMark usages in the backend
|
||||
- JDK-8294087: RISC-V: RVC: Fix a potential alignment issue and add more alignment assertions for the patchable calls/nops
|
||||
- JDK-8294149: JMH 1.34 and later requires jopt-simple 5.0.4
|
||||
- JDK-8294187: RISC-V: Unify all relocations for the backend into AbstractAssembler::relocate()
|
||||
- JDK-8294366: RISC-V: Partially mark out incompressible regions
|
||||
- JDK-8294430: RISC-V: Small refactoring for movptr_with_offset
|
||||
- JDK-8294492: RISC-V: Use li instead of patchable movptr at non-patchable callsites
|
||||
- JDK-8294679: RISC-V: Misc crash dump improvements
|
||||
- JDK-8294941: GHA: Cut down cross-compilation sysroots
|
||||
- JDK-8294956: GHA: qemu-debootstrap is deprecated, use the regular one
|
||||
- JDK-8295110: RISC-V: Mark out relocations as incompressible
|
||||
- JDK-8295213: Run GHA manually with user-specified make and configure arguments
|
||||
- JDK-8295270: RISC-V: Clean up and refactoring for assembler functions
|
||||
- JDK-8295396: RISC-V: Cleanup useless CompressibleRegions
|
||||
- JDK-8295657: SA: Allow larger object alignments
|
||||
- JDK-8295737: macOS: Print content cut off when width > height with portrait orientation
|
||||
- JDK-8295811: serviceability/sa/TestObjectAlignment.java fails on x86_32
|
||||
- JDK-8295812: Skip the "half float" support in LittleCMS during the build
|
||||
- JDK-8295894: Remove SECOM certificate that is expiring in September 2023
|
||||
- JDK-8295926: RISC-V: C1: Fix LIRGenerator::do_LibmIntrinsic
|
||||
- JDK-8295968: RISC-V: Rename some assembler intrinsic functions for RVV 1.0
|
||||
- JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/AbstractDrbg/SpecTest.java intermittently timeout
|
||||
- JDK-8296435: RISC-V: Small refactoring for increment/decrement
|
||||
- JDK-8296447: RISC-V: Make the operands order of vrsub_vx/vrsub_vi consistent with RVV 1.0 spec
|
||||
- JDK-8296448: RISC-V: Fix temp usages of heapbase register killed by MacroAssembler::en/decode_klass_not_null
|
||||
- JDK-8296602: RISC-V: improve performance of copy_memory stub
|
||||
- JDK-8296771: RISC-V: C2: assert(false) failed: bad AD file
|
||||
- JDK-8296796: Provide clean, platform-agnostic interface to C-heap trimming
|
||||
- JDK-8296916: RISC-V: Move some small macro-assembler functions to header file
|
||||
- JDK-8297350: Update JMH devkit to 1.36
|
||||
- JDK-8297359: RISC-V: improve performance of floating Max Min intrinsics
|
||||
- JDK-8297476: Increase InlineSmallCode default from 1000 to 2500 for RISC-V
|
||||
- JDK-8297644: RISC-V: Compilation error when shenandoah is disabled
|
||||
- JDK-8297681: Unnecessary color conversion during 4BYTE_ABGR_PRE to INT_ARGB_PRE blit
|
||||
- JDK-8297697: RISC-V: Add support for SATP mode detection
|
||||
- JDK-8297715: RISC-V: C2: Use single-bit instructions from the Zbs extension
|
||||
- JDK-8297887: Update Siphash
|
||||
- JDK-8297923: java.awt.ScrollPane broken after multiple scroll up/down
|
||||
- JDK-8298138: Shenandoah: HdrSeq asserts "sub-bucket index (512) overflow for value ( 1.00)"
|
||||
- JDK-8298921: Create a regression test for JDK-8139581
|
||||
- JDK-8298974: Add ftcolor.c to imported freetype sources
|
||||
- JDK-8299158: Improve MD5 intrinsic on AArch64
|
||||
- JDK-8299168: RISC-V: Fix MachNode size mismatch for MacroAssembler::_verify_oops*
|
||||
- JDK-8299330: Minor improvements in MSYS2 Workflow handling
|
||||
- JDK-8299617: CurrencySymbols.properties is missing the copyright notice
|
||||
- JDK-8299658: C1 compilation crashes in LinearScan::resolve_exception_edge
|
||||
- JDK-8299713: Test javax/swing/JTableHeader/6889007/bug6889007.java failed: Wrong type of cursor
|
||||
- JDK-8299827: Add resolved IP address in connection exception for sockets
|
||||
- JDK-8299847: RISC-V: Improve PrintOptoAssembly output of CMoveI/L nodes
|
||||
- JDK-8299962: Speed up compiler/intrinsics/unsafe/DirectByteBufferTest.java and HeapByteBufferTest.java
|
||||
- JDK-8300053: Shenandoah: Handle more GCCauses in ShenandoahControlThread::request_gc
|
||||
- JDK-8300098: java/util/concurrent/ConcurrentHashMap/ConcurrentAssociateTest.java fails with internal timeout when executed with TieredCompilation1/3
|
||||
- JDK-8300109: RISC-V: Improve code generation for MinI/MaxI nodes
|
||||
- JDK-8300405: Screen capture for test JFileChooserSetLocationTest.java, failure case
|
||||
- JDK-8300584: Accelerate AVX-512 CRC32C for small buffers
|
||||
- JDK-8300659: Refactor TestMemoryAwareness to use WhiteBox api for host values
|
||||
- JDK-8300693: Lower the compile threshold and reduce the iterations of warmup loop in VarHandles tests
|
||||
- JDK-8301033: RISC-V: Handle special cases for MinI/MaxI nodes for Zbb
|
||||
- JDK-8301036: RISC-V: Factor out functions baseOffset & baseOffset32 from MacroAssembler
|
||||
- JDK-8301067: RISC-V: better error message when reporting unsupported satp modes
|
||||
- JDK-8301074: Replace NULL with nullptr in share/opto/
|
||||
- JDK-8301097: Update GHA XCode to 12.5.1
|
||||
- JDK-8301153: RISC-V: pipeline class for several instructions is not set correctly
|
||||
- JDK-8301167: Update VerifySignedJar to actually exercise and test verification
|
||||
- JDK-8301187: Memory leaks in OopMapCache
|
||||
- JDK-8301269: Update Commons BCEL to Version 6.7.0
|
||||
- JDK-8301313: RISC-V: C2: assert(false) failed: bad AD file due to missing match rule
|
||||
- JDK-8301367: Add exception handler method to the BaseLdapServer
|
||||
- JDK-8301628: RISC-V: c2 fix pipeline class for several instructions
|
||||
- JDK-8301700: Increase the default TLS Diffie-Hellman group size from 1024-bit to 2048-bit
|
||||
- JDK-8301818: RISC-V: Factor out function mvw from MacroAssembler
|
||||
- JDK-8301852: RISC-V: Optimize class atomic when order is memory_order_relaxed
|
||||
- JDK-8301959: Compile command in compiler.loopopts.TestRemoveEmptyCountedLoop does not work
|
||||
- JDK-8302114: RISC-V: Several foreign jtreg tests fail with debug build after JDK-8301818
|
||||
- JDK-8302150: Speed up compiler/codegen/Test7100757.java
|
||||
- JDK-8302161: Upgrade jQuery UI to version 1.13.2
|
||||
- JDK-8302182: Update Public Suffix List to 88467c9
|
||||
- JDK-8302289: RISC-V: Use bgez instruction in arraycopy_simple_check when possible
|
||||
- JDK-8302736: Major performance regression in Math.log on aarch64
|
||||
- JDK-8302776: RISC-V: Fix typo CSR_INSTERT to CSR_INSTRET
|
||||
- JDK-8303047: avoid NULL after 8301661
|
||||
- JDK-8303154: Investigate and improve instruction cache flushing during compilation
|
||||
- JDK-8303215: Make thread stacks not use huge pages
|
||||
- JDK-8303279: C2: crash in SubTypeCheckNode::sub() at IGVN split if
|
||||
- JDK-8304293: RISC-V: JDK-8276799 missed atomic intrinsic support for C1
|
||||
- JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373
|
||||
- JDK-8304353: Add lib-test tier1 testing in GHA
|
||||
- JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1
|
||||
- JDK-8304845: Update PCSC-Lite for Suse Linux to 1.9.9 and fix incomplete license wording
|
||||
- JDK-8304976: Optimize DateTimeFormatterBuilder.ZoneTextPrinterParser.getTree()
|
||||
- JDK-8305006: Use correct register in riscv_enc_fast_unlock()
|
||||
- JDK-8305008: RISC-V: Factor out immediate checking functions from assembler_riscv.inline.hpp
|
||||
- JDK-8305112: RISC-V: Typo fix for RVC description
|
||||
- JDK-8305236: Some LoadLoad barriers in the interpreter are unnecessary after JDK-8220051
|
||||
- JDK-8305421: Work around JDK-8305420 in CDSJDITest.java
|
||||
- JDK-8305425: Thread.isAlive0 doesn't need to call into the VM
|
||||
- JDK-8305512: RISC-V: Enable RVC extension by default on supported hardware
|
||||
- JDK-8305670: Performance regression in LockSupport.unpark with lots of idle threads
|
||||
- JDK-8305728: RISC-V: Use bexti instruction to do single-bit testing
|
||||
- JDK-8305763: Parsing a URI with an underscore goes through a silent exception, negatively impacting performance
|
||||
- JDK-8305766: ProblemList runtime/CompressedOops/CompressedClassPointers.java
|
||||
- JDK-8305858: Resolve multiple definition of 'handleSocketError' when statically linking with JDK native libraries
|
||||
- JDK-8305950: Have -XshowSettings option display tzdata version
|
||||
- JDK-8305995: Footprint regression from JDK-8224957
|
||||
- JDK-8306060: Open source few AWT Insets related tests
|
||||
- JDK-8306076: Open source AWT misc tests
|
||||
- JDK-8306134: Open source some AWT tests relating to Button and a few other classes
|
||||
- JDK-8306135: Clean up and open source some AWT tests
|
||||
- JDK-8306137: Open source several AWT ScrollPane related tests
|
||||
- JDK-8306281: function isWsl() returns false on WSL2
|
||||
- JDK-8306372: Open source AWT CardLayout and Checkbox tests
|
||||
- JDK-8306428: RunThese30M.java crashed with assert(early->flag() == current->flag() || early->flag() == mtNone)
|
||||
- JDK-8306430: Open source some AWT tests related to TextComponent and Toolkit
|
||||
- JDK-8306435: Juggle04/TestDescription.java should be a booleanArr test and not a byteArr one
|
||||
- JDK-8306484: Open source several AWT Choice jtreg tests
|
||||
- JDK-8306566: Open source several clipboard AWT tests
|
||||
- JDK-8306575: Clean up and open source four Dialog related tests
|
||||
- JDK-8306636: Disable compiler/c2/Test6905845.java with -XX:TieredStopAtLevel=3
|
||||
- JDK-8306638: Open source some AWT tests related to datatransfer and Toolkit
|
||||
- JDK-8306667: RISC-V: Fix storeImmN0 matching rule by using zr register
|
||||
- JDK-8306682: Open source a few more AWT Choice tests
|
||||
- JDK-8306718: Optimize and opensource some old AWT tests
|
||||
- JDK-8306738: Select num workers for safepoint ParallelCleanupTask
|
||||
- JDK-8306765: Some client related jtreg problem list entries are malformed
|
||||
- JDK-8306812: Open source several AWT Miscellaneous tests
|
||||
- JDK-8307067: remove broken EnableThreadSMRExtraValidityChecks option
|
||||
- JDK-8307068: store a JavaThread* in the java.lang.Thread object after the JavaThread* is added to the main ThreadsList
|
||||
- JDK-8307078: Opensource and clean up five more AWT Focus related tests
|
||||
- JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java
|
||||
- JDK-8307083: Open source some drag and drop tests 3
|
||||
- JDK-8307147: [x86] Dangling pointer warning for Assembler::_attributes
|
||||
- JDK-8307150: RISC-V: Remove remaining StoreLoad barrier with UseCondCardMark for Serial/Parallel GC
|
||||
- JDK-8307156: native_thread not protected by TLH
|
||||
- JDK-8307165: java/awt/dnd/NoFormatsDropTest/NoFormatsDropTest.java timed out
|
||||
- JDK-8307299: Move more DnD tests to open
|
||||
- JDK-8307301: Update HarfBuzz to 7.2.0
|
||||
- JDK-8307348: Parallelize heap walk for ObjectCount(AfterGC) JFR event collection
|
||||
- JDK-8307395: Add missing STS to Shenandoah
|
||||
- JDK-8307446: RISC-V: Improve performance of floating point to integer conversion
|
||||
- JDK-8307526: [JFR] Better handling of tampered JFR repository
|
||||
- JDK-8307555: Reduce memory reads in x86 MD5 intrinsic
|
||||
- JDK-8307569: Build with gcc8 is broken after JDK-8307301
|
||||
- JDK-8307572: AArch64: Vector registers are clobbered by some macroassemblers
|
||||
- JDK-8307603: [AIX] Broken build after JDK-8307301
|
||||
- JDK-8307604: gcc12 based Alpine build broken build after JDK-8307301
|
||||
- JDK-8307651: RISC-V: stringL_indexof_char instruction has wrong format string
|
||||
- JDK-8307653: Adjust delay time and gc log argument in TestAbortOnVMOperationTimeout
|
||||
- JDK-8307683: Loop Predication should not hoist range checks with trap on success projection by negating their condition
|
||||
- JDK-8307766: Linux: Provide the option to override the timer slack
|
||||
- JDK-8308089: [riscv-port-jdk17u] Intrinsify Unsafe.storeStoreFence
|
||||
- JDK-8308090: Add container tests for on-the-fly resource quota updates
|
||||
- JDK-8308152: PropertyDescriptor should work with overridden generic getter method
|
||||
- JDK-8308156: VerifyCACerts.java misses blank in error output
|
||||
- JDK-8308192: Error in parsing replay file when staticfield is an array of single dimension
|
||||
- JDK-8308232: nsk/jdb tests don't pass -verbose flag to the debuggee
|
||||
- JDK-8308277: RISC-V: Improve vectorization of Match.sqrt() on floats
|
||||
- JDK-8308283: Build failure with GCC12 & GCC13
|
||||
- JDK-8308300: enhance exceptions in MappedMemoryUtils.c
|
||||
- JDK-8308643: Incorrect value of 'used' jvmstat counter
|
||||
- JDK-8308766: TLAB initialization may cause div by zero
|
||||
- JDK-8308803: Improve java/util/UUID/UUIDTest.java
|
||||
- JDK-8308872: enhance logging and some exception in krb5/Config.java
|
||||
- JDK-8308997: RISC-V: Sign extend when comparing 32-bit value with zero instead of testing the sign bit
|
||||
- JDK-8309088: security/infra/java/security/cert/CertPathValidator/certification/AmazonCA.java fails
|
||||
- JDK-8309095: Remove UTF-8 character from TaskbarPositionTest.java
|
||||
- JDK-8309107: Bump update version for OpenJDK: jdk-17.0.9
|
||||
- JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton predicates for all If nodes in loop predication
|
||||
- JDK-8309138: Fix container tests for jdks with symlinked conf dir
|
||||
- JDK-8309228: Clarify EXPERIMENTAL flags comment in hotspot/share/runtime/globals.hpp
|
||||
- JDK-8309254: Implement fast-path for ASCII-compatible CharsetEncoders on RISC-V
|
||||
- JDK-8309266: C2: assert(final_con == (jlong)final_int) failed: final value should be integer
|
||||
- JDK-8309297: Adjust ShenandoahHeap print_heap_regions_on
|
||||
- JDK-8309340: Provide sctpHandleSocketErrorWithMessage
|
||||
- JDK-8309427: [riscv-port-jdk17u] Remove unused RoundDoubleModeV C2 node
|
||||
- JDK-8309550: jdk.jfr.internal.Utils::formatDataAmount method should gracefully handle amounts equal to Long.MIN_VALUE
|
||||
- JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level
|
||||
- JDK-8309613: [Windows] hs_err files sometimes miss information about the code containing the error
|
||||
- JDK-8309746: Reconfigure check should include make/conf/version-numbers.conf
|
||||
- JDK-8309862: Unsafe list operations in JfrStringPool
|
||||
- JDK-8309956: Shenandoah: Strengthen the mark word check in string dedup
|
||||
- JDK-8309959: JFR: Display N/A for missing data amount
|
||||
- JDK-8310054: ScrollPane insets are incorrect
|
||||
- JDK-8310126: C1: Missing receiver null check in Reference::get intrinsic
|
||||
- JDK-8310259: Pin msys2/setup-msys2 github action to a specific commit
|
||||
- JDK-8310549: avoid potential leaks in KeystoreImpl.m related to JNU_CHECK_EXCEPTION early returns
|
||||
- JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/interrupt001.java timed out due to missing prompt
|
||||
- JDK-8310873: Re-enable locked_create_entry symbol check in runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
|
||||
- JDK-8311033: [macos] PrinterJob does not take into account Sides attribute
|
||||
- JDK-8311249: Remove unused MemAllocator::obj_memory_range
|
||||
- JDK-8311285: report some fontconfig related environment variables in hs_err file
|
||||
- JDK-8311689: Wrong visible amount in Adjustable of ScrollPane
|
||||
- JDK-8311862: RISC-V: small improvements to shift immediate instructions
|
||||
- JDK-8311923: TestIRMatching.java fails on RISC-V
|
||||
- JDK-8312029: Add CriticalNative tests to ProblemList for 8312028
|
||||
- JDK-8312511: GHA: Bump cross-compile runner to Ubuntu 22.04
|
||||
- JDK-8312525: New test runtime/os/TestTrimNative.java#trimNative is failing: did not see the expected RSS reduction
|
||||
- JDK-8312555: Ideographic characters aren't stretched by AffineTransform.scale(2, 1)
|
||||
- JDK-8313262: C2: Sinking node may cause required cast to be dropped
|
||||
- JDK-8313402: C1: Incorrect LoadIndexed value numbering
|
||||
- JDK-8313428: GHA: Bump GCC versions for July 2023 updates
|
||||
- JDK-8313576: GCC 7 reports compiler warning in bundled freetype 2.13.0
|
||||
- JDK-8313676: Amend TestLoadIndexedMismatch test to target intrinsic directly
|
||||
- JDK-8313678: SymbolTable can leak Symbols during cleanup
|
||||
- JDK-8313701: GHA: RISC-V should use the official repository for bootstrap
|
||||
- JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase
|
||||
- JDK-8313796: AsyncGetCallTrace crash on unreadable interpreter method pointer
|
||||
- JDK-8313815: The exception messages printed by jcmd ManagementAgent.start are corrupted on Japanese Windows
|
||||
- JDK-8313874: JNI NewWeakGlobalRef throws exception for null arg
|
||||
- JDK-8314020: Print instruction blocks in byte units
|
||||
- JDK-8314117: RISC-V: Incorrect VMReg encoding in RISCV64Frame.java
|
||||
- JDK-8314118: Update JMH devkit to 1.37
|
||||
- JDK-8314262: GHA: Cut down cross-compilation sysroots deeper
|
||||
- JDK-8314426: runtime/os/TestTrimNative.java is failing on slow machines
|
||||
- JDK-8314501: Shenandoah: sun/tools/jhsdb/heapconfig/JMapHeapConfigTest.java fails
|
||||
- JDK-8314517: some tests fail in case ipv6 is disabled on the machine
|
||||
- JDK-8314552: Fix javadoc tests to work with jtreg 7
|
||||
- JDK-8314658: [17u] GHA: Sync up debian-version for cross-builds
|
||||
- JDK-8314730: GHA: Drop libfreetype6-dev transitional package in favor of libfreetype-dev
|
||||
- JDK-8314960: Add Certigna Root CA - 2
|
||||
- JDK-8317040: Exclude cleaner test failing on older releases
|
||||
- JDK-8317643: [17u] Remove designator DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.9
|
||||
|
||||
Notes on individual issues:
|
||||
===========================
|
||||
|
||||
hotspot/compiler:
|
||||
|
||||
JDK-8276799: Implementation of JEP 422: Linux/RISC-V Port
|
||||
=========================================================
|
||||
https://openjdk.org/jeps/422
|
||||
|
||||
RISC-V is a free and open-source RISC instruction set architecture
|
||||
(ISA) designed originally at the University of California, Berkeley,
|
||||
and now developed collaboratively under the sponsorship of RISC-V
|
||||
International. It is already supported by a wide range of language
|
||||
toolchains. With the increasing availability of RISC-V hardware, the
|
||||
JDK port has been backported to 17u, following introduction in 19.
|
||||
|
||||
security-libs/javax.net.ssl:
|
||||
|
||||
JDK-8301700: The Default TLS Diffie-Hellman Group Size Has Been Increased from 1024-bit to 2048-bit
|
||||
===================================================================================================
|
||||
The JDK implementation of TLS 1.2 now uses a default Diffie Hellman
|
||||
keysize of 2048 bits when a TLS_DHE cipher suite is negotiated and
|
||||
either the client or server does not support FFDHE.
|
||||
|
||||
The JDK TLS implementation supports FFDHE, which can negotiate a
|
||||
stronger keysize, and this is enabled by default.
|
||||
|
||||
As a workaround, users can revert to the previous key size by setting
|
||||
the `jdk.tls.ephemeralDHKeySize` system property to 1024 (at their own
|
||||
risk).
|
||||
|
||||
This change does not affect TLS 1.3 as the minimum DH group size is
|
||||
already 2048 bits.
|
||||
|
||||
tools/launcher:
|
||||
|
||||
JDK-8305950: `-XshowSettings:locale` Output Now Includes Tzdata Version
|
||||
=======================================================================
|
||||
The `-XshowSettings` launcher option has been enhanced to print the
|
||||
tzdata version used by the JDK. The tzdata version is displayed as
|
||||
part of the `locale` showSettings option.
|
||||
|
||||
Example output using `-X:showSettings:locale`:
|
||||
|
||||
Locale settings:
|
||||
default locale = English
|
||||
default display locale = English
|
||||
default format locale = English
|
||||
tzdata version = 2023c
|
||||
|
||||
security-libs/java.security:
|
||||
|
||||
JDK-8295894: Removed SECOM Trust System's RootCA1 Root Certificate
|
||||
==================================================================
|
||||
The following root certificate from SECOM Trust System has been
|
||||
removed from the `cacerts` keystore:
|
||||
|
||||
Alias Name: secomscrootca1 [jdk]
|
||||
Distinguished Name: OU=Security Communication RootCA1, O=SECOM Trust.net, C=JP
|
||||
|
||||
JDK-8314960: Added Certigna Root CA Certificate
|
||||
===============================================
|
||||
The following root certificate has been added to the cacerts
|
||||
truststore:
|
||||
|
||||
Name: Certigna (Dhimyotis)
|
||||
Alias Name: certignarootca
|
||||
Distinguished Name: CN=Certigna Root CA, OU=0002 48146308100036, O=Dhimyotis, C=FR
|
||||
|
||||
New in release OpenJDK 17.0.8.1 (2023-08-24):
|
||||
=============================================
|
||||
Live versions of these release notes can be found at:
|
||||
* https://bit.ly/openjdk17081
|
||||
|
||||
* Other changes
|
||||
- JDK-8313765: Invalid CEN header (invalid zip64 extra data field size)
|
||||
- JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1
|
||||
|
||||
Notes on individual issues:
|
||||
===========================
|
||||
|
||||
core-libs/java.util.jar:
|
||||
|
||||
JDK-8313765: Invalid CEN header (invalid zip64 extra data field size)
|
||||
=====================================================================
|
||||
Additional validity checks in the handling of Zip64 files,
|
||||
JDK-8302483, introduced in 17.0.8, caused the use of some valid zip
|
||||
files to now fail with the error, `Invalid CEN header (invalid zip64
|
||||
extra data field size)`
|
||||
|
||||
This release, 17.0.8.1, allows for zero length headers and additional
|
||||
padding produced by some Zip64 creation tools.
|
||||
|
||||
The following third party tools have also released patches to better
|
||||
adhere to the ZIP File Format Specification:
|
||||
|
||||
* Apache Commons Compress fix for Empty CEN Zip64 Extra Headers fixed in Commons Compress release 1.11
|
||||
* Apache Ant fix for Empty CEN Zip64 Extra Headers fixed in Ant 1.10.14
|
||||
* BND issue with writing invalid Extra Headers fixed in BND 5.3
|
||||
|
||||
The maven-bundle-plugin 5.1.5 includes the BND 5.3 patch.
|
||||
|
||||
If these improved validation checks cause issues for deployed zip or
|
||||
jar files, check how the file was created and whether patches are
|
||||
available from the generating software to resolve the issue. With
|
||||
both JDK releases, the checks can be disabled by setting the new
|
||||
system property, `jdk.util.zip.disableZip64ExtraFieldValidation` to
|
||||
`true`.
|
||||
|
||||
New in release OpenJDK 17.0.8 (2023-07-18):
|
||||
===========================================
|
||||
Live versions of these release notes can be found at:
|
||||
|
|
@ -2913,4 +3397,3 @@ its introduction and the effort required to maintain it is
|
|||
significant. Retain the experimental Java-level JVM compiler
|
||||
interface (JVMCI) so that developers can continue to use
|
||||
externally-built versions of the compiler for JIT compilation.
|
||||
|
||||
|
|
|
|||
|
|
@ -0,0 +1,54 @@
|
|||
#!/bin/sh
|
||||
|
||||
# Copyright (C) 2020 Red Hat, Inc.
|
||||
# Written by Andrew John Hughes <gnu.andrew@redhat.com>.
|
||||
#
|
||||
# This program is free software: you can redistribute it and/or modify
|
||||
# it under the terms of the GNU Affero General Public License as
|
||||
# published by the Free Software Foundation, either version 3 of the
|
||||
# License, or (at your option) any later version.
|
||||
#
|
||||
# This program is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU Affero General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU Affero General Public License
|
||||
# along with this program. If not, see <https://www.gnu.org/licenses/>.
|
||||
|
||||
TREE=${1}
|
||||
|
||||
if test "x${TREE}" = "x"; then
|
||||
TREE=${PWD}
|
||||
fi
|
||||
|
||||
if [ -e ${TREE}/nashorn/.hg -o -e ${TREE}/nashorn/merge.changeset ] ; then
|
||||
NASHORN="nashorn" ;
|
||||
fi
|
||||
|
||||
if [ -e ${TREE}/corba/.hg -o -e ${TREE}/corba/merge.changeset ] ; then
|
||||
CORBA="corba";
|
||||
fi
|
||||
|
||||
if [ -e ${TREE}/jaxp/.hg -o -e ${TREE}/jaxp/merge.changeset ] ; then
|
||||
JAXP="jaxp";
|
||||
fi
|
||||
|
||||
if [ -e ${TREE}/jaxws/.hg -o -e ${TREE}/jaxws/merge.changeset ] ; then
|
||||
JAXWS="jaxws";
|
||||
fi
|
||||
|
||||
if [ -e ${TREE}/langtools/.hg -o -e ${TREE}/langtools/merge.changeset ] ; then
|
||||
LANGTOOLS="langtools";
|
||||
fi
|
||||
|
||||
if [ -e ${TREE}/jdk/.hg -o -e ${TREE}/jdk/merge.changeset ] ; then
|
||||
JDK="jdk";
|
||||
fi
|
||||
|
||||
if [ -e ${TREE}/hotspot/.hg -o -e ${TREE}/hotspot/merge.changeset ] ; then
|
||||
HOTSPOT="hotspot";
|
||||
fi
|
||||
|
||||
SUBTREES="${CORBA} ${JAXP} ${JAXWS} ${LANGTOOLS} ${NASHORN} ${JDK} ${HOTSPOT}";
|
||||
echo ${SUBTREES}
|
||||
|
|
@ -116,7 +116,7 @@ index 00000000000..f48fc7f7e80
|
|||
+ AC_SUBST(NSS_LIBDIR)
|
||||
+])
|
||||
diff --git a/make/autoconf/libraries.m4 b/make/autoconf/libraries.m4
|
||||
index a65d91ee974..a8f054c1397 100644
|
||||
index 366682cf044..1f8d782f419 100644
|
||||
--- a/make/autoconf/libraries.m4
|
||||
+++ b/make/autoconf/libraries.m4
|
||||
@@ -33,6 +33,7 @@ m4_include([lib-std.m4])
|
||||
|
|
@ -2508,7 +2508,7 @@ index 00000000000..dc8bc72fccb
|
|||
+ }
|
||||
+}
|
||||
diff --git a/src/java.base/share/conf/security/java.security b/src/java.base/share/conf/security/java.security
|
||||
index fab52688c04..29337576f37 100644
|
||||
index 9be02033877..4dd055a9ccf 100644
|
||||
--- a/src/java.base/share/conf/security/java.security
|
||||
+++ b/src/java.base/share/conf/security/java.security
|
||||
@@ -82,6 +82,17 @@ security.provider.tbd=Apple
|
||||
|
|
@ -3496,7 +3496,7 @@ index 00000000000..f8d505ca815
|
|||
+}
|
||||
\ No newline at end of file
|
||||
diff --git a/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11Key.java b/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11Key.java
|
||||
index 9b69072280e..5696b904979 100644
|
||||
index 0736ce997e4..0a937fef377 100644
|
||||
--- a/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11Key.java
|
||||
+++ b/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11Key.java
|
||||
@@ -37,6 +37,8 @@ import javax.crypto.*;
|
||||
|
|
@ -3518,18 +3518,18 @@ index 9b69072280e..5696b904979 100644
|
|||
private static final long serialVersionUID = -2575874101938349339L;
|
||||
|
||||
private static final String PUBLIC = "public";
|
||||
@@ -136,9 +141,7 @@ abstract class P11Key implements Key, Length {
|
||||
@@ -139,9 +144,7 @@ abstract class P11Key implements Key, Length {
|
||||
this.tokenObject = tokenObject;
|
||||
this.sensitive = sensitive;
|
||||
this.extractable = extractable;
|
||||
- char[] tokenLabel = this.token.tokenInfo.label;
|
||||
- boolean isNSS = (tokenLabel[0] == 'N' && tokenLabel[1] == 'S'
|
||||
- isNSS = (tokenLabel[0] == 'N' && tokenLabel[1] == 'S'
|
||||
- && tokenLabel[2] == 'S');
|
||||
+ boolean isNSS = P11Util.isNSS(this.token);
|
||||
+ isNSS = P11Util.isNSS(this.token);
|
||||
boolean extractKeyInfo = (!DISABLE_NATIVE_KEYS_EXTRACTION && isNSS &&
|
||||
extractable && !tokenObject);
|
||||
this.keyIDHolder = new NativeKeyHolder(this, keyID, session,
|
||||
@@ -379,7 +382,9 @@ abstract class P11Key implements Key, Length {
|
||||
@@ -383,7 +386,9 @@ abstract class P11Key implements Key, Length {
|
||||
new CK_ATTRIBUTE(CKA_SENSITIVE),
|
||||
new CK_ATTRIBUTE(CKA_EXTRACTABLE),
|
||||
});
|
||||
|
|
@ -3540,13 +3540,13 @@ index 9b69072280e..5696b904979 100644
|
|||
return new P11PrivateKey
|
||||
(session, keyID, algorithm, keyLength, attributes);
|
||||
} else {
|
||||
@@ -461,7 +466,8 @@ abstract class P11Key implements Key, Length {
|
||||
@@ -465,7 +470,8 @@ abstract class P11Key implements Key, Length {
|
||||
}
|
||||
public String getFormat() {
|
||||
token.ensureValid();
|
||||
- if (sensitive || (extractable == false)) {
|
||||
- if (sensitive || !extractable || (isNSS && tokenObject)) {
|
||||
+ if (!plainKeySupportEnabled &&
|
||||
+ (sensitive || (extractable == false))) {
|
||||
+ (sensitive || !extractable || (isNSS && tokenObject))) {
|
||||
return null;
|
||||
} else {
|
||||
return "RAW";
|
||||
|
|
@ -8,7 +8,7 @@
|
|||
# In any case you have to set PROJECT_NAME REPO_NAME and VERSION. eg:
|
||||
# PROJECT_NAME=openjdk
|
||||
# REPO_NAME=jdk17u
|
||||
# VERSION=jdk-17.0.7+7
|
||||
# VERSION=jdk-17.0.7+9
|
||||
# or to eg prepare systemtap:
|
||||
# icedtea7's jstack and other tapsets
|
||||
# VERSION=6327cf1cea9e
|
||||
|
|
@ -29,8 +29,6 @@ set -e
|
|||
|
||||
OPENJDK_URL_DEFAULT=https://github.com
|
||||
COMPRESSION_DEFAULT=xz
|
||||
# Corresponding IcedTea version
|
||||
ICEDTEA_VERSION=12.0
|
||||
|
||||
if [ "x$1" = "xhelp" ] ; then
|
||||
echo -e "Behaviour may be specified by setting the following variables:\n"
|
||||
|
|
@ -40,8 +38,8 @@ if [ "x$1" = "xhelp" ] ; then
|
|||
echo "OPENJDK_URL - the URL to retrieve code from (optional; defaults to ${OPENJDK_URL_DEFAULT})"
|
||||
echo "COMPRESSION - the compression type to use (optional; defaults to ${COMPRESSION_DEFAULT})"
|
||||
echo "FILE_NAME_ROOT - name of the archive, minus extensions (optional; defaults to PROJECT_NAME-REPO_NAME-VERSION)"
|
||||
echo "REPO_ROOT - the location of the Git repository to archive (optional; defaults to OPENJDK_URL/PROJECT_NAME/REPO_NAME)"
|
||||
echo "TO_COMPRESS - what part of clone to pack (default is openjdk)"
|
||||
echo "REPO_ROOT - the location of the Git repository to archive (optional; defaults to OPENJDK_URL/PROJECT_NAME/REPO_NAME.git)"
|
||||
echo "TO_COMPRESS - what part of clone to pack (default is ${VERSION})"
|
||||
echo "BOOT_JDK - the bootstrap JDK to satisfy the configure run"
|
||||
exit 1;
|
||||
fi
|
||||
|
|
@ -52,6 +50,7 @@ if [ "x$VERSION" = "x" ] ; then
|
|||
exit 2
|
||||
fi
|
||||
echo "Version: ${VERSION}"
|
||||
|
||||
NUM_VER=${VERSION##jdk-}
|
||||
RELEASE_VER=${NUM_VER%%+*}
|
||||
BUILD_VER=${NUM_VER##*+}
|
||||
|
|
@ -117,8 +116,8 @@ if [ "x$REPO_ROOT" = "x" ] ; then
|
|||
fi;
|
||||
|
||||
if [ "x$TO_COMPRESS" = "x" ] ; then
|
||||
TO_COMPRESS="openjdk"
|
||||
echo "No targets to be compressed specified, ; default to ${TO_COMPRESS}"
|
||||
TO_COMPRESS="${VERSION}"
|
||||
echo "No targets to be compressed specified ; default to ${TO_COMPRESS}"
|
||||
fi;
|
||||
|
||||
echo -e "Settings:"
|
||||
|
|
@ -140,9 +139,10 @@ else
|
|||
mkdir "${FILE_NAME_ROOT}"
|
||||
pushd "${FILE_NAME_ROOT}"
|
||||
echo "Cloning ${VERSION} root repository from ${REPO_ROOT}"
|
||||
git clone -b ${VERSION} ${REPO_ROOT} openjdk
|
||||
git clone -b ${VERSION} ${REPO_ROOT} ${VERSION}
|
||||
popd
|
||||
fi
|
||||
|
||||
pushd "${FILE_NAME_ROOT}"
|
||||
# Generate .src-rev so build has knowledge of the revision the tarball was created from
|
||||
mkdir build
|
||||
|
|
@ -153,22 +153,22 @@ pushd "${FILE_NAME_ROOT}"
|
|||
rm -rf build
|
||||
|
||||
# Remove commit checks
|
||||
echo "Removing $(find openjdk -name '.jcheck' -print)"
|
||||
find openjdk -name '.jcheck' -print0 | xargs -0 rm -rf
|
||||
echo "Removing $(find ${VERSION} -name '.jcheck' -print)"
|
||||
find ${VERSION} -name '.jcheck' -print0 | xargs -0 rm -r
|
||||
|
||||
# Remove history and GHA
|
||||
echo "find openjdk -name '.hgtags'"
|
||||
find openjdk -name '.hgtags' -exec rm -fv '{}' '+'
|
||||
echo "find openjdk -name '.hgignore'"
|
||||
find openjdk -name '.hgignore' -exec rm -fv '{}' '+'
|
||||
echo "find openjdk -name '.gitattributes'"
|
||||
find openjdk -name '.gitattributes' -exec rm -fv '{}' '+'
|
||||
echo "find openjdk -name '.gitignore'"
|
||||
find openjdk -name '.gitignore' -exec rm -fv '{}' '+'
|
||||
echo "find openjdk -name '.git'"
|
||||
find openjdk -name '.git' -exec rm -rfv '{}' '+'
|
||||
echo "find openjdk -name '.github'"
|
||||
find openjdk -name '.github' -exec rm -rfv '{}' '+'
|
||||
echo "find ${VERSION} -name '.hgtags'"
|
||||
find ${VERSION} -name '.hgtags' -exec rm -fv '{}' '+'
|
||||
echo "find ${VERSION} -name '.hgignore'"
|
||||
find ${VERSION} -name '.hgignore' -exec rm -fv '{}' '+'
|
||||
echo "find ${VERSION} -name '.gitattributes'"
|
||||
find ${VERSION} -name '.gitattributes' -exec rm -fv '{}' '+'
|
||||
echo "find ${VERSION} -name '.gitignore'"
|
||||
find ${VERSION} -name '.gitignore' -exec rm -fv '{}' '+'
|
||||
echo "find ${VERSION} -name '.git'"
|
||||
find ${VERSION} -name '.git' -exec rm -rfv '{}' '+'
|
||||
echo "find ${VERSION} -name '.github'"
|
||||
find ${VERSION} -name '.github' -exec rm -rfv '{}' '+'
|
||||
|
||||
echo "Compressing remaining forest"
|
||||
if [ "X$COMPRESSION" = "Xxz" ] ; then
|
||||
|
|
|
|||
193
icedtea_sync.sh
193
icedtea_sync.sh
|
|
@ -1,192 +1 @@
|
|||
#!/bin/bash
|
||||
|
||||
# Copyright (C) 2019 Red Hat, Inc.
|
||||
# Written by Andrew John Hughes <gnu.andrew@redhat.com>.
|
||||
#
|
||||
# This program is free software: you can redistribute it and/or modify
|
||||
# it under the terms of the GNU Affero General Public License as
|
||||
# published by the Free Software Foundation, either version 3 of the
|
||||
# License, or (at your option) any later version.
|
||||
#
|
||||
# This program is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU Affero General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU Affero General Public License
|
||||
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||
|
||||
ICEDTEA_USE_VCS=true
|
||||
|
||||
ICEDTEA_VERSION=3.15.0
|
||||
ICEDTEA_URL=https://icedtea.classpath.org/download/source
|
||||
ICEDTEA_SIGNING_KEY=CFDA0F9B35964222
|
||||
|
||||
ICEDTEA_HG_URL=https://icedtea.classpath.org/hg/icedtea11
|
||||
|
||||
set -e
|
||||
|
||||
RPM_DIR=${PWD}
|
||||
if [ ! -f ${RPM_DIR}/jconsole.desktop.in ] ; then
|
||||
echo "Not in RPM source tree.";
|
||||
exit 1;
|
||||
fi
|
||||
|
||||
if test "x${TMPDIR}" = "x"; then
|
||||
TMPDIR=/tmp;
|
||||
fi
|
||||
WORKDIR=${TMPDIR}/it.sync
|
||||
|
||||
echo "Using working directory ${WORKDIR}"
|
||||
mkdir ${WORKDIR}
|
||||
pushd ${WORKDIR}
|
||||
|
||||
if test "x${WGET}" = "x"; then
|
||||
WGET=$(which wget);
|
||||
if test "x${WGET}" = "x"; then
|
||||
echo "wget not found";
|
||||
exit 1;
|
||||
fi
|
||||
fi
|
||||
|
||||
if test "x${TAR}" = "x"; then
|
||||
TAR=$(which tar)
|
||||
if test "x${TAR}" = "x"; then
|
||||
echo "tar not found";
|
||||
exit 2;
|
||||
fi
|
||||
fi
|
||||
|
||||
echo "Dependencies:";
|
||||
echo -e "\tWGET: ${WGET}";
|
||||
echo -e "\tTAR: ${TAR}\n";
|
||||
|
||||
if test "x${ICEDTEA_USE_VCS}" = "xtrue"; then
|
||||
echo "Mode: Using VCS";
|
||||
|
||||
if test "x${GREP}" = "x"; then
|
||||
GREP=$(which grep);
|
||||
if test "x${GREP}" = "x"; then
|
||||
echo "grep not found";
|
||||
exit 3;
|
||||
fi
|
||||
fi
|
||||
|
||||
if test "x${CUT}" = "x"; then
|
||||
CUT=$(which cut);
|
||||
if test "x${CUT}" = "x"; then
|
||||
echo "cut not found";
|
||||
exit 4;
|
||||
fi
|
||||
fi
|
||||
|
||||
if test "x${TR}" = "x"; then
|
||||
TR=$(which tr);
|
||||
if test "x${TR}" = "x"; then
|
||||
echo "tr not found";
|
||||
exit 5;
|
||||
fi
|
||||
fi
|
||||
|
||||
if test "x${HG}" = "x"; then
|
||||
HG=$(which hg);
|
||||
if test "x${HG}" = "x"; then
|
||||
echo "hg not found";
|
||||
exit 6;
|
||||
fi
|
||||
fi
|
||||
|
||||
echo "Dependencies:";
|
||||
echo -e "\tGREP: ${GREP}";
|
||||
echo -e "\tCUT: ${CUT}";
|
||||
echo -e "\tTR: ${TR}";
|
||||
echo -e "\tHG: ${HG}";
|
||||
|
||||
echo "Checking out repository from VCS...";
|
||||
${HG} clone ${ICEDTEA_HG_URL} icedtea
|
||||
|
||||
echo "Obtaining version from configure.ac...";
|
||||
ROOT_VER=$(${GREP} '^AC_INIT' icedtea/configure.ac|${CUT} -d ',' -f 2|${TR} -d '[][:space:]')
|
||||
echo "Root version from configure: ${ROOT_VER}";
|
||||
|
||||
VCS_REV=$(${HG} log -R icedtea --template '{node|short}' -r tip)
|
||||
echo "VCS revision: ${VCS_REV}";
|
||||
|
||||
ICEDTEA_VERSION="${ROOT_VER}-${VCS_REV}"
|
||||
echo "Creating icedtea-${ICEDTEA_VERSION}";
|
||||
mkdir icedtea-${ICEDTEA_VERSION}
|
||||
echo "Copying required files from checkout to icedtea-${ICEDTEA_VERSION}";
|
||||
# Commented out for now as IcedTea 6's jconsole.desktop.in is outdated
|
||||
#cp -a icedtea/jconsole.desktop.in ../icedtea-${ICEDTEA_VERSION}
|
||||
cp -a ${RPM_DIR}/jconsole.desktop.in icedtea-${ICEDTEA_VERSION}
|
||||
cp -a icedtea/tapset icedtea-${ICEDTEA_VERSION}
|
||||
|
||||
rm -rf icedtea
|
||||
else
|
||||
echo "Mode: Using tarball";
|
||||
|
||||
if test "x${ICEDTEA_VERSION}" = "x"; then
|
||||
echo "No IcedTea version specified for tarball download.";
|
||||
exit 3;
|
||||
fi
|
||||
|
||||
if test "x${CHECKSUM}" = "x"; then
|
||||
CHECKSUM=$(which sha256sum)
|
||||
if test "x${CHECKSUM}" = "x"; then
|
||||
echo "sha256sum not found";
|
||||
exit 4;
|
||||
fi
|
||||
fi
|
||||
|
||||
if test "x${PGP}" = "x"; then
|
||||
PGP=$(which gpg)
|
||||
if test "x${PGP}" = "x"; then
|
||||
echo "gpg not found";
|
||||
exit 5;
|
||||
fi
|
||||
fi
|
||||
|
||||
echo "Dependencies:";
|
||||
echo -e "\tCHECKSUM: ${CHECKSUM}";
|
||||
echo -e "\tPGP: ${PGP}\n";
|
||||
|
||||
echo "Checking for IcedTea signing key ${ICEDTEA_SIGNING_KEY}...";
|
||||
if ! gpg --list-keys ${ICEDTEA_SIGNING_KEY}; then
|
||||
echo "IcedTea signing key ${ICEDTEA_SIGNING_KEY} not installed.";
|
||||
exit 6;
|
||||
fi
|
||||
|
||||
echo "Downloading IcedTea release tarball...";
|
||||
${WGET} -v ${ICEDTEA_URL}/icedtea-${ICEDTEA_VERSION}.tar.xz
|
||||
echo "Downloading IcedTea tarball signature...";
|
||||
${WGET} -v ${ICEDTEA_URL}/icedtea-${ICEDTEA_VERSION}.tar.xz.sig
|
||||
echo "Downloading IcedTea tarball checksums...";
|
||||
${WGET} -v ${ICEDTEA_URL}/icedtea-${ICEDTEA_VERSION}.sha256
|
||||
|
||||
echo "Verifying checksums...";
|
||||
${CHECKSUM} --check --ignore-missing icedtea-${ICEDTEA_VERSION}.sha256
|
||||
|
||||
echo "Checking signature...";
|
||||
${PGP} --verify icedtea-${ICEDTEA_VERSION}.tar.xz.sig
|
||||
|
||||
echo "Extracting files...";
|
||||
${TAR} xJf icedtea-${ICEDTEA_VERSION}.tar.xz \
|
||||
icedtea-${ICEDTEA_VERSION}/tapset \
|
||||
icedtea-${ICEDTEA_VERSION}/jconsole.desktop.in
|
||||
|
||||
rm -vf icedtea-${ICEDTEA_VERSION}.tar.xz
|
||||
rm -vf icedtea-${ICEDTEA_VERSION}.tar.xz.sig
|
||||
rm -vf icedtea-${ICEDTEA_VERSION}.sha256
|
||||
fi
|
||||
|
||||
echo "Replacing desktop files...";
|
||||
mv -v icedtea-${ICEDTEA_VERSION}/jconsole.desktop.in ${RPM_DIR}
|
||||
|
||||
echo "Creating new tapset tarball...";
|
||||
mv -v icedtea-${ICEDTEA_VERSION} openjdk
|
||||
${TAR} cJf ${RPM_DIR}/tapsets-icedtea-${ICEDTEA_VERSION}.tar.xz openjdk
|
||||
|
||||
rm -rvf openjdk
|
||||
|
||||
popd
|
||||
rm -rf ${WORKDIR}
|
||||
# this file is intentionally not here, as portable builds do not have desktop integration
|
||||
|
|
|
|||
File diff suppressed because it is too large
Load Diff
|
|
@ -1,10 +1 @@
|
|||
[Desktop Entry]
|
||||
Name=OpenJDK @JAVA_VER@ for @target_cpu@ Monitoring & Management Console (@OPENJDK_VER@)
|
||||
Comment=Monitor and manage OpenJDK applications
|
||||
Exec=_SDKBINDIR_/jconsole
|
||||
Icon=java-@JAVA_VER@-@JAVA_VENDOR@
|
||||
Terminal=false
|
||||
Type=Application
|
||||
StartupWMClass=sun-tools-jconsole-JConsole
|
||||
Categories=Development;Profiling;Java;
|
||||
Version=1.0
|
||||
# this file is intentionally not here, as portable builds do not have desktop integration
|
||||
|
|
|
|||
File diff suppressed because it is too large
Load Diff
|
|
@ -0,0 +1,50 @@
|
|||
commit 5b613e3ebed6c141146e743e64c894fe4f39421e
|
||||
Author: Andrew John Hughes <andrew@openjdk.org>
|
||||
Date: Fri Sep 1 15:53:41 2023 +0000
|
||||
|
||||
8312489: Increase jdk.jar.maxSignatureFileSize default which is too low for JARs such as WhiteSource/Mend unified agent jar
|
||||
|
||||
Backport-of: e47a84f23dd2608c6f5748093eefe301fb5bf750
|
||||
|
||||
diff --git a/src/java.base/share/classes/java/util/jar/JarFile.java b/src/java.base/share/classes/java/util/jar/JarFile.java
|
||||
index bd538649a4f..70cf99504e4 100644
|
||||
--- a/src/java.base/share/classes/java/util/jar/JarFile.java
|
||||
+++ b/src/java.base/share/classes/java/util/jar/JarFile.java
|
||||
@@ -803,7 +803,9 @@ private byte[] getBytes(ZipEntry ze) throws IOException {
|
||||
throw new IOException("Unsupported size: " + uncompressedSize +
|
||||
" for JarEntry " + ze.getName() +
|
||||
". Allowed max size: " +
|
||||
- SignatureFileVerifier.MAX_SIG_FILE_SIZE + " bytes");
|
||||
+ SignatureFileVerifier.MAX_SIG_FILE_SIZE + " bytes. " +
|
||||
+ "You can use the jdk.jar.maxSignatureFileSize " +
|
||||
+ "system property to increase the default value.");
|
||||
}
|
||||
int len = (int)uncompressedSize;
|
||||
int bytesRead;
|
||||
diff --git a/src/java.base/share/classes/sun/security/util/SignatureFileVerifier.java b/src/java.base/share/classes/sun/security/util/SignatureFileVerifier.java
|
||||
index 4ea9255ba0a..05acdcb9474 100644
|
||||
--- a/src/java.base/share/classes/sun/security/util/SignatureFileVerifier.java
|
||||
+++ b/src/java.base/share/classes/sun/security/util/SignatureFileVerifier.java
|
||||
@@ -856,16 +856,16 @@ private static int initializeMaxSigFileSize() {
|
||||
* the maximum allowed number of bytes for the signature-related files
|
||||
* in a JAR file.
|
||||
*/
|
||||
- Integer tmp = GetIntegerAction.privilegedGetProperty(
|
||||
- "jdk.jar.maxSignatureFileSize", 8000000);
|
||||
+ int tmp = GetIntegerAction.privilegedGetProperty(
|
||||
+ "jdk.jar.maxSignatureFileSize", 16000000);
|
||||
if (tmp < 0 || tmp > MAX_ARRAY_SIZE) {
|
||||
if (debug != null) {
|
||||
- debug.println("Default signature file size 8000000 bytes " +
|
||||
- "is used as the specified size for the " +
|
||||
- "jdk.jar.maxSignatureFileSize system property " +
|
||||
+ debug.println("The default signature file size of 16000000 bytes " +
|
||||
+ "will be used for the jdk.jar.maxSignatureFileSize " +
|
||||
+ "system property since the specified value " +
|
||||
"is out of range: " + tmp);
|
||||
}
|
||||
- tmp = 8000000;
|
||||
+ tmp = 16000000;
|
||||
}
|
||||
return tmp;
|
||||
}
|
||||
|
|
@ -1,8 +0,0 @@
|
|||
name = NSS-FIPS
|
||||
nssLibraryDirectory = @NSS_LIBDIR@
|
||||
nssSecmodDirectory = sql:/etc/pki/nssdb
|
||||
nssDbMode = readOnly
|
||||
nssModule = fips
|
||||
|
||||
attributes(*,CKO_SECRET_KEY,CKK_GENERIC_SECRET)={ CKA_SIGN=true }
|
||||
|
||||
|
|
@ -18,8 +18,8 @@
|
|||
|
||||
OLD_RELEASE=$1
|
||||
NEW_RELEASE=$2
|
||||
SUBDIR=$3
|
||||
REPO=$4
|
||||
REPO=$3
|
||||
SUBDIR=$4
|
||||
SCRIPT_DIR=$(dirname ${0})
|
||||
|
||||
if test "x${SUBDIR}" = "x"; then
|
||||
|
|
|
|||
|
|
@ -1,20 +0,0 @@
|
|||
--- openjdk/src/java.base/share/conf/security/java.security
|
||||
+++ openjdk/src/java.base/share/conf/security/java.security
|
||||
@@ -304,6 +304,8 @@
|
||||
#
|
||||
package.access=sun.misc.,\
|
||||
sun.reflect.,\
|
||||
+ org.GNOME.Accessibility.,\
|
||||
+ org.GNOME.Bonobo.,\
|
||||
|
||||
#
|
||||
# List of comma-separated packages that start with or equal this string
|
||||
@@ -316,6 +318,8 @@
|
||||
#
|
||||
package.definition=sun.misc.,\
|
||||
sun.reflect.,\
|
||||
+ org.GNOME.Accessibility.,\
|
||||
+ org.GNOME.Bonobo.,\
|
||||
|
||||
#
|
||||
# Determines whether this properties file can be appended to
|
||||
2
sources
2
sources
|
|
@ -1 +1 @@
|
|||
SHA512 (openjdk-jdk17u-jdk-17.0.8+7.tar.xz) = 52bd1002cffafc6fc613b3ee1c62bfc3f27f31d5e1810ebb8f556a725ebb310508885762079589f15be5da63388214525128b77d2a665bae9fccfc419ab5d6a1
|
||||
SHA512 (openjdk-17.0.9+9.tar.xz) = 33225a1070077c9504b4857734305f301e51b93a929274d460ddc3dc042ce15943030f8af928c11962743a928619ea39daa453d8fb1c8ea5a334a4b6490a00ee
|
||||
|
|
|
|||
Loading…
Reference in New Issue