Commit Graph

11 Commits

Author SHA1 Message Date
kurt
10c96fb157 Security fix for CVE-2007-0243:
Buffer overflow allows applets to gain privileges via a GIF image with a
block with a 0 width field, which triggers memory corruption and possible
execution of arbitrary code.
2007-01-28 04:45:04 +00:00
kurt
7df1fb7f89 Back-port some jdk/1.5 changes:
- use system libz instead of internal one. internal libz conflicts with
system libz, for example apps using JNI & libz will fail (OOo).
- enable parallel hotspot compiles on mp systems (one per cpu). no pthreads
involved so its safe to do here.
- socket option corrections. may help Active MQ work.
2006-10-31 19:48:12 +00:00
kurt
225683f4ff - don't mmap on top of malloc'ed memory. this fixes a large memory leak
while creating/destroying threads.
- add missing pthread_attr_destroy while creating threads. closes a
small memory leak.

Memory leaking problems reported by Carsten Raskgaard and also
David SH Rosenthal from the LOCKSS project.
2006-03-16 16:09:01 +00:00
kurt
7a27922713 - recent w^x changes combined with random malloc/mmap exposed a previously
undiscovered bug in the SignatureHandlerLibrary. Code generated at runtime
was put into malloc()'ed memory and later attempted to execute it without
first making it executable with mprotect(). Debugging suggestions and help
from tom@, weingart@, marc@, millert@. Thx!
- make sure linux emulation is on for the build phase. needed if you reboot
after extracting.

okay tom@
2006-01-18 15:08:16 +00:00
millert
be2c89c95d No need to protect the type-correct prototypes with #ifdef _LP64
Fixes problems caused by types changes.  OK kurt@
2006-01-17 14:28:19 +00:00
kurt
bf8f82ebbc Disable Junk malloc option for java. java mprotects portions of the thread
stack. When forking, the child process deallocates the threads stacks it
inheritated from the parent. The junk malloc option then attempts to write
to the deallocated memory and segfaults because its not all writable. The
child proc stays in a SIGSEGV loop when this happens.  okay ian@
2006-01-02 03:48:40 +00:00
kurt
31adc626ed - Ensure that when files are extracted that their fully resolved path lies
in or below the current working directory.  Fixes a security problem with
jar. From FreeBSD.
2005-06-04 15:47:53 +00:00
kurt
56f5b6a11c timezone is a function on BSD, not a variable, so move the timezone
== 0 check to the non-BSD section. from millert@

no funtional change, so no PKGNAME bump
2005-06-02 18:18:15 +00:00
kurt
aad015c882 - add missing -pthread to java_vm. From niklas@.
- add missing -pthread to awt_robot, libjavaplugin_oji.so.
- fix misc timezone issues
- bump PKGNAME
2005-04-19 14:35:56 +00:00
kurt
a53e8bb58b - teach jdk about /usr/local/lib
- teach ClassLoader how to load native libs with version numbers
- fix writes to HOME complaints
- point license URL to license itself
- fix timezone problem noticed by Roy Morris
- bump package name

ok alek@
2005-02-04 17:06:45 +00:00
kurt
9a7dc09e56 - Initial import of jdk-1.4.2
Version 1.4.2 of Java 2 Platform, Standard Edition (J2SE)

with help from many; ok naddy@ espie@
2004-12-21 04:01:05 +00:00