asaha [Fri, 04 Dec 2009 10:23:07 -0800] rev 5181
Merge
michaelm [Wed, 02 Dec 2009 12:17:42 +0000] rev 5180
6893954: Subclasses of InetAddress may incorrectly interpret network addresses
Summary: runtime type checks and deserialization check
Reviewed-by: chegar, alanb, jccollet
asaha [Tue, 01 Dec 2009 08:55:15 -0800] rev 5179
Merge
asaha [Thu, 26 Nov 2009 07:17:08 -0800] rev 5178
Merge
mchung [Wed, 25 Nov 2009 16:02:08 -0800] rev 5177
Merge
mchung [Wed, 25 Nov 2009 11:19:32 -0800] rev 5176
Merge
mchung [Wed, 25 Nov 2009 09:09:04 -0800] rev 5175
6893947: Deserialization of RMIConnectionImpl objects should enforce stricter checks [ZDI-CAN-588]
Summary: narrow the doPrivileged block to only set context ClassLoader
Reviewed-by: hawtin, emcmanus
sherman [Wed, 25 Nov 2009 12:51:00 -0800] rev 5174
6904925: Changeset for 6745393 for jdk7 ssr forest was incomplete
Summary: To add, commit and push back the ZStreamRef.java
Reviewed-by: alanb
sherman [Wed, 25 Nov 2009 11:29:23 -0800] rev 5173
6745393: Inflater/Deflater clone issue
Summary: To use explicit lobk object.
Reviewed-by: alanb
alanb [Wed, 25 Nov 2009 10:02:50 +0000] rev 5172
6736390: File TOCTOU deserialization vulnerability
Reviewed-by: hawtin
chegar [Mon, 23 Nov 2009 12:40:46 +0000] rev 5171
6639665: ThreadGroup finalizer allows creation of false root ThreadGroups
Reviewed-by: alanb, hawtin
asaha [Fri, 20 Nov 2009 14:24:56 -0800] rev 5170
Merge
dl [Tue, 06 Oct 2009 12:20:35 -0700] rev 5169
6888149: AtomicReferenceArray causes SIGSEGV -> SEGV_MAPERR error
Summary: Avoid integer overflow by using long arithmetic
Reviewed-by: martin, dholmes
sherman [Sat, 03 Apr 2010 18:29:11 -0700] rev 5168
4947220: (process)Runtime.exec() cannot invoke applications with unicode parameters(win)
Summary: to use CreateProcessW on Windowns platform
Reviewed-by: martin