ksrini [Fri, 17 Oct 2008 09:43:30 -0700] rev 2602
6755943: Java JAR Pack200 Decompression should enforce stricter header checks
Summary: Fixes a core dump when fed with a faulty pack file and related malicious take over
Reviewed-by: jrose
alanb [Thu, 09 Oct 2008 21:12:56 +0100] rev 2601
6721753: File.createTempFile produces guessable file names
Reviewed-by: sherman
bae [Thu, 02 Oct 2008 20:37:43 +0400] rev 2600
6726779: ConvolveOp on USHORT raster can cause the JVM crash.
Reviewed-by: igor, prr
okutsu [Thu, 02 Oct 2008 16:49:33 +0900] rev 2599
6734167: Calendar.readObject allows elevation of privileges
Reviewed-by: peytoia
ksrini [Thu, 04 Sep 2008 09:43:32 -0700] rev 2598
6733959: Insufficient checks for "Main-Class" manifest entry in JAR files
Summary: Fixes a buffer overrun problem with a very long Main-Class attribute.
Reviewed-by: darcy
weijun [Wed, 01 Oct 2008 10:01:45 +0800] rev 2597
6588160: jaas krb5 client leaks OS-level UDP sockets (all platforms)
Reviewed-by: jccollet, chegar
wetmore [Fri, 22 Aug 2008 18:48:00 -0700] rev 2596
6497740: Limit the size of RSA public keys
Reviewed-by: andreas, valeriep, vinnie
alanb [Fri, 17 Apr 2009 09:38:24 +0100] rev 2595
Merge
alanb [Wed, 15 Apr 2009 16:16:35 +0100] rev 2594
6543863: (fc) FileLock.release can deadlock with FileChannel.close
6429910: (fc) FileChannel.lock() IOException: Bad file number, not AsynchronousCloseException
6814948: (fc) test/java/nio/channels/AsynchronousFileChannel/Lock.java failed intermittently
6822643: (fc) AsynchronousFileChannel.close does not invalidate FileLocks
Reviewed-by: sherman
alanb [Wed, 15 Apr 2009 14:53:34 +0100] rev 2593
6795561: (bf) CharBuffer.subSequence() uses wrong capacity value for new buffer
Reviewed-by: sherman, iris