Merge

6657695: AbstractSaslImpl.logger is a static mutable (findbugs) Reviewed-by: alanb

6657619: DnsContext.debug is public static mutable (findbugs) Reviewed-by: alanb

Merge

Merge

Merge

Merge

6858484: If an invalid HMAC XML Signature is validated, all subsequent valid HMAC signatures are invalid Reviewed-by: asaha

Merge

Merge

6830335: Java JAR Pack200 Decompression Integer Overflow Vulnerability Summary: Fixes a potential vulnerability in the unpack200 logic, by adding extra checks, a back-port. Reviewed-by: asaha

6824440: XML Signature HMAC issue Reviewed-by: asaha

6656610: AccessibleResourceBundle.getContents exposes mutable static (findbugs) Reviewed-by: hawtin

Merge

Merge

Merge

6660049: Synth Region.uiToRegionMap/lowerCaseNameMap are mutable statics Reviewed-by: hawtin

Merge

Merge

Merge

6777448: JDK13Services.getProviders creates instances with full privileges [hawtin, alexp] Reviewed-by: hawtin, alexp

6738524: JDK13Services allows read access to system properties from untrusted code Reviewed-by: hawtin

6657625: RmfFileReader/StandardMidiFileWriter.types are public mutable statics (findbugs) Reviewed-by: hawtin

6801071: Remote sites can compromise user privacy and possibly hijack web sessions Reviewed-by: jccollet, hawtin

6823373: [ZDI-CAN-460] Java Web Start JPEG header parsing needs more scruity Reviewed-by: igor

6657133: Mutable statics in imageio plugins (findbugs) Reviewed-by: prr

6656625: ImageReaderSpi.STANDARD_INPUT_TYPE/ImageWriterSpi.STANDARD_OUTPUT_TYPE are mutable static (findbugs) Reviewed-by: prr

6736293: OpenType checks can be bypassed through finalizer resurrection Reviewed-by: hawtin

6656586: Cursor.predefined is protected static mutable (findbugs) Reviewed-by: hawtin, igor

6818787: It is possible to reposition the security icon too far from the border of the window on X11 Summary: The constraints for the position of the icon are moved to the shared code Reviewed-by: art, dcherepanov

6805231: Security Warning Icon is missing in Windows 2000 Prof from Jdk build 6u12 Summary: The icon becomes layered only when the fading-out effect is being performed. Reviewed-by: art, dcherepanov

6801497: Proxy is assumed to be immutable but is non-final Summary: Cloned the proxy instance when necessary Reviewed-by: chegar

6837293: Reapply fix for 6588003 to JDK7 Reviewed-by: alexp

Merge

6777487: Encoder allows reading private variables with certain names Reviewed-by: peterz

6660539: Introspector shares cache of mutable BeanInfo between AppContexts. Reviewed-by: peterz

6826801: JarFileFactory should not use HashMap<URL> Summary: Replace URL with a String representation. Reviewed-by: michaelm, jccollet

6826780: URLClassPath should use HashMap<String, XXX> instead of HashMap<URL, XXX> Summary: Replace URL with a String representation. Reviewed-by: michaelm, jccollet

Merge

6838598: Legal notice repair: jdk/src/share/classes/sun/dyn/FilterGeneric.java Reviewed-by: xdono

6867657: Many JSN tests do not run under cygwin Reviewed-by: ohair

6868533: 3/4 JDI: remove '-source 1.5' and '-target 1.5' options from com.sun.jdi tests Summary: We are long past needing to make sure these tests can build on Tiger/JDK1.5.0. Reviewed-by: tbell

6856590: (process) Use RESTARTABLE in UNIXProcess_md.c Summary: Wrap all system calls with RESTARTABLE Reviewed-by: michaelm

6868160: (process) Use vfork, not fork, on Linux to avoid swap exhaustion Summary: Boldly go where no jdk has dared go before Reviewed-by: michaelm

4116222: Errors in Arabic code-conversion tables, part II Summary: updated the IBM420 datatable Reviewed-by: alanb

Merge

6867687: keytool's standard.sh test timeout sometimes Reviewed-by: xuelei

Merge

Merge

6867244: Tests missing @run tag Reviewed-by: sherman

6867101: Path.checkAccess fails with sharing violation on special files such as pagefile.sys Reviewed-by: sherman

6867231: Regression: jdk/test/sun/security/krb5/ConfPlusProp.java error against jdk7/pit/b68 Reviewed-by: xuelei

6866719: Rename execvpe to avoid symbol clash with glibc 2.10 Reviewed-by: darcy

6804124: Replace "modified mergesort" in java.util.Arrays.sort with timsort Summary: Easy port of timsort from android Reviewed-by: martin

6866554: Misc. javadoc warnings Reviewed-by: alanb

Merge

Merge

5063507: (fmt) missing exception for "%#s" format specifier Summary: throw appropriate exception when necessary Reviewed-by: alanb

6805775: LinkedBlockingQueue Nodes should unlink themselves before becoming garbage 6815766: LinkedBlockingQueue's iterator can return null if drainTo(c) executes concurrently Summary: Faster, more correct. Use self-linking trick to avoid gc retention Reviewed-by: martin, dholmes

6785442: ConcurrentLinkedQueue.remove() and poll() can both remove the same element 6493942: ConcurrentLinkedQueue.remove sometimes very slow Summary: new algorithm for handling concurrent linked lists Reviewed-by: martin