Merge

Merge

6941130: Semaphore should throw if number of permits overflows or underflows Summary: Check if release could make number of permits negative Reviewed-by: dl, dholmes

6717164: FilterInputStream.skip incorrectly inherits wording specifying how the InputStream.skip works Summary: restoring the javadoc Reviewed-by: alanb

6921111: NullPointerException in PlainDatagramSocketImpl.socketSetOption Reviewed-by: alanb

6648001: Cancelling HTTP authentication causes subsequent deadlocks Reviewed-by: michaelm

Merge

Merge

Merge

Merge

Merge

6932659: JTreg test files were missed in push of 6887703 Reviewed-by: uta

6887703: Unsigned applet can retrieve the dragged information before drop action occur Reviewed-by: uta

6902299: Java JAR "unpack200" must verify input parameters Summary: Added several checks for addition of values before memory allocation Reviewed-by: asaha

6899653: Sun Java Runtime CMM readMabCurveData Buffer Overflow Vulnerability Reviewed-by: prr, hawtin

6909597: Sun Java Runtime Environment JPEGImageReader stepX Integer Overflow Vulnerability Reviewed-by: igor

6914823: Java AWT Library Invalid Index Vulnerability Reviewed-by: flar, hawtin

6914866: Sun JRE ImagingLib arbitrary code execution vulnerability Reviewed-by: prr, hawtin

6910590: Application can modify command array, in ProcessBuilder Summary: clone array returned by List.toArray() Reviewed-by: chegar, alanb

6904691: Java Applet Trusted Methods Chaining Privilege Escalation Vulnerability Reviewed-by: hawtin, peterz

6904162: Add new VeriSign root CA certificates to JRE and remove some old/unused ones Reviewed-by: asaha

6633872: Policy/PolicyFile leak dynamic ProtectionDomains. Reviewed-by: hawtin

6898739: TLS renegotiation issue Summary: the interim fix disables TLS/SSL renegotiation Reviewed-by: mullan, chegar, wetmore

Merge

6893954: Subclasses of InetAddress may incorrectly interpret network addresses Summary: runtime type checks and deserialization check Reviewed-by: chegar, alanb, jccollet

Merge

Merge

Merge