asaha [Wed, 24 Mar 2010 14:16:57 -0700] rev 5194
Merge
denis [Sat, 06 Mar 2010 03:37:53 +0300] rev 5193
6932659: JTreg test files were missed in push of 6887703
Reviewed-by: uta
denis [Fri, 26 Feb 2010 03:54:52 -0800] rev 5192
6887703: Unsigned applet can retrieve the dragged information before drop action occur
Reviewed-by: uta
ksrini [Mon, 22 Feb 2010 14:33:19 -0800] rev 5191
6902299: Java JAR "unpack200" must verify input parameters
Summary: Added several checks for addition of values before memory allocation
Reviewed-by: asaha
bae [Fri, 19 Feb 2010 22:30:52 +0300] rev 5190
6899653: Sun Java Runtime CMM readMabCurveData Buffer Overflow Vulnerability
Reviewed-by: prr, hawtin
bae [Wed, 17 Feb 2010 13:32:26 +0300] rev 5189
6909597: Sun Java Runtime Environment JPEGImageReader stepX Integer Overflow Vulnerability
Reviewed-by: igor
bae [Wed, 17 Feb 2010 13:10:26 +0300] rev 5188
6914823: Java AWT Library Invalid Index Vulnerability
Reviewed-by: flar, hawtin
bae [Wed, 17 Feb 2010 12:49:41 +0300] rev 5187
6914866: Sun JRE ImagingLib arbitrary code execution vulnerability
Reviewed-by: prr, hawtin
michaelm [Tue, 12 Jan 2010 12:13:48 +0000] rev 5186
6910590: Application can modify command array, in ProcessBuilder
Summary: clone array returned by List.toArray()
Reviewed-by: chegar, alanb
malenkov [Tue, 22 Dec 2009 17:56:58 +0300] rev 5185
6904691: Java Applet Trusted Methods Chaining Privilege Escalation Vulnerability
Reviewed-by: hawtin, peterz