Merge

6932659: JTreg test files were missed in push of 6887703 Reviewed-by: uta

6887703: Unsigned applet can retrieve the dragged information before drop action occur Reviewed-by: uta

6902299: Java JAR "unpack200" must verify input parameters Summary: Added several checks for addition of values before memory allocation Reviewed-by: asaha

6899653: Sun Java Runtime CMM readMabCurveData Buffer Overflow Vulnerability Reviewed-by: prr, hawtin

6909597: Sun Java Runtime Environment JPEGImageReader stepX Integer Overflow Vulnerability Reviewed-by: igor

6914823: Java AWT Library Invalid Index Vulnerability Reviewed-by: flar, hawtin

6914866: Sun JRE ImagingLib arbitrary code execution vulnerability Reviewed-by: prr, hawtin

6910590: Application can modify command array, in ProcessBuilder Summary: clone array returned by List.toArray() Reviewed-by: chegar, alanb

6904691: Java Applet Trusted Methods Chaining Privilege Escalation Vulnerability Reviewed-by: hawtin, peterz

6904162: Add new VeriSign root CA certificates to JRE and remove some old/unused ones Reviewed-by: asaha

6633872: Policy/PolicyFile leak dynamic ProtectionDomains. Reviewed-by: hawtin

6898739: TLS renegotiation issue Summary: the interim fix disables TLS/SSL renegotiation Reviewed-by: mullan, chegar, wetmore

Merge

6893954: Subclasses of InetAddress may incorrectly interpret network addresses Summary: runtime type checks and deserialization check Reviewed-by: chegar, alanb, jccollet

Merge

Merge

Merge

Merge

6893947: Deserialization of RMIConnectionImpl objects should enforce stricter checks [ZDI-CAN-588] Summary: narrow the doPrivileged block to only set context ClassLoader Reviewed-by: hawtin, emcmanus

6904925: Changeset for 6745393 for jdk7 ssr forest was incomplete Summary: To add, commit and push back the ZStreamRef.java Reviewed-by: alanb

6745393: Inflater/Deflater clone issue Summary: To use explicit lobk object. Reviewed-by: alanb

6736390: File TOCTOU deserialization vulnerability Reviewed-by: hawtin

6639665: ThreadGroup finalizer allows creation of false root ThreadGroups Reviewed-by: alanb, hawtin

Merge

6888149: AtomicReferenceArray causes SIGSEGV -> SEGV_MAPERR error Summary: Avoid integer overflow by using long arithmetic Reviewed-by: martin, dholmes

4947220: (process)Runtime.exec() cannot invoke applications with unicode parameters(win) Summary: to use CreateProcessW on Windowns platform Reviewed-by: martin

6902790: Converting/displaying HKSCs characters issue on Vista and Windows7 6911753: NSN wants to add Big5 HKSCS-2004 support Summary: support HKSCS2008 in Big5_HKSCS and MS950_HKSCS Reviewed-by: okutsu

6693917: regression tests need to update for supporting ECC on solaris 11 Reviewed-by: weijun

6937703: java/net regression test issues with samevm Reviewed-by: alanb