Thu, 26 Nov 2009 07:17:08 -0800 Merge
asaha [Thu, 26 Nov 2009 07:17:08 -0800] rev 5178
Merge
Wed, 25 Nov 2009 16:02:08 -0800 Merge
mchung [Wed, 25 Nov 2009 16:02:08 -0800] rev 5177
Merge
Wed, 25 Nov 2009 11:19:32 -0800 Merge
mchung [Wed, 25 Nov 2009 11:19:32 -0800] rev 5176
Merge
Wed, 25 Nov 2009 09:09:04 -0800 6893947: Deserialization of RMIConnectionImpl objects should enforce stricter checks [ZDI-CAN-588]
mchung [Wed, 25 Nov 2009 09:09:04 -0800] rev 5175
6893947: Deserialization of RMIConnectionImpl objects should enforce stricter checks [ZDI-CAN-588] Summary: narrow the doPrivileged block to only set context ClassLoader Reviewed-by: hawtin, emcmanus
Wed, 25 Nov 2009 12:51:00 -0800 6904925: Changeset for 6745393 for jdk7 ssr forest was incomplete
sherman [Wed, 25 Nov 2009 12:51:00 -0800] rev 5174
6904925: Changeset for 6745393 for jdk7 ssr forest was incomplete Summary: To add, commit and push back the ZStreamRef.java Reviewed-by: alanb
Wed, 25 Nov 2009 11:29:23 -0800 6745393: Inflater/Deflater clone issue
sherman [Wed, 25 Nov 2009 11:29:23 -0800] rev 5173
6745393: Inflater/Deflater clone issue Summary: To use explicit lobk object. Reviewed-by: alanb
Wed, 25 Nov 2009 10:02:50 +0000 6736390: File TOCTOU deserialization vulnerability
alanb [Wed, 25 Nov 2009 10:02:50 +0000] rev 5172
6736390: File TOCTOU deserialization vulnerability Reviewed-by: hawtin
Mon, 23 Nov 2009 12:40:46 +0000 6639665: ThreadGroup finalizer allows creation of false root ThreadGroups
chegar [Mon, 23 Nov 2009 12:40:46 +0000] rev 5171
6639665: ThreadGroup finalizer allows creation of false root ThreadGroups Reviewed-by: alanb, hawtin
(0) -3000 -1000 -300 -100 -30 -10 -8 +8 +10 +30 +100 +300 +1000 +3000 +10000 +30000 tip