Merge

Merge

Merge

Merge

Merge

Merge

Merge

Merge

Merge

Merge

6863503: SECURITY: MessageDigest.isEqual introduces timing attack vulnerabilities Reviewed-by: mullan, wetmore

6872358: JRE AWT setBytePixels vulnerable to Heap Overflow Reviewed-by: prr, hawtin

6631533: ICC_Profile allows detecting if some files exist Reviewed-by: prr, hawtin

6632445: DoS from parsing BMPs with UNC ICC links Reviewed-by: prr, hawtin

6822057: X11 and Win32GraphicsDevice don't clone arrays returned from getConfigurations() Reviewed-by: prr, hawtin

6862968: JPEG Image Writer quantization problem Reviewed-by: prr, hawtin

6872357: JRE AWT setDifflCM vulnerable to Stack Overflow Reviewed-by: prr, hawtin

6874643: ImageI/O JPEG is vulnerable to Heap Overflow Reviewed-by: prr, hawtin

Merge

6657026: Numerous static security flaws in Swing (findbugs) Reviewed-by: hawtin, peterz

Merge

Merge

Merge

Merge

6824265: (tz) TimeZone.getTimeZone allows probing local filesystem Reviewed-by: peytoia

6874407: Missing regression test for 6636650 Summary: Prevent classloader from resurrection Reviewed-by: hawtin

6636650: (cl) Resurrected ClassLoaders can still have children Summary: Prevent classloader from resurrection Reviewed-by: hawtin

6664512: Component and [Default]KeyboardFocusManager pass security sensitive objects to loggers Summary: toString is called on security sensitive objects Reviewed-by: art, hawtin

6861062: Disable MD2 support Reviewed-by: mullan, weijun

Merge

6864911: ASN.1/DER input stream parser needs more work Reviewed-by: mullan, xuelei

6888927: Fix jdk jtreg tests to indicate which ones need othervm, allow for use of samevm option Reviewed-by: tbell, jjg, alanb

Merge

6898220: Optimize Formatter.parse (including String.printf) Summary: Create fewer objects when parsing Reviewed-by: sherman Contributed-by: Daniel Martin <dtm@google.com>

6897553: LinkedList performance improvements Summary: LinkedList of size N creates N+1 instead of N+2 objects. Comparing against null is faster than comparing against sentinel node Reviewed-by: dl, jjb, forax

6897993: (se) Close or cancel performance issue when number of pending updates is high (lnx) Summary: Use O(1) Iterator instead of O(N) operations on LinkedList updateList Reviewed-by: alanb Contributed-by: Igor Chernyshev <igorc@google.com>

6897550: BigInteger constructor should use local cached String length Reviewed-by: andrew, chegar

6896829: test/sun/util/logging/PlatformLoggerTest.java needs @compile tag to be compiled by jtreg Reviewed-by: mchung, tbell

Merge

Merge

6894950: test/java/util/zip/Bounds.java fails with OoutOfMemoryError Summary: Fixed the boundary check in Deflater.java Reviewed-by: alanb

6896573: Arrays.sort(long[]) fails with StackOverflowError Reviewed-by: jjb Contributed-by: vladimir.yaroslavskiy@sun.com

6894534: SeedGenerator shouldn't require java.nio.file to be present Reviewed-by: alanb

Merge

6896422: Add @ignore to test/java/util/zip/Bounds.java Summary: ignore test/java/util/zip/Bounds.java until 6896424 is resolved Reviewed-by: sherman

6895875: Missing serialVersionUID in sun.management classes Summary: Added serialVersionUID to fix warning errors Reviewed-by: alanb

6876135: Add PlatformLoggingMXBean to eliminate the dependency on JMX from logging Summary: Added a new PlatformLoggingMXBean interface to extend PlatformManagedObject instead of LoggingMXBean Reviewed-by: alanb

6895456: Eliminate dependency on java.io.ObjectStreamClass during boot Summary: Duplicate ObjectStreamClass.getClassSignature method in ObjectStreamField class Reviewed-by: alanb

6880672: Replace quicksort in java.util.Arrays with dual-pivot implementation Reviewed-by: jjb Contributed-by: vladimir.yaroslavskiy@sun.com, joshua.bloch@google.com, jbentley@avaya.com

6890872: keytool -printcert to recognize signed jar files Reviewed-by: mullan

6893158: AP_REQ check should use key version number Reviewed-by: valeriep, xuelei

6888179: Separate out dependency on CORBA Reviewed-by: dfuchs

6894633: NetHooks should not require provider to be present (sol) Reviewed-by: chegar, jccollet

6891113: More methods for java.util.Objects: deepEquals, hash, toString with default Reviewed-by: alanb, gafter

6894169: Move HttpLogFormatter into a separate package Reviewed-by: alanb

Merge