Commit graph

76 commits

Author SHA1 Message Date
Jung-uk Kim
b714a769f1 - Fix multiple security vulnerabilities. [1]
- Drop version suffixes from LIB_DEPENDS.
- Use the new options framework.

Obtained from:	IcedTea Project [1]
http://icedtea.classpath.org/hg/icedtea6/rev/9aff0fc60733
2012-06-13 19:17:00 +00:00
Greg Lewis
8c6175a3b5 . Specifically reference zip/unzip in ${LOCALBASE}/bin, since that is where
the JDK build looks for them, but FreeBSD 9.x has them available in /usr/bin.
  Adjusting the JDK check is a harder fix, this will get things building
  again on 9.x quickly.

PR:		166996
2012-05-27 03:51:15 +00:00
Greg Lewis
cd7a790139 . Bootstrap with ant 1.8.3. 2012-05-12 04:44:47 +00:00
Jung-uk Kim
99fcd36c3d Update jtreg to 4.1 b04. 2012-05-09 19:51:34 +00:00
Greg Lewis
923815253b . Update to build 25. 2012-05-09 03:53:37 +00:00
Greg Lewis
28609d64ef . Fix the look up of time zone data when TZUPDATE is turned on and as a
result turn it on by default again.  This change bears a little more
  explanation.

  In UnixFileSystem.java there is a cache of canonical paths and in
  particular one for paths inside java.home.  The problem with looking
  up time zone data is that if another path within java.home has been
  looked up then the symlink for the time zone data is not resolved
  (since the cache assumes there are no symlinks in java.home) and we fail
  to be able to open the ZoneInfoMapping file.

  One of the other features in UnixFileSystem is that the cache is not
  consulted and full resolution occurs for paths containing "." or "..".
  I've chosen to (ab)use this to force resolution of the time zone data
  directory in ZoneInfoFile.java rather than doing something like IcedTea
  did which was to introduce a tz.properties file where they would stash
  the time zone info directory rather than symlinking it in.  For full
  reference that patch is here:

  http://icedtea.classpath.org/hg/icedtea6/file/tip/patches/use-system-tzdata.patch

  There are two main reasons I chose a bit of a hack rather than something
  like this.

  1. I want to apply the patch to non-GPL'ed code (e.g. the jdk16 port).
  2. Using updated time zone data is only an option in the port and using
     something like tz.properties when the option is off is clunky.

  Thanks to avg@ for sleuth work on finding the bug write up and the
  IcedTea fix.
2012-05-02 06:13:16 +00:00
Greg Lewis
0426f64b8e . Turn the TZUPDATE option off by default until I can figure out how that
breaks the Eclipse build.
2012-04-19 18:53:53 +00:00
Greg Lewis
e7ae9dc0f4 . Use the new java-zoneinfo port to provide updated time zone info. 2012-04-13 04:01:24 +00:00
Jung-uk Kim
04111c28a5 Fix multiple security vulnerabilities.
CVE-2011-3563:	Fix issues in java sound
CVE-2011-3571:	Fix in AtomicReferenceArray
CVE-2011-5035:	Add property to limit number of request headers to the HTTP Server
CVE-2012-0501:	Better input parameter checking in zip file processing
CVE-2012-0502:	Issues with some KeyboardFocusManager method
CVE-2012-0503:	Issues with TimeZone class
CVE-2012-0505:	Enhance exception throwing mechanism in ObjectStreamClass
CVE-2012-0506:	Issues with some method in corba

Obtained from:	IcedTea Project
2012-02-18 01:06:58 +00:00
Jason Helfman
7d9c963de9 - Add variable JDK_UPDATE_VERSION for java to 30 (current Oracle release of JDK 6)
This is largely done for java detection for browser compatibility
Please update UPDATE_VERSION for new releases

PR:	ports/163916
Submitted by:	Denny Lin <dennylin93 at hs.ntnu.edu.tw>
Approved by:	glewis, (rene, crees) (mentors,implicit)
2012-01-13 17:36:23 +00:00
Jung-uk Kim
20a20900ab - Replace hsearch_r from GNU libc with Berkeley DB from our libc.
http://hg.openjdk.java.net/bsd-port/bsd-port/hotspot/rev/f19d23da7c3e
http://hg.openjdk.java.net/bsd-port/bsd-port/hotspot/rev/cf5c383e1d33
http://hg.openjdk.java.net/bsd-port/bsd-port/hotspot/rev/f1a18ada5853

- Fix POLICY option.  It was silently enabled by default with b19 update.
2012-01-13 01:42:32 +00:00
Jason Helfman
ad56920272 Installs built jars that were previously not installed.
* javazic.jar to generate Java timezone information files
* compilefontconfig.jar to generate Java font configuration files

PR: ports/161945
Submitted by:	Jilles Tjoelker <jilles at stack.nl>
Reviewed by: glewis
Approved by: glewis, crees (mentor)
2011-12-30 06:42:14 +00:00
Jung-uk Kim
0ee3fb1c26 - Update to b24. [1]
- Add x11/libXext to build dependencies. [2]
- Make portlint happy. [3]

PR:		ports/162646 [1]
		ports/156319 [2]
		ports/161985 [3]
Feature safe:	yes
2011-11-30 21:18:30 +00:00
Jung-uk Kim
84b67b4564 - Add an additional patch to support i386 CPUs without CMOV instruction
under ICEDTEA option. [1]
- Chase default Korean font directory change.

PR:		ports/158304 [1]
Obtained from:	IcedTea Project [1]
2011-08-09 22:56:40 +00:00
Jung-uk Kim
176e27746b - Update to build 23.
- Import more complete JPEG class support and turn on ICEDTEA option by
default. [1]
- Remove obsolete WEB option.  Note the functionality is now moved to a new
port java/icedtea-web, which depends on ICEDTEA option of this port.

Obtained from:	IcedTea project [1]
2011-07-11 20:58:58 +00:00
Jung-uk Kim
50d297b3ab - Update IcedTea-Web to 1.0.3.
- Use fake JDK update version as IcedTea-Web does.
2011-06-14 20:51:18 +00:00
Max Brazhnikov
630ca2285f Bump PORTREVISION after open-mofit update 2011-05-02 12:44:53 +00:00
Jung-uk Kim
e93889f707 Re-add accidentally removed jtreg to distinfo. 2011-04-04 20:58:47 +00:00
Jung-uk Kim
93833448cb Update IcedTea-Web to 1.0.2. 2011-04-04 20:56:01 +00:00
Jung-uk Kim
6fbc8496ce Force libxul include directory and allow building IcedTea-Web plugin with
an ancient xulrunner (i.e., 1.9.2.9 and earlier).  This commit should fix:

PR:	ports/155381
2011-03-28 21:08:52 +00:00
Jung-uk Kim
0ba14edc9b Rework the previous fix to sync. with upstream:
http://hg.openjdk.java.net/jdk7/jdk7/jdk/diff/441f88d39988/src/solaris/native/java/net/net_util_md.c

Note it has no functional change for FreeBSD because sizeof(socklen_t) is
luckily sizeof(int).  Actually, this commit is just to note that the regression
was acidentally pulled in from upstream because of my ignorance.  Specifically,
the following commit was the culprit:

http://hg.openjdk.java.net/jdk7/jdk7/jdk/diff/b7fce4bac617/src/solaris/native/java/net/net_util_md.c

FYI, it also triggered the following upstream PR:

http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6730740

Obtained from:	OpenJDK project
Pointyhat:	jkim
2011-03-17 20:40:49 +00:00
Alex Dupre
a8e0201b99 Fix a severe regression introduced with the "disable IPV6_V6ONLY option".
On amd64 every call to getsocktopt returns a "Bad address" SocketException.
2011-03-17 09:17:26 +00:00
Jung-uk Kim
aa48142f09 Add an option to apply extra patches originated from IcedTea project (turned
off by default) and sort options.  Add a basic wrapper to resurrect
com.sun.image.codec.jpeg using javax.imageio under the new option.

Obtained from:	icedtea.classpath.org
PR:		java/155288
2011-03-07 22:41:02 +00:00
Jung-uk Kim
6fac48313f Backport a long standing bug fix from OpenJDK7, i.e., disable IPV6_V6ONLY
option when IPv6 is enabled and failed to create a socket.

http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6342561
http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6882910

For in-depth analysis of this problem from FreeBSD perspective, please see:

http://diario.beerensalat.info/2008/10/12/java_and_ipv6_on_bsd.html
2011-03-03 23:22:05 +00:00
Jung-uk Kim
3b3d5f992b Fix a test case for default charset. 2011-03-02 01:03:38 +00:00
Jung-uk Kim
7027d395cb Update to build 22. 2011-03-01 19:21:59 +00:00
Alex Dupre
a59661d154 Update apache-ant to 1.8.2 bugfix release.
PR:		ports/154187
Submitted by:	ale
Approved by:	portmgr (pav)
2011-02-25 12:27:48 +00:00
Jung-uk Kim
b6945850a4 Update IcedTea-Web to 1.0.1 and fix multiple security vulnerabilities.
CVE-2010-4469:	Hotspot backward jsr heap corruption
CVE-2010-4465:	Swing timer-based security manager bypass
CVE-2010-4472:	Untrusted code allowed to replace DSIG/C14N implementation
CVE-2010-4448:	DNS cache poisoning by untrusted applets
CVE-2010-4450:	Launcher incorrect processing of empty library path entries
CVE-2010-4471:	Java2D font-related system property leak
CVE-2010-4470:	JAXP untrusted component state manipulation
CVE-2011-0706:	Multiple signers privilege escalation

Obtained from:	icedtea.classpath.org
Obtained from:	jaxp.java.net
2011-02-21 19:03:18 +00:00
Jung-uk Kim
27acea6b21 Add experimental support for sound via ALSA pcm-oss plugin. This feature
is disabled by default because MIDI plugin for OSS does not exist, i.e.,
(hardware) MIDI sequencer is not supported.  However, softsynth (Gervill)
works fine as it uses sampled sound.
2011-02-11 22:02:37 +00:00
Jung-uk Kim
e8d545eb90 Fix a typo in the previous commit. We have more than one line now. 2011-02-11 00:44:44 +00:00
Jung-uk Kim
6ac447dee9 - Implement some missing FreeBSD-specific methods, i.e., swap info, committed
virtual memory, free physical memory, and number of open file descriptors.
For example, jconsole shows more realistic numbers instead of hardcoded bogus
numbers in VM Summary tab now.  Correct a jtreg test case for the swap info.
- Mention procfs(5) is used for some features in this implementation.
2011-02-11 00:41:48 +00:00
Jung-uk Kim
680336afad - Update to build 21.
- Improve Serviceability Agent.  For example, the following should work now:

	jdb -connect sun.jvm.hotspot.jdi.SAPIDAttachingConnector:pid=<PID>
	jmap <PID>
	jsadebugd <PID>
	jstack -F <PID>
	jstack -m <PID>

- Replace IcedTea6 1.9.x with IcedTea-Web 1.0 for web support.  Note it is
still tightly coupled with openjdk6 for now because we do not have proper
infrastructure to decouple them yet.
- Add itweb-settings (a Java Control Panel replacement for IcedTea-Web).
- Add desktop integration files for web support (but not installed in default
system-wide locations).
2011-02-09 20:00:38 +00:00
Greg Lewis
4b97549646 . Fix infinite loop in parsing certain doubles. See CVE-2010-4476. 2011-02-09 17:13:40 +00:00
Jung-uk Kim
472d2585b8 Update IcedTea6 web support to 1.9.4 (CVE-2010-4351).
Feature safe:	yes
2011-01-18 19:28:11 +00:00
Jung-uk Kim
32105f4cb5 Fix a typo in the BSD patchset.
PR:		ports/153421
Submitted by:	Alexander Vasyanin (avasyanin at gmail dot com)
2011-01-04 22:54:58 +00:00
Sunpoet Po-Chuan Hsieh
b78b29aa13 - Use apache-ant 1.8.1 while devel/apache-ant was updated
- Pet portlint: use tab instead of space

PR:		ports/152676
Submitted by:	sunpoet (myself)
Approved by:	glewis (with java hat)
2010-12-14 07:31:03 +00:00
Greg Lewis
c704da9e15 . Make rlen a size_t instead of an int. Fixes a crash on 64 bit architectures.
Pointed out by:	Nikolay Denev <ndenev@gmail.com>
2010-12-13 08:59:52 +00:00
Jung-uk Kim
3f8405abd2 - Update IcedTea6 web support to 1.9.2.
- Add a patch to fix browser plugin crash[1].

Submitted by:	Barbara (barbara dot xxx1975 at libero dot it)[1]
2010-11-24 23:35:32 +00:00
Greg Lewis
50ae212d59 . Set LIBOWN and LIBGRP to the current user's uid and gid to allow building
of the plugin by non-root users.
2010-10-31 20:47:07 +00:00
Jung-uk Kim
10c99f335e Update Web Start and Java plugin to IcedTea6 1.9.1. 2010-10-13 19:51:32 +00:00
Jung-uk Kim
773071c6f0 Improve pthread cancellation and update comments. 2010-09-24 03:54:19 +00:00
Jung-uk Kim
3a28754e3d - Rewrite IcedTea6 plugin patch to improve stability of initialization/shutdown
process.  Update comments in the patch accordingly.
- Tidy up makefile for the plugin.  Remove a hack for include path of libxul,
which is correctly patched from libxul 1.9.2.9_1.  Remove mozilla-plugin.pc from
linker options for pkg-config.  Generally speaking, NPAPI plugins do not need
to link with Gecko engine directly.
- Move run-time dependencies for the plugin to build-time dependencies as it is
completely optional any way.
2010-09-23 21:54:01 +00:00
Jung-uk Kim
d7e6be6929 Introducing support for Web Start and Mozilla plugin from IcedTea6 1.9.
Note the feature is turned off by default because it adds experimental and
unofficial patches from icedtea.classpath.org.  You need to select WEB option
from config menu or define WITH_WEB variable to enable the feature.  Also,
note that a symlink for web browser is not created automatically with same
reasoning.  Thus, you need to create a symlink for your browser, e.g.,

ln -s ${LOCALBASE}/openjdk6/jre/lib/IcedTeadPlugin.so ~/.mozilla/plugins

Remove some stale comments in package message while I am here.
2010-09-16 00:32:48 +00:00
Greg Lewis
fd3a4779e9 . Respect MAKE_JOB_NUMBERS and use that to set up the number of HotSpot
make jobs.  If not, fall back to the number of CPUs, as per the current
  behaviour.

  Only the HotSpot part of the build is safe to parallelise, so leave the
  port marked MAKE_JOBS_UNSAFE.
2010-09-09 06:18:08 +00:00
Greg Lewis
9fd4613f57 . Port over davidxu@'s NIO selector that uses kqueue(2) from jdk16.
. Mark as MAKE_JOBS_UNSAFE.
2010-08-15 05:23:07 +00:00
Greg Lewis
c000c852c3 . Back out the previous revision. The port is not MAKE_JOBS_SAFE. 2010-08-07 02:13:40 +00:00
Greg Lewis
83df85589b . Mark MAKE_JOBS_SAFE.
. Use MAKE_JOBS_NUMBER as HOTSPOT_BUILD_JOBS.

PR:		148753
Submitted by:	David Naylor <naylor.b.david@gmail.com>
2010-08-01 22:22:44 +00:00
Greg Lewis
0c3ebf7aaa . Update to build 20.
PR:		148202
2010-07-10 16:44:12 +00:00
Jung-uk Kim
324fe0496e Stop downloading more sources (JAXP, JAX-WS, and JAF) from build phase and
add IcedTea project as an additional master site.  This change should fix
most build failures related to network problems, e.g., bootstrapping with
an IPv6-enabled JDK, unreliable network connections, etc.
2010-05-21 05:11:57 +00:00
Alex Dupre
ece2cbf4a8 Do not add /usr/local/lib three times to DEFAULT_LIBPATH.
Update cacerts file from Sun's JRE 6u20.
2010-05-18 13:29:10 +00:00