Commit graph

41 commits

Author SHA1 Message Date
Jung-uk Kim
aba89129e7 - Update security patch to fix CVE-2012-0547 and CVE-2012-1682.
- Catch up with icedtea.classpath.org server changes for distfiles.
2012-09-07 19:27:31 +00:00
Jung-uk Kim
b714a769f1 - Fix multiple security vulnerabilities. [1]
- Drop version suffixes from LIB_DEPENDS.
- Use the new options framework.

Obtained from:	IcedTea Project [1]
http://icedtea.classpath.org/hg/icedtea6/rev/9aff0fc60733
2012-06-13 19:17:00 +00:00
Greg Lewis
923815253b . Update to build 25. 2012-05-09 03:53:37 +00:00
Greg Lewis
28609d64ef . Fix the look up of time zone data when TZUPDATE is turned on and as a
result turn it on by default again.  This change bears a little more
  explanation.

  In UnixFileSystem.java there is a cache of canonical paths and in
  particular one for paths inside java.home.  The problem with looking
  up time zone data is that if another path within java.home has been
  looked up then the symlink for the time zone data is not resolved
  (since the cache assumes there are no symlinks in java.home) and we fail
  to be able to open the ZoneInfoMapping file.

  One of the other features in UnixFileSystem is that the cache is not
  consulted and full resolution occurs for paths containing "." or "..".
  I've chosen to (ab)use this to force resolution of the time zone data
  directory in ZoneInfoFile.java rather than doing something like IcedTea
  did which was to introduce a tz.properties file where they would stash
  the time zone info directory rather than symlinking it in.  For full
  reference that patch is here:

  http://icedtea.classpath.org/hg/icedtea6/file/tip/patches/use-system-tzdata.patch

  There are two main reasons I chose a bit of a hack rather than something
  like this.

  1. I want to apply the patch to non-GPL'ed code (e.g. the jdk16 port).
  2. Using updated time zone data is only an option in the port and using
     something like tz.properties when the option is off is clunky.

  Thanks to avg@ for sleuth work on finding the bug write up and the
  IcedTea fix.
2012-05-02 06:13:16 +00:00
Jung-uk Kim
04111c28a5 Fix multiple security vulnerabilities.
CVE-2011-3563:	Fix issues in java sound
CVE-2011-3571:	Fix in AtomicReferenceArray
CVE-2011-5035:	Add property to limit number of request headers to the HTTP Server
CVE-2012-0501:	Better input parameter checking in zip file processing
CVE-2012-0502:	Issues with some KeyboardFocusManager method
CVE-2012-0503:	Issues with TimeZone class
CVE-2012-0505:	Enhance exception throwing mechanism in ObjectStreamClass
CVE-2012-0506:	Issues with some method in corba

Obtained from:	IcedTea Project
2012-02-18 01:06:58 +00:00
Jung-uk Kim
20a20900ab - Replace hsearch_r from GNU libc with Berkeley DB from our libc.
http://hg.openjdk.java.net/bsd-port/bsd-port/hotspot/rev/f19d23da7c3e
http://hg.openjdk.java.net/bsd-port/bsd-port/hotspot/rev/cf5c383e1d33
http://hg.openjdk.java.net/bsd-port/bsd-port/hotspot/rev/f1a18ada5853

- Fix POLICY option.  It was silently enabled by default with b19 update.
2012-01-13 01:42:32 +00:00
Jung-uk Kim
0ee3fb1c26 - Update to b24. [1]
- Add x11/libXext to build dependencies. [2]
- Make portlint happy. [3]

PR:		ports/162646 [1]
		ports/156319 [2]
		ports/161985 [3]
Feature safe:	yes
2011-11-30 21:18:30 +00:00
Jung-uk Kim
84b67b4564 - Add an additional patch to support i386 CPUs without CMOV instruction
under ICEDTEA option. [1]
- Chase default Korean font directory change.

PR:		ports/158304 [1]
Obtained from:	IcedTea Project [1]
2011-08-09 22:56:40 +00:00
Jung-uk Kim
176e27746b - Update to build 23.
- Import more complete JPEG class support and turn on ICEDTEA option by
default. [1]
- Remove obsolete WEB option.  Note the functionality is now moved to a new
port java/icedtea-web, which depends on ICEDTEA option of this port.

Obtained from:	IcedTea project [1]
2011-07-11 20:58:58 +00:00
Jung-uk Kim
6fbc8496ce Force libxul include directory and allow building IcedTea-Web plugin with
an ancient xulrunner (i.e., 1.9.2.9 and earlier).  This commit should fix:

PR:	ports/155381
2011-03-28 21:08:52 +00:00
Jung-uk Kim
0ba14edc9b Rework the previous fix to sync. with upstream:
http://hg.openjdk.java.net/jdk7/jdk7/jdk/diff/441f88d39988/src/solaris/native/java/net/net_util_md.c

Note it has no functional change for FreeBSD because sizeof(socklen_t) is
luckily sizeof(int).  Actually, this commit is just to note that the regression
was acidentally pulled in from upstream because of my ignorance.  Specifically,
the following commit was the culprit:

http://hg.openjdk.java.net/jdk7/jdk7/jdk/diff/b7fce4bac617/src/solaris/native/java/net/net_util_md.c

FYI, it also triggered the following upstream PR:

http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6730740

Obtained from:	OpenJDK project
Pointyhat:	jkim
2011-03-17 20:40:49 +00:00
Alex Dupre
a8e0201b99 Fix a severe regression introduced with the "disable IPV6_V6ONLY option".
On amd64 every call to getsocktopt returns a "Bad address" SocketException.
2011-03-17 09:17:26 +00:00
Jung-uk Kim
aa48142f09 Add an option to apply extra patches originated from IcedTea project (turned
off by default) and sort options.  Add a basic wrapper to resurrect
com.sun.image.codec.jpeg using javax.imageio under the new option.

Obtained from:	icedtea.classpath.org
PR:		java/155288
2011-03-07 22:41:02 +00:00
Jung-uk Kim
6fac48313f Backport a long standing bug fix from OpenJDK7, i.e., disable IPV6_V6ONLY
option when IPv6 is enabled and failed to create a socket.

http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6342561
http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6882910

For in-depth analysis of this problem from FreeBSD perspective, please see:

http://diario.beerensalat.info/2008/10/12/java_and_ipv6_on_bsd.html
2011-03-03 23:22:05 +00:00
Jung-uk Kim
3b3d5f992b Fix a test case for default charset. 2011-03-02 01:03:38 +00:00
Jung-uk Kim
7027d395cb Update to build 22. 2011-03-01 19:21:59 +00:00
Jung-uk Kim
b6945850a4 Update IcedTea-Web to 1.0.1 and fix multiple security vulnerabilities.
CVE-2010-4469:	Hotspot backward jsr heap corruption
CVE-2010-4465:	Swing timer-based security manager bypass
CVE-2010-4472:	Untrusted code allowed to replace DSIG/C14N implementation
CVE-2010-4448:	DNS cache poisoning by untrusted applets
CVE-2010-4450:	Launcher incorrect processing of empty library path entries
CVE-2010-4471:	Java2D font-related system property leak
CVE-2010-4470:	JAXP untrusted component state manipulation
CVE-2011-0706:	Multiple signers privilege escalation

Obtained from:	icedtea.classpath.org
Obtained from:	jaxp.java.net
2011-02-21 19:03:18 +00:00
Jung-uk Kim
27acea6b21 Add experimental support for sound via ALSA pcm-oss plugin. This feature
is disabled by default because MIDI plugin for OSS does not exist, i.e.,
(hardware) MIDI sequencer is not supported.  However, softsynth (Gervill)
works fine as it uses sampled sound.
2011-02-11 22:02:37 +00:00
Jung-uk Kim
6ac447dee9 - Implement some missing FreeBSD-specific methods, i.e., swap info, committed
virtual memory, free physical memory, and number of open file descriptors.
For example, jconsole shows more realistic numbers instead of hardcoded bogus
numbers in VM Summary tab now.  Correct a jtreg test case for the swap info.
- Mention procfs(5) is used for some features in this implementation.
2011-02-11 00:41:48 +00:00
Jung-uk Kim
680336afad - Update to build 21.
- Improve Serviceability Agent.  For example, the following should work now:

	jdb -connect sun.jvm.hotspot.jdi.SAPIDAttachingConnector:pid=<PID>
	jmap <PID>
	jsadebugd <PID>
	jstack -F <PID>
	jstack -m <PID>

- Replace IcedTea6 1.9.x with IcedTea-Web 1.0 for web support.  Note it is
still tightly coupled with openjdk6 for now because we do not have proper
infrastructure to decouple them yet.
- Add itweb-settings (a Java Control Panel replacement for IcedTea-Web).
- Add desktop integration files for web support (but not installed in default
system-wide locations).
2011-02-09 20:00:38 +00:00
Greg Lewis
4b97549646 . Fix infinite loop in parsing certain doubles. See CVE-2010-4476. 2011-02-09 17:13:40 +00:00
Jung-uk Kim
472d2585b8 Update IcedTea6 web support to 1.9.4 (CVE-2010-4351).
Feature safe:	yes
2011-01-18 19:28:11 +00:00
Jung-uk Kim
32105f4cb5 Fix a typo in the BSD patchset.
PR:		ports/153421
Submitted by:	Alexander Vasyanin (avasyanin at gmail dot com)
2011-01-04 22:54:58 +00:00
Greg Lewis
c704da9e15 . Make rlen a size_t instead of an int. Fixes a crash on 64 bit architectures.
Pointed out by:	Nikolay Denev <ndenev@gmail.com>
2010-12-13 08:59:52 +00:00
Jung-uk Kim
3f8405abd2 - Update IcedTea6 web support to 1.9.2.
- Add a patch to fix browser plugin crash[1].

Submitted by:	Barbara (barbara dot xxx1975 at libero dot it)[1]
2010-11-24 23:35:32 +00:00
Jung-uk Kim
10c99f335e Update Web Start and Java plugin to IcedTea6 1.9.1. 2010-10-13 19:51:32 +00:00
Jung-uk Kim
773071c6f0 Improve pthread cancellation and update comments. 2010-09-24 03:54:19 +00:00
Jung-uk Kim
3a28754e3d - Rewrite IcedTea6 plugin patch to improve stability of initialization/shutdown
process.  Update comments in the patch accordingly.
- Tidy up makefile for the plugin.  Remove a hack for include path of libxul,
which is correctly patched from libxul 1.9.2.9_1.  Remove mozilla-plugin.pc from
linker options for pkg-config.  Generally speaking, NPAPI plugins do not need
to link with Gecko engine directly.
- Move run-time dependencies for the plugin to build-time dependencies as it is
completely optional any way.
2010-09-23 21:54:01 +00:00
Jung-uk Kim
d7e6be6929 Introducing support for Web Start and Mozilla plugin from IcedTea6 1.9.
Note the feature is turned off by default because it adds experimental and
unofficial patches from icedtea.classpath.org.  You need to select WEB option
from config menu or define WITH_WEB variable to enable the feature.  Also,
note that a symlink for web browser is not created automatically with same
reasoning.  Thus, you need to create a symlink for your browser, e.g.,

ln -s ${LOCALBASE}/openjdk6/jre/lib/IcedTeadPlugin.so ~/.mozilla/plugins

Remove some stale comments in package message while I am here.
2010-09-16 00:32:48 +00:00
Greg Lewis
9fd4613f57 . Port over davidxu@'s NIO selector that uses kqueue(2) from jdk16.
. Mark as MAKE_JOBS_UNSAFE.
2010-08-15 05:23:07 +00:00
Greg Lewis
0c3ebf7aaa . Update to build 20.
PR:		148202
2010-07-10 16:44:12 +00:00
Alex Dupre
ece2cbf4a8 Do not add /usr/local/lib three times to DEFAULT_LIBPATH.
Update cacerts file from Sun's JRE 6u20.
2010-05-18 13:29:10 +00:00
Jung-uk Kim
9ad145c15f - Update to b19 promoted build. [1]
- Merge two additional patches from the OpenJDK BSD porting project:

http://hg.openjdk.java.net/bsd-port/bsd-port/jdk/rev/f974aefae43d
http://hg.openjdk.java.net/bsd-port/bsd-port/jdk/rev/62dc2d00133f

- Add a message to note fdescfs(5) is necessary for this implementation.

PR:		ports/145806 [1]
Discussed with:	glewis, lev
2010-05-17 23:19:46 +00:00
Dima Panov
6d41454d17 - java/openjdk6: allow to build againist modern xorg (7.5)
PR:		145757
Submitted by:	myself
Approved by:	mainatner timeout ( over 3 weeks)
2010-05-02 23:27:16 +00:00
Alex Dupre
fd0870acd9 - Fix a bug in 'jar' utility
- Add support for running regression tests
- Respect LOCALBASE
- Bump PORTREVISION

These are the test results on:

FreeBSD 6 i386:  passed: 3113; failed: 29; error: 2
FreeBSD 8 amd64: passed: 3107; failed: 35; error: 2

Note: a couple of tests passed only after a few runs.

Submitted by:	ale
Approved by:	maintainer
2010-01-21 08:51:59 +00:00
Alex Dupre
6db4bb3f2f Improve korean [1] and chinese font rendering.
Submitted by:	jkim [1]
Approved by:	maintainer
2010-01-21 08:25:09 +00:00
Alex Dupre
ab853e1dfc - Update to b17 promoted build [1]
- Fix font rendering and update cacerts file
  - Add support for fastdebug jdk
- Cleanup/Enhance the port [2]

Submitted by:	maintainer [1], ale [2]
Approved by:	maintainer
2010-01-16 19:34:32 +00:00
Greg Lewis
b94d4f719d . Update to the cacerts file included in Update 17. 2009-12-06 02:52:37 +00:00
Greg Lewis
ebcf4a72d8 . Add support for the serviceability agent (includes work by glewis@ and
Brian Gardner).  Core support needs some more work.
. Install the debug build when WITH_DEBUG is set.
. Change WITH_DEBUG to only build the debug build.
. Eliminate the requirements for the binary plugins.
. Fix some compilation errors in the debug build on 7.x.

Submitted by:	Kurt Miller <kurt@intricatesoftware.com>
2009-05-22 06:23:16 +00:00
Greg Lewis
257f02e661 . Update to Build 16.
. Host the patchset in the ports infrastructure rather than downloading it.
. Make the port build HotSpot rather than using the one of the bootstrapping
  JDK (fixes a license violation).

Submitted by:	Kurt Miller <kurt@intricatesoftware.com>
Approved by:	Fixes a license violation
2009-05-09 23:21:48 +00:00
Maho Nakata
ebe2efd71a OpenJDK is an open-source implementation of the Java Platform, Standard Edition.
The version has all of Sun's bug fixes up to JDK 6 Release 11 and should be
the runtime equivelent to JDK6 Release 11.

Much of the OpenJDK code is licensed under the GPL version 2 with the
Classpath exception. The Java Hotspot virtual machine source code is
licensed under the GPL version 2 only.

OpenJDK 6 should supercede the java/jdk16 port at some point in time.

WWW: http://openjdk.java.net/

Submitted by:	Brian Gardner <brian@experts-exchange.com>
2009-02-23 03:15:29 +00:00