Commit graph

190 commits

Author SHA1 Message Date
Alex Dupre
e4c34a1063 Update CA list to Oracle Java 7u9.
Added CA:
- geotrustprimarycag2
- thawteprimaryrootcag2
- verisignclass3g4ca

Feature safe:	yes
2012-10-23 08:21:48 +00:00
Jung-uk Kim
85da8b848f Remove more environment variables. These variables are never meant to be
overridden by the user.

Feature safe:	yes
2012-10-22 23:43:36 +00:00
Jung-uk Kim
3c604f0e80 Remove a bogus environment variable, especially for i386. This fixes build
under certain conditions.

Feature safe:	yes
2012-10-22 20:29:54 +00:00
Jung-uk Kim
81a8a55b63 - Add 2012/10/16 security patches from IcedTea6 1.11.5. [1]
http://icedtea.classpath.org/hg/release/icedtea6-1.11/rev/d9564350faa6
http://blog.fuseyism.com/index.php/2012/10/19/security-icedtea-1-10-10-1-11-15-2-1-3-2-2-3-2-3-3-released/

- Completely turn off parallel build by default and remove parallel build
hack for HotSpot.  There were several reports that it fails to build under
certain environment, ports/162991 for example.  Users can still do parallel
build by setting FORCE_MAKE_JOBS (and MAKE_JOBS_NUMBER if desired).
- Implement os::available_memory().  Now it is consistent with "vm.vmtotal"
sysctl(3) MIB rather than bogus (physical memory / 4).
- Prefer sysconf(_SC_NPROCESSORS_CONF) over HW_NCPU sysctl MIB to get the
number of installed processors.  There is no functional difference except
for CURRENT, which obtains the information from ELF aux vector.
- Prefer sysconf(_SC_PHYS_PAGES) * sysconf(_SC_PAGESIZE) over HW_USERMEM
sysctl MIB to get size of physical memory.  Although it looks more logical
to find currently available memory, it has an inevitable side-effect, i. e.,
it changes dynamically depending on current wired page count.  Therefore,
it is unpredictable and not too useful some times.  For example, launcher
uses the parameter to determine initial heap size and machine class for i386.
Now it is more consistent with other places (and Linux JDK/JREs, including
the ones we have in ports tree).
- Implement os::active_processor_count() using cpuset_getaffinity(2).  For
example, Runtime.getRuntime().availableProcessors() now returns number of
available processors for the current process as it should.
- Sync. launchers (java_md.c) for HotSpot and JDK as much as possible for
maintainability.  As a good side-effect, launcher for i386 can now determine
machine class based on the current hardware configuration.  Previously,
client VM was always chosen by default.
- Fix CounterGet(), which is only used for debugging launcher.
- Add swap info for os::print_memory_info().

Obtained from:	IcedTea project [1]
Feature safe:	yes
2012-10-19 22:43:10 +00:00
Jung-uk Kim
2151c80bb7 Add a port to self-bootstrap OpenJDK6. Note the initial distfiles were
bootstrapped with pre-built openjdk6 packages from FreeBSD build clusters
on clean 7.4-RELEASE installation, and the ports tree was checked out at
r305682.

Feature safe:	yes
2012-10-12 00:42:31 +00:00
Jung-uk Kim
2007d57691 - Explicitly set registervm as build dependency. When BOOTSTRAPJDKDIR is
manually set, this dependency may not be fulfilled.
- Consistently use WRKSRC over WRKDIR where it makes sense.  Although they
are actually the same directory, there is no reason to confuse users.

Feature safe:	yes
2012-10-10 19:55:27 +00:00
Jung-uk Kim
064102df55 Update to build 26. 2012-10-09 20:59:37 +00:00
Jung-uk Kim
02cfcdf497 - Sanitize user, group and permission. Inspired by openjdk7.
- Add a slave port to create JRE-only package.
2012-10-09 17:47:06 +00:00
Jung-uk Kim
bedc8d0abc Tidy up patches. No functional change. 2012-09-27 00:18:41 +00:00
Jung-uk Kim
160ffd1866 Use fdescfs(5) and procfs(5) consistently. 2012-09-26 23:24:44 +00:00
Jung-uk Kim
e1b4da42cd - Override GCC used by HotSpot SA. [1]
- Fix build with GCC 4.5+ on i386. [2]
- Convert to the new header format.

Submitted by:	Claude Buisson (clbuisson at orange dot fr) [1]
Obtained from:	OpenJDK7 [2]
	http://hg.openjdk.java.net/jdk7/hotspot/hotspot/rev/da880ba4edf9
2012-09-18 22:30:19 +00:00
Jung-uk Kim
17f28ea268 - Honor CC, CXX, and CPP. [1]
- Fix build with clang.

PR:	ports/151042 [1]
2012-09-18 20:53:20 +00:00
Jung-uk Kim
93ec3ca459 - Enlist openjdk6 users as testers of ant 1.8.4 as well.
- Set JAVACMD environment variable to point to bootstrap JDK for ant.  When
it is unset or empty, ant sets it by executing `which java`, which may be
different from bootstrap JDK.
2012-09-07 22:16:05 +00:00
Jung-uk Kim
aba89129e7 - Update security patch to fix CVE-2012-0547 and CVE-2012-1682.
- Catch up with icedtea.classpath.org server changes for distfiles.
2012-09-07 19:27:31 +00:00
Jung-uk Kim
b714a769f1 - Fix multiple security vulnerabilities. [1]
- Drop version suffixes from LIB_DEPENDS.
- Use the new options framework.

Obtained from:	IcedTea Project [1]
http://icedtea.classpath.org/hg/icedtea6/rev/9aff0fc60733
2012-06-13 19:17:00 +00:00
Greg Lewis
8c6175a3b5 . Specifically reference zip/unzip in ${LOCALBASE}/bin, since that is where
the JDK build looks for them, but FreeBSD 9.x has them available in /usr/bin.
  Adjusting the JDK check is a harder fix, this will get things building
  again on 9.x quickly.

PR:		166996
2012-05-27 03:51:15 +00:00
Greg Lewis
cd7a790139 . Bootstrap with ant 1.8.3. 2012-05-12 04:44:47 +00:00
Jung-uk Kim
99fcd36c3d Update jtreg to 4.1 b04. 2012-05-09 19:51:34 +00:00
Greg Lewis
923815253b . Update to build 25. 2012-05-09 03:53:37 +00:00
Greg Lewis
28609d64ef . Fix the look up of time zone data when TZUPDATE is turned on and as a
result turn it on by default again.  This change bears a little more
  explanation.

  In UnixFileSystem.java there is a cache of canonical paths and in
  particular one for paths inside java.home.  The problem with looking
  up time zone data is that if another path within java.home has been
  looked up then the symlink for the time zone data is not resolved
  (since the cache assumes there are no symlinks in java.home) and we fail
  to be able to open the ZoneInfoMapping file.

  One of the other features in UnixFileSystem is that the cache is not
  consulted and full resolution occurs for paths containing "." or "..".
  I've chosen to (ab)use this to force resolution of the time zone data
  directory in ZoneInfoFile.java rather than doing something like IcedTea
  did which was to introduce a tz.properties file where they would stash
  the time zone info directory rather than symlinking it in.  For full
  reference that patch is here:

  http://icedtea.classpath.org/hg/icedtea6/file/tip/patches/use-system-tzdata.patch

  There are two main reasons I chose a bit of a hack rather than something
  like this.

  1. I want to apply the patch to non-GPL'ed code (e.g. the jdk16 port).
  2. Using updated time zone data is only an option in the port and using
     something like tz.properties when the option is off is clunky.

  Thanks to avg@ for sleuth work on finding the bug write up and the
  IcedTea fix.
2012-05-02 06:13:16 +00:00
Greg Lewis
0426f64b8e . Turn the TZUPDATE option off by default until I can figure out how that
breaks the Eclipse build.
2012-04-19 18:53:53 +00:00
Greg Lewis
e7ae9dc0f4 . Use the new java-zoneinfo port to provide updated time zone info. 2012-04-13 04:01:24 +00:00
Jung-uk Kim
04111c28a5 Fix multiple security vulnerabilities.
CVE-2011-3563:	Fix issues in java sound
CVE-2011-3571:	Fix in AtomicReferenceArray
CVE-2011-5035:	Add property to limit number of request headers to the HTTP Server
CVE-2012-0501:	Better input parameter checking in zip file processing
CVE-2012-0502:	Issues with some KeyboardFocusManager method
CVE-2012-0503:	Issues with TimeZone class
CVE-2012-0505:	Enhance exception throwing mechanism in ObjectStreamClass
CVE-2012-0506:	Issues with some method in corba

Obtained from:	IcedTea Project
2012-02-18 01:06:58 +00:00
Jason Helfman
7d9c963de9 - Add variable JDK_UPDATE_VERSION for java to 30 (current Oracle release of JDK 6)
This is largely done for java detection for browser compatibility
Please update UPDATE_VERSION for new releases

PR:	ports/163916
Submitted by:	Denny Lin <dennylin93 at hs.ntnu.edu.tw>
Approved by:	glewis, (rene, crees) (mentors,implicit)
2012-01-13 17:36:23 +00:00
Jung-uk Kim
20a20900ab - Replace hsearch_r from GNU libc with Berkeley DB from our libc.
http://hg.openjdk.java.net/bsd-port/bsd-port/hotspot/rev/f19d23da7c3e
http://hg.openjdk.java.net/bsd-port/bsd-port/hotspot/rev/cf5c383e1d33
http://hg.openjdk.java.net/bsd-port/bsd-port/hotspot/rev/f1a18ada5853

- Fix POLICY option.  It was silently enabled by default with b19 update.
2012-01-13 01:42:32 +00:00
Jason Helfman
ad56920272 Installs built jars that were previously not installed.
* javazic.jar to generate Java timezone information files
* compilefontconfig.jar to generate Java font configuration files

PR: ports/161945
Submitted by:	Jilles Tjoelker <jilles at stack.nl>
Reviewed by: glewis
Approved by: glewis, crees (mentor)
2011-12-30 06:42:14 +00:00
Jung-uk Kim
0ee3fb1c26 - Update to b24. [1]
- Add x11/libXext to build dependencies. [2]
- Make portlint happy. [3]

PR:		ports/162646 [1]
		ports/156319 [2]
		ports/161985 [3]
Feature safe:	yes
2011-11-30 21:18:30 +00:00
Jung-uk Kim
84b67b4564 - Add an additional patch to support i386 CPUs without CMOV instruction
under ICEDTEA option. [1]
- Chase default Korean font directory change.

PR:		ports/158304 [1]
Obtained from:	IcedTea Project [1]
2011-08-09 22:56:40 +00:00
Jung-uk Kim
176e27746b - Update to build 23.
- Import more complete JPEG class support and turn on ICEDTEA option by
default. [1]
- Remove obsolete WEB option.  Note the functionality is now moved to a new
port java/icedtea-web, which depends on ICEDTEA option of this port.

Obtained from:	IcedTea project [1]
2011-07-11 20:58:58 +00:00
Jung-uk Kim
50d297b3ab - Update IcedTea-Web to 1.0.3.
- Use fake JDK update version as IcedTea-Web does.
2011-06-14 20:51:18 +00:00
Max Brazhnikov
630ca2285f Bump PORTREVISION after open-mofit update 2011-05-02 12:44:53 +00:00
Jung-uk Kim
e93889f707 Re-add accidentally removed jtreg to distinfo. 2011-04-04 20:58:47 +00:00
Jung-uk Kim
93833448cb Update IcedTea-Web to 1.0.2. 2011-04-04 20:56:01 +00:00
Jung-uk Kim
6fbc8496ce Force libxul include directory and allow building IcedTea-Web plugin with
an ancient xulrunner (i.e., 1.9.2.9 and earlier).  This commit should fix:

PR:	ports/155381
2011-03-28 21:08:52 +00:00
Jung-uk Kim
0ba14edc9b Rework the previous fix to sync. with upstream:
http://hg.openjdk.java.net/jdk7/jdk7/jdk/diff/441f88d39988/src/solaris/native/java/net/net_util_md.c

Note it has no functional change for FreeBSD because sizeof(socklen_t) is
luckily sizeof(int).  Actually, this commit is just to note that the regression
was acidentally pulled in from upstream because of my ignorance.  Specifically,
the following commit was the culprit:

http://hg.openjdk.java.net/jdk7/jdk7/jdk/diff/b7fce4bac617/src/solaris/native/java/net/net_util_md.c

FYI, it also triggered the following upstream PR:

http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6730740

Obtained from:	OpenJDK project
Pointyhat:	jkim
2011-03-17 20:40:49 +00:00
Alex Dupre
a8e0201b99 Fix a severe regression introduced with the "disable IPV6_V6ONLY option".
On amd64 every call to getsocktopt returns a "Bad address" SocketException.
2011-03-17 09:17:26 +00:00
Jung-uk Kim
aa48142f09 Add an option to apply extra patches originated from IcedTea project (turned
off by default) and sort options.  Add a basic wrapper to resurrect
com.sun.image.codec.jpeg using javax.imageio under the new option.

Obtained from:	icedtea.classpath.org
PR:		java/155288
2011-03-07 22:41:02 +00:00
Jung-uk Kim
6fac48313f Backport a long standing bug fix from OpenJDK7, i.e., disable IPV6_V6ONLY
option when IPv6 is enabled and failed to create a socket.

http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6342561
http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6882910

For in-depth analysis of this problem from FreeBSD perspective, please see:

http://diario.beerensalat.info/2008/10/12/java_and_ipv6_on_bsd.html
2011-03-03 23:22:05 +00:00
Jung-uk Kim
3b3d5f992b Fix a test case for default charset. 2011-03-02 01:03:38 +00:00
Jung-uk Kim
7027d395cb Update to build 22. 2011-03-01 19:21:59 +00:00
Alex Dupre
a59661d154 Update apache-ant to 1.8.2 bugfix release.
PR:		ports/154187
Submitted by:	ale
Approved by:	portmgr (pav)
2011-02-25 12:27:48 +00:00
Jung-uk Kim
b6945850a4 Update IcedTea-Web to 1.0.1 and fix multiple security vulnerabilities.
CVE-2010-4469:	Hotspot backward jsr heap corruption
CVE-2010-4465:	Swing timer-based security manager bypass
CVE-2010-4472:	Untrusted code allowed to replace DSIG/C14N implementation
CVE-2010-4448:	DNS cache poisoning by untrusted applets
CVE-2010-4450:	Launcher incorrect processing of empty library path entries
CVE-2010-4471:	Java2D font-related system property leak
CVE-2010-4470:	JAXP untrusted component state manipulation
CVE-2011-0706:	Multiple signers privilege escalation

Obtained from:	icedtea.classpath.org
Obtained from:	jaxp.java.net
2011-02-21 19:03:18 +00:00
Jung-uk Kim
27acea6b21 Add experimental support for sound via ALSA pcm-oss plugin. This feature
is disabled by default because MIDI plugin for OSS does not exist, i.e.,
(hardware) MIDI sequencer is not supported.  However, softsynth (Gervill)
works fine as it uses sampled sound.
2011-02-11 22:02:37 +00:00
Jung-uk Kim
e8d545eb90 Fix a typo in the previous commit. We have more than one line now. 2011-02-11 00:44:44 +00:00
Jung-uk Kim
6ac447dee9 - Implement some missing FreeBSD-specific methods, i.e., swap info, committed
virtual memory, free physical memory, and number of open file descriptors.
For example, jconsole shows more realistic numbers instead of hardcoded bogus
numbers in VM Summary tab now.  Correct a jtreg test case for the swap info.
- Mention procfs(5) is used for some features in this implementation.
2011-02-11 00:41:48 +00:00
Jung-uk Kim
680336afad - Update to build 21.
- Improve Serviceability Agent.  For example, the following should work now:

	jdb -connect sun.jvm.hotspot.jdi.SAPIDAttachingConnector:pid=<PID>
	jmap <PID>
	jsadebugd <PID>
	jstack -F <PID>
	jstack -m <PID>

- Replace IcedTea6 1.9.x with IcedTea-Web 1.0 for web support.  Note it is
still tightly coupled with openjdk6 for now because we do not have proper
infrastructure to decouple them yet.
- Add itweb-settings (a Java Control Panel replacement for IcedTea-Web).
- Add desktop integration files for web support (but not installed in default
system-wide locations).
2011-02-09 20:00:38 +00:00
Greg Lewis
4b97549646 . Fix infinite loop in parsing certain doubles. See CVE-2010-4476. 2011-02-09 17:13:40 +00:00
Jung-uk Kim
472d2585b8 Update IcedTea6 web support to 1.9.4 (CVE-2010-4351).
Feature safe:	yes
2011-01-18 19:28:11 +00:00
Jung-uk Kim
32105f4cb5 Fix a typo in the BSD patchset.
PR:		ports/153421
Submitted by:	Alexander Vasyanin (avasyanin at gmail dot com)
2011-01-04 22:54:58 +00:00
Sunpoet Po-Chuan Hsieh
b78b29aa13 - Use apache-ant 1.8.1 while devel/apache-ant was updated
- Pet portlint: use tab instead of space

PR:		ports/152676
Submitted by:	sunpoet (myself)
Approved by:	glewis (with java hat)
2010-12-14 07:31:03 +00:00