Commit graph

59 commits

Author SHA1 Message Date
Jung-uk Kim
932fe524fd Fix build with libc++. 2013-09-06 02:06:56 +00:00
Jung-uk Kim
c9ea119f1f Move the fix for S6636110 to more appropriate directory. This patch is not
an IcedTea6 patch nor a security fix.
2013-07-26 05:23:06 +00:00
Baptiste Daroussin
37e17acfdf Fix excessive memory consumption on head amd64, this prevent the package building cluster from dying when building java ports.
This bug is referenced upstream here: http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6636110

Submitted by:	dim
With hat:	portmgr
2013-07-25 15:32:43 +00:00
Jung-uk Kim
e2650fc1b3 - Add couple of upstreamed IcedTea6 patches for consistency.
- Disable test_gamma by default.
2013-07-22 21:59:50 +00:00
Jung-uk Kim
ab26ef7814 Add multiple security patches and improvements from IcedTea6 1.12.6.
http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-July/023941.html

Obtained from:	IcedTea Project
PR:		ports/180541
2013-07-16 21:07:25 +00:00
Jung-uk Kim
edb186c0b5 Use bootstrap Java instead of newly built binary to execute RMIC. 2013-05-15 00:17:57 +00:00
Jung-uk Kim
70c842246a Add multiple security patches from IcedTea6 1.12.5.
http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022985.html

Obtained from:	IcedTea Project
2013-04-25 20:03:56 +00:00
Jung-uk Kim
2d1c28ddc6 Add multiple security patches from IcedTea6 1.12.4.
http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-March/022145.html

Obtained from:	IcedTea Project
2013-03-06 01:01:29 +00:00
Jung-uk Kim
0f7f30e0b6 Add multiple security patches from IcedTea6 1.12.3.
http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-February/021858.html
http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-February/021998.html

Obtained from:	IcedTea Project
2013-03-06 00:50:28 +00:00
Jung-uk Kim
18924f6e54 Add a patch to fix MulticastSocket.setInterface().
http://hg.openjdk.java.net/bsd-port/bsd-port/jdk/rev/bfa676f5b5db

Submitted by:	oliver
2013-02-11 23:45:25 +00:00
Greg Lewis
5b9c189def . Update to build 27.
Feature safe:	yes
2012-10-29 06:13:33 +00:00
Alex Dupre
e4c34a1063 Update CA list to Oracle Java 7u9.
Added CA:
- geotrustprimarycag2
- thawteprimaryrootcag2
- verisignclass3g4ca

Feature safe:	yes
2012-10-23 08:21:48 +00:00
Jung-uk Kim
81a8a55b63 - Add 2012/10/16 security patches from IcedTea6 1.11.5. [1]
http://icedtea.classpath.org/hg/release/icedtea6-1.11/rev/d9564350faa6
http://blog.fuseyism.com/index.php/2012/10/19/security-icedtea-1-10-10-1-11-15-2-1-3-2-2-3-2-3-3-released/

- Completely turn off parallel build by default and remove parallel build
hack for HotSpot.  There were several reports that it fails to build under
certain environment, ports/162991 for example.  Users can still do parallel
build by setting FORCE_MAKE_JOBS (and MAKE_JOBS_NUMBER if desired).
- Implement os::available_memory().  Now it is consistent with "vm.vmtotal"
sysctl(3) MIB rather than bogus (physical memory / 4).
- Prefer sysconf(_SC_NPROCESSORS_CONF) over HW_NCPU sysctl MIB to get the
number of installed processors.  There is no functional difference except
for CURRENT, which obtains the information from ELF aux vector.
- Prefer sysconf(_SC_PHYS_PAGES) * sysconf(_SC_PAGESIZE) over HW_USERMEM
sysctl MIB to get size of physical memory.  Although it looks more logical
to find currently available memory, it has an inevitable side-effect, i. e.,
it changes dynamically depending on current wired page count.  Therefore,
it is unpredictable and not too useful some times.  For example, launcher
uses the parameter to determine initial heap size and machine class for i386.
Now it is more consistent with other places (and Linux JDK/JREs, including
the ones we have in ports tree).
- Implement os::active_processor_count() using cpuset_getaffinity(2).  For
example, Runtime.getRuntime().availableProcessors() now returns number of
available processors for the current process as it should.
- Sync. launchers (java_md.c) for HotSpot and JDK as much as possible for
maintainability.  As a good side-effect, launcher for i386 can now determine
machine class based on the current hardware configuration.  Previously,
client VM was always chosen by default.
- Fix CounterGet(), which is only used for debugging launcher.
- Add swap info for os::print_memory_info().

Obtained from:	IcedTea project [1]
Feature safe:	yes
2012-10-19 22:43:10 +00:00
Jung-uk Kim
064102df55 Update to build 26. 2012-10-09 20:59:37 +00:00
Jung-uk Kim
bedc8d0abc Tidy up patches. No functional change. 2012-09-27 00:18:41 +00:00
Jung-uk Kim
160ffd1866 Use fdescfs(5) and procfs(5) consistently. 2012-09-26 23:24:44 +00:00
Jung-uk Kim
e1b4da42cd - Override GCC used by HotSpot SA. [1]
- Fix build with GCC 4.5+ on i386. [2]
- Convert to the new header format.

Submitted by:	Claude Buisson (clbuisson at orange dot fr) [1]
Obtained from:	OpenJDK7 [2]
	http://hg.openjdk.java.net/jdk7/hotspot/hotspot/rev/da880ba4edf9
2012-09-18 22:30:19 +00:00
Jung-uk Kim
17f28ea268 - Honor CC, CXX, and CPP. [1]
- Fix build with clang.

PR:	ports/151042 [1]
2012-09-18 20:53:20 +00:00
Jung-uk Kim
aba89129e7 - Update security patch to fix CVE-2012-0547 and CVE-2012-1682.
- Catch up with icedtea.classpath.org server changes for distfiles.
2012-09-07 19:27:31 +00:00
Jung-uk Kim
b714a769f1 - Fix multiple security vulnerabilities. [1]
- Drop version suffixes from LIB_DEPENDS.
- Use the new options framework.

Obtained from:	IcedTea Project [1]
http://icedtea.classpath.org/hg/icedtea6/rev/9aff0fc60733
2012-06-13 19:17:00 +00:00
Greg Lewis
923815253b . Update to build 25. 2012-05-09 03:53:37 +00:00
Greg Lewis
28609d64ef . Fix the look up of time zone data when TZUPDATE is turned on and as a
result turn it on by default again.  This change bears a little more
  explanation.

  In UnixFileSystem.java there is a cache of canonical paths and in
  particular one for paths inside java.home.  The problem with looking
  up time zone data is that if another path within java.home has been
  looked up then the symlink for the time zone data is not resolved
  (since the cache assumes there are no symlinks in java.home) and we fail
  to be able to open the ZoneInfoMapping file.

  One of the other features in UnixFileSystem is that the cache is not
  consulted and full resolution occurs for paths containing "." or "..".
  I've chosen to (ab)use this to force resolution of the time zone data
  directory in ZoneInfoFile.java rather than doing something like IcedTea
  did which was to introduce a tz.properties file where they would stash
  the time zone info directory rather than symlinking it in.  For full
  reference that patch is here:

  http://icedtea.classpath.org/hg/icedtea6/file/tip/patches/use-system-tzdata.patch

  There are two main reasons I chose a bit of a hack rather than something
  like this.

  1. I want to apply the patch to non-GPL'ed code (e.g. the jdk16 port).
  2. Using updated time zone data is only an option in the port and using
     something like tz.properties when the option is off is clunky.

  Thanks to avg@ for sleuth work on finding the bug write up and the
  IcedTea fix.
2012-05-02 06:13:16 +00:00
Jung-uk Kim
04111c28a5 Fix multiple security vulnerabilities.
CVE-2011-3563:	Fix issues in java sound
CVE-2011-3571:	Fix in AtomicReferenceArray
CVE-2011-5035:	Add property to limit number of request headers to the HTTP Server
CVE-2012-0501:	Better input parameter checking in zip file processing
CVE-2012-0502:	Issues with some KeyboardFocusManager method
CVE-2012-0503:	Issues with TimeZone class
CVE-2012-0505:	Enhance exception throwing mechanism in ObjectStreamClass
CVE-2012-0506:	Issues with some method in corba

Obtained from:	IcedTea Project
2012-02-18 01:06:58 +00:00
Jung-uk Kim
20a20900ab - Replace hsearch_r from GNU libc with Berkeley DB from our libc.
http://hg.openjdk.java.net/bsd-port/bsd-port/hotspot/rev/f19d23da7c3e
http://hg.openjdk.java.net/bsd-port/bsd-port/hotspot/rev/cf5c383e1d33
http://hg.openjdk.java.net/bsd-port/bsd-port/hotspot/rev/f1a18ada5853

- Fix POLICY option.  It was silently enabled by default with b19 update.
2012-01-13 01:42:32 +00:00
Jung-uk Kim
0ee3fb1c26 - Update to b24. [1]
- Add x11/libXext to build dependencies. [2]
- Make portlint happy. [3]

PR:		ports/162646 [1]
		ports/156319 [2]
		ports/161985 [3]
Feature safe:	yes
2011-11-30 21:18:30 +00:00
Jung-uk Kim
84b67b4564 - Add an additional patch to support i386 CPUs without CMOV instruction
under ICEDTEA option. [1]
- Chase default Korean font directory change.

PR:		ports/158304 [1]
Obtained from:	IcedTea Project [1]
2011-08-09 22:56:40 +00:00
Jung-uk Kim
176e27746b - Update to build 23.
- Import more complete JPEG class support and turn on ICEDTEA option by
default. [1]
- Remove obsolete WEB option.  Note the functionality is now moved to a new
port java/icedtea-web, which depends on ICEDTEA option of this port.

Obtained from:	IcedTea project [1]
2011-07-11 20:58:58 +00:00
Jung-uk Kim
6fbc8496ce Force libxul include directory and allow building IcedTea-Web plugin with
an ancient xulrunner (i.e., 1.9.2.9 and earlier).  This commit should fix:

PR:	ports/155381
2011-03-28 21:08:52 +00:00
Jung-uk Kim
0ba14edc9b Rework the previous fix to sync. with upstream:
http://hg.openjdk.java.net/jdk7/jdk7/jdk/diff/441f88d39988/src/solaris/native/java/net/net_util_md.c

Note it has no functional change for FreeBSD because sizeof(socklen_t) is
luckily sizeof(int).  Actually, this commit is just to note that the regression
was acidentally pulled in from upstream because of my ignorance.  Specifically,
the following commit was the culprit:

http://hg.openjdk.java.net/jdk7/jdk7/jdk/diff/b7fce4bac617/src/solaris/native/java/net/net_util_md.c

FYI, it also triggered the following upstream PR:

http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6730740

Obtained from:	OpenJDK project
Pointyhat:	jkim
2011-03-17 20:40:49 +00:00
Alex Dupre
a8e0201b99 Fix a severe regression introduced with the "disable IPV6_V6ONLY option".
On amd64 every call to getsocktopt returns a "Bad address" SocketException.
2011-03-17 09:17:26 +00:00
Jung-uk Kim
aa48142f09 Add an option to apply extra patches originated from IcedTea project (turned
off by default) and sort options.  Add a basic wrapper to resurrect
com.sun.image.codec.jpeg using javax.imageio under the new option.

Obtained from:	icedtea.classpath.org
PR:		java/155288
2011-03-07 22:41:02 +00:00
Jung-uk Kim
6fac48313f Backport a long standing bug fix from OpenJDK7, i.e., disable IPV6_V6ONLY
option when IPv6 is enabled and failed to create a socket.

http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6342561
http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6882910

For in-depth analysis of this problem from FreeBSD perspective, please see:

http://diario.beerensalat.info/2008/10/12/java_and_ipv6_on_bsd.html
2011-03-03 23:22:05 +00:00
Jung-uk Kim
3b3d5f992b Fix a test case for default charset. 2011-03-02 01:03:38 +00:00
Jung-uk Kim
7027d395cb Update to build 22. 2011-03-01 19:21:59 +00:00
Jung-uk Kim
b6945850a4 Update IcedTea-Web to 1.0.1 and fix multiple security vulnerabilities.
CVE-2010-4469:	Hotspot backward jsr heap corruption
CVE-2010-4465:	Swing timer-based security manager bypass
CVE-2010-4472:	Untrusted code allowed to replace DSIG/C14N implementation
CVE-2010-4448:	DNS cache poisoning by untrusted applets
CVE-2010-4450:	Launcher incorrect processing of empty library path entries
CVE-2010-4471:	Java2D font-related system property leak
CVE-2010-4470:	JAXP untrusted component state manipulation
CVE-2011-0706:	Multiple signers privilege escalation

Obtained from:	icedtea.classpath.org
Obtained from:	jaxp.java.net
2011-02-21 19:03:18 +00:00
Jung-uk Kim
27acea6b21 Add experimental support for sound via ALSA pcm-oss plugin. This feature
is disabled by default because MIDI plugin for OSS does not exist, i.e.,
(hardware) MIDI sequencer is not supported.  However, softsynth (Gervill)
works fine as it uses sampled sound.
2011-02-11 22:02:37 +00:00
Jung-uk Kim
6ac447dee9 - Implement some missing FreeBSD-specific methods, i.e., swap info, committed
virtual memory, free physical memory, and number of open file descriptors.
For example, jconsole shows more realistic numbers instead of hardcoded bogus
numbers in VM Summary tab now.  Correct a jtreg test case for the swap info.
- Mention procfs(5) is used for some features in this implementation.
2011-02-11 00:41:48 +00:00
Jung-uk Kim
680336afad - Update to build 21.
- Improve Serviceability Agent.  For example, the following should work now:

	jdb -connect sun.jvm.hotspot.jdi.SAPIDAttachingConnector:pid=<PID>
	jmap <PID>
	jsadebugd <PID>
	jstack -F <PID>
	jstack -m <PID>

- Replace IcedTea6 1.9.x with IcedTea-Web 1.0 for web support.  Note it is
still tightly coupled with openjdk6 for now because we do not have proper
infrastructure to decouple them yet.
- Add itweb-settings (a Java Control Panel replacement for IcedTea-Web).
- Add desktop integration files for web support (but not installed in default
system-wide locations).
2011-02-09 20:00:38 +00:00
Greg Lewis
4b97549646 . Fix infinite loop in parsing certain doubles. See CVE-2010-4476. 2011-02-09 17:13:40 +00:00
Jung-uk Kim
472d2585b8 Update IcedTea6 web support to 1.9.4 (CVE-2010-4351).
Feature safe:	yes
2011-01-18 19:28:11 +00:00
Jung-uk Kim
32105f4cb5 Fix a typo in the BSD patchset.
PR:		ports/153421
Submitted by:	Alexander Vasyanin (avasyanin at gmail dot com)
2011-01-04 22:54:58 +00:00
Greg Lewis
c704da9e15 . Make rlen a size_t instead of an int. Fixes a crash on 64 bit architectures.
Pointed out by:	Nikolay Denev <ndenev@gmail.com>
2010-12-13 08:59:52 +00:00
Jung-uk Kim
3f8405abd2 - Update IcedTea6 web support to 1.9.2.
- Add a patch to fix browser plugin crash[1].

Submitted by:	Barbara (barbara dot xxx1975 at libero dot it)[1]
2010-11-24 23:35:32 +00:00
Jung-uk Kim
10c99f335e Update Web Start and Java plugin to IcedTea6 1.9.1. 2010-10-13 19:51:32 +00:00
Jung-uk Kim
773071c6f0 Improve pthread cancellation and update comments. 2010-09-24 03:54:19 +00:00
Jung-uk Kim
3a28754e3d - Rewrite IcedTea6 plugin patch to improve stability of initialization/shutdown
process.  Update comments in the patch accordingly.
- Tidy up makefile for the plugin.  Remove a hack for include path of libxul,
which is correctly patched from libxul 1.9.2.9_1.  Remove mozilla-plugin.pc from
linker options for pkg-config.  Generally speaking, NPAPI plugins do not need
to link with Gecko engine directly.
- Move run-time dependencies for the plugin to build-time dependencies as it is
completely optional any way.
2010-09-23 21:54:01 +00:00
Jung-uk Kim
d7e6be6929 Introducing support for Web Start and Mozilla plugin from IcedTea6 1.9.
Note the feature is turned off by default because it adds experimental and
unofficial patches from icedtea.classpath.org.  You need to select WEB option
from config menu or define WITH_WEB variable to enable the feature.  Also,
note that a symlink for web browser is not created automatically with same
reasoning.  Thus, you need to create a symlink for your browser, e.g.,

ln -s ${LOCALBASE}/openjdk6/jre/lib/IcedTeadPlugin.so ~/.mozilla/plugins

Remove some stale comments in package message while I am here.
2010-09-16 00:32:48 +00:00
Greg Lewis
9fd4613f57 . Port over davidxu@'s NIO selector that uses kqueue(2) from jdk16.
. Mark as MAKE_JOBS_UNSAFE.
2010-08-15 05:23:07 +00:00
Greg Lewis
0c3ebf7aaa . Update to build 20.
PR:		148202
2010-07-10 16:44:12 +00:00
Alex Dupre
ece2cbf4a8 Do not add /usr/local/lib three times to DEFAULT_LIBPATH.
Update cacerts file from Sun's JRE 6u20.
2010-05-18 13:29:10 +00:00