[security-dev 01285]: hg: jdk7/tl/jdk: 6888802: sun.misc.BootClassLoaderHook.getBootstrapPaths stack overflow

2009-10-06 Thread mandy . chung
Changeset: 1b81fc851b20 Author:mchung Date: 2009-10-06 15:14 -0700 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/1b81fc851b20 602: sun.misc.BootClassLoaderHook.getBootstrapPaths stack overflow Summary: Fixed sun.misc.BootClassLoaderHook.getBootstrapPaths calls hook.getAdditio

[security-dev 01284]: hg: jdk7/tl/jdk: 5062288: (reflect) Core reflection uses raw types when it could be using wildcards

2009-10-06 Thread joe . darcy
Changeset: 572791538be5 Author:darcy Date: 2009-10-06 13:31 -0700 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/572791538be5 5062288: (reflect) Core reflection uses raw types when it could be using wildcards Reviewed-by: alanb ! src/share/classes/java/lang/Class.java ! src/share

[security-dev 01283]: Re: ECC pkcs#11 bug]

2009-10-06 Thread Tomas Gustavsson
Here is another reference to this bug: http://forums.sun.com/thread.jspa?messageID=10270927 Regards, Tomas Andrew John Hughes wrote: > 2009/10/5 Tomas Gustavsson : >> Hi Vincent and Brad, >> >> I'm not sure how things are at Sun currently. We work with Sun here in >> Sweden so we've heard a bit

[security-dev 01282]: Re: ECC pkcs#11 bug]

2009-10-06 Thread Tomas Gustavsson
Hi Andrew, I guess no bug Id was created after all. The issue is that the pkcs#11 library returns a tag-length-value encoding for an EC public key, but the Sun provider expects something else. So when trying to read the public key from pkcs#11 we get an exception. The patch, which is very small

[security-dev 01281]: Re: ECC pkcs#11 bug]

2009-10-06 Thread Tomas Gustavsson
Sweet! Let me know if you need any help testing. I'm mainly running on Ubuntu 64bit, but have access to others as well. Regards, Tomas Vincent Ryan wrote: > > Tomas Gustavsson wrote: >> Andrew John Hughes wrote: >>> 2009/10/6 Tomas Gustavsson : Hi Andrew, I guess no bug Id was c

[security-dev 01280]: Re: ECC pkcs#11 bug]

2009-10-06 Thread Vincent Ryan
Tomas Gustavsson wrote: > > Andrew John Hughes wrote: >> 2009/10/6 Tomas Gustavsson : >>> Hi Andrew, >>> >>> I guess no bug Id was created after all. >>> The issue is that the pkcs#11 library returns a tag-length-value >>> encoding for an EC public key, but the Sun provider expects something >>>

[security-dev 01279]: Re: ECC pkcs#11 bug]

2009-10-06 Thread Tomas Gustavsson
Andrew John Hughes wrote: > 2009/10/6 Tomas Gustavsson : >> Hi Andrew, >> >> I guess no bug Id was created after all. >> The issue is that the pkcs#11 library returns a tag-length-value >> encoding for an EC public key, but the Sun provider expects something >> else. So when trying to read the pu

[security-dev 01278]: Re: ECC pkcs#11 bug]

2009-10-06 Thread Andrew John Hughes
2009/10/6 Tomas Gustavsson : > > Hi Andrew, > > I guess no bug Id was created after all. > The issue is that the pkcs#11 library returns a tag-length-value > encoding for an EC public key, but the Sun provider expects something > else. So when trying to read the public key from pkcs#11 we get an >

[security-dev 01277]: Re: ECC pkcs#11 bug]

2009-10-06 Thread Andrew John Hughes
2009/10/5 Tomas Gustavsson : > > Hi Vincent and Brad, > > I'm not sure how things are at Sun currently. We work with Sun here in > Sweden so we've heard a bit about wait with the Oracle story. > > Anyhow I just want to let you know that if anyone is still working on > crypto that this bug is very a