On Tue, 24 Oct 2023 15:33:34 GMT, Michael McMahon <[email protected]> wrote:
> Hi, > > This fix resolves a VM crash issue caused by a memory use after free in JGSS > native code. The cause is the `java.net.HttpURLConnection` implementation > which is incorrectly caching GSS context objects which end up being used and > reused by multiple threads in parallel, and in fact should only be used once, > with separate instances for separate requests (requiring authentication). The > fix is very simple and is just that the NegotiateAuthentication class needs > to be marked as non-cacheable. A test is not included here as it requires > testing against real servers that aren't publicly accessible. > > Thanks, > Michael This pull request has now been integrated. Changeset: f1a24f6d Author: Michael McMahon <[email protected]> URL: https://git.openjdk.org/jdk/commit/f1a24f6d4827f9b8648dd2afe6d606dab67d51fe Stats: 1 line in 1 file changed: 0 ins; 0 del; 1 mod 8318599: HttpURLConnection cache issues leading to crashes in JGSS w/ native GSS introduced by 8303809 Reviewed-by: dfuchs ------------- PR: https://git.openjdk.org/jdk/pull/16347
