Re: RFR: 8130017: use _FORTIFY_SOURCE in gcc fastdebug builds - was : RE: gcc FORTIFY_SOURCE application security flags

2019-05-08 Thread sgehwolf
Hi Matthias, For some background about the -O2 -ffp-contract=off flags for sharedRuntimeTrig.cpp and sharedRuntimeTrans.cpp see: https://bugs.openjdk.java.net/browse/JDK-8210425 My understanding is that if there is a per-file override of the optimization level, the compilation command will end

RE: RFR: 8130017: use _FORTIFY_SOURCE in gcc fastdebug builds - was : RE: gcc FORTIFY_SOURCE application security flags

2019-05-08 Thread Baesken, Matthias
Hello,I looked a bit more into it . It seems to me , that when -ffp-contract=off is available which is the case with current gcc versions , we want to optimize the 2 special files ( sharedRuntimeTrig.cpp / sharedRuntimeTrans.cpp ). see the following comments :

RE: RFR: 8130017: use _FORTIFY_SOURCE in gcc fastdebug builds - was : RE: gcc FORTIFY_SOURCE application security flags

2019-05-08 Thread Baesken, Matthias
Hi David, thanks for the comment . Currently I do not see the issue in our fastdebug builds . So I think the opt-flag filtering got changed/removed in the years after the issues were reported . https://bugs.openjdk.java.net/browse/JDK-8047952 mentions special O-level settings for

Re: RFR: 8130017: use _FORTIFY_SOURCE in gcc fastdebug builds - was : RE: gcc FORTIFY_SOURCE application security flags

2019-05-08 Thread David Holmes
Hi Matthias, On 8/05/2019 6:05 pm, Baesken, Matthias wrote: Hello, here is a webrev, I used the existing bug "JDK-8130017 : use _FORTIFY_SOURCE in gcc fastdebug builds" Hope that’s fine . That is fine, but please add a comment to the bug explaining exactly how you fixed the issue and

RFR: 8130017: use _FORTIFY_SOURCE in gcc fastdebug builds - was : RE: gcc FORTIFY_SOURCE application security flags

2019-05-08 Thread Baesken, Matthias
Hello, here is a webrev, I used the existing bug "JDK-8130017 : use _FORTIFY_SOURCE in gcc fastdebug builds" Hope that’s fine . https://bugs.openjdk.java.net/browse/JDK-8130017 http://cr.openjdk.java.net/~mbaesken/webrevs/8130017.0/ Our internal OpenJDK Linux (x86_64, ppc64, ppc64le ,

RE: [11u] java/awt/FontMetrics/MaxAdvanceIsMax.java test failure (was: [11u] RFR 8210782: Upgrade HarfBuzz to the latest 2.3.1)

2019-05-08 Thread Lindenmaier, Goetz
Hi Severin, Thanks for looking at the issue! I can reproduce the issue starting the test stand alone. So it's not a problem of our test infrastructure. But I can only reproduce it on a limited set of OSes: linuxppc64le: Red Hat Enterprise Linux Server release 7.2 (Maipo) Red Hat Enterprise