hg: jdk7/tl/langtools: 6567415: Neverending loop in ClassReader

2010-12-18 Thread kumar . x . srinivasan
Changeset: 3131e664558d Author:ksrini Date: 2010-12-18 09:38 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/langtools/rev/3131e664558d 6567415: Neverending loop in ClassReader Reviewed-by: jjg ! src/share/classes/com/sun/tools/javac/jvm/ClassReader.java + test/tools/javac/6567415/T6

hg: jdk7/tl/jdk: 7007157: (pack200) stripping attributes causes a NPE

2010-12-18 Thread kumar . x . srinivasan
Changeset: ae84db37130a Author:ksrini Date: 2010-12-18 09:10 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/ae84db37130a 7007157: (pack200) stripping attributes causes a NPE Reviewed-by: jrose, mduigou, dholmes ! src/share/classes/com/sun/java/util/jar/pack/ClassReader.java

Re: Please Review: required security algorithms for Java SE 7 implementations

2010-12-18 Thread Xuelei Fan
>From my understanding, MD2 and MD5 is unsafe because one can forge one thing (such as, a certificate) with different content, but the same signature. If we continue support verification based on MD2 and MD5, it also means that the attack with the forged certification works. We may not be able to p