Re: Buffer overflow in C code.

2012-07-31 Thread Chris Hegarty
[cc'ing net-dev mailing list] Thanks for reporting this issue. This looks like 7089443 [1], fixed in jdk8 via 7112670 [2]. Looks like icetea needs to sync up, or maybe they are based against the jdk7 repo. If so, this could be a good candidate to backport from jdk8 to jdk7 ( then I think icet

Re: 6995421: Eliminate the static dependency to sun.security.ec.ECKeyFactory

2012-07-31 Thread Stephen Flores
Vincent, I forgot that there is no longer a need to duplicate the ECKeyFactory class in rt.jar. Can you take a quick look at webrev-2 that has the makefile changes that eliminate the duplication? Thanks, Steve. On 07/25/2012 11:22 AM, Vincent Ryan wrote: Hello Stephen, Your changes look

JDK8 Code review request for 7179715: OCSP revocation checking fails if the signer certificate is identified using the key ID

2012-07-31 Thread Sean Mullan
Hi Vinnie, Can you please review my fix for 7179715? webrev: http://cr.openjdk.java.net/~mullan/webrevs/7179715/webrev.00/ This was a regression caused by the integration of JEP 124. The responderKey was not being parsed correctly and was causing a DER parsing exception. I have also moved the