RE: RFR: 8044059: Memory Leak in Elliptic Curve Private Key Generation

2014-05-28 Thread Iris Clark
Hi, Jeremy. As an "Author", you can create a changeset but you can't push to the repo until you're a "Committer". Additional details about the differences between Author and Committer may be found here [1,2]. The diffs to create a changeset are (of course) in your webrev. Your Sponsor can us

Re: RFR 8036709: Java 7 jarsigner displays warning about cert policy tree

2014-05-28 Thread Sean Mullan
On 05/28/2014 12:47 AM, Weijun Wang wrote: On 5/28/2014 3:46, Sean Mullan wrote: Ok. The fix looks fine to me, though it looks like the code in the 2 methods is very similar - could it be refactored into a common method? Yes, it's now http://cr.openjdk.java.net/~weijun/8036709/webrev.02/

Re: RFR: 8044059: Memory Leak in Elliptic Curve Private Key Generation

2014-05-28 Thread Vincent Ryan
I’ll begin reviewing your changeset and get back to you. Thanks. On 28 May 2014, at 16:28, Jeremy Manson wrote: > Ah, okay. Thanks, Iris. I should already know known that - Martin has > explained it to me before. > > Vincent - let me know how you want to proceed. > > Jeremy > > > On Tue,

Re: RFR: 8044059: Memory Leak in Elliptic Curve Private Key Generation

2014-05-28 Thread Vincent Ryan
It’s difficult to develop a useful test that is cross-platform so let’s skip the testcase for this fix. On 28 May 2014, at 17:21, Jeremy Manson wrote: > You can defer the change if you need to. I'm going on vacation from the 6th > to the 16th, so there are timing issues around that. > > At

RFR [7047033] (smartcardio) Card.disconnect(boolean reset) does not reset when reset is true

2014-05-28 Thread Ivan Gerasimov
Hello! The argument 'reset' of javax.smartcardio.Card#disconnect has the reverse logic: When it is true, the card is not reset and vice versa. Would you please help review the trivial fix for this issue? BUGURL: https://bugs.openjdk.java.net/browse/JDK-7047033 WEBREV: http://cr.openjdk.java.ne

Re: RFR [8043720] (smartcardio) Native memory should be handled more accurately

2014-05-28 Thread Ivan Gerasimov
One additional change: In pcsc_multi2jstring() it is better to make sure the whole parsed buffer is null-terminates. This way we can guarantee that in the following line we will not access memory outside the buffer: js = (*env)->NewStringUTF(env, tab[cnt]); Would you please he

Re: RFR [7047033] (smartcardio) Card.disconnect(boolean reset) does not reset when reset is true

2014-05-28 Thread Valerie (Yu-Ching) Peng
Looks good. Valerie On 05/28/14 13:39, Ivan Gerasimov wrote: Hello! The argument 'reset' of javax.smartcardio.Card#disconnect has the reverse logic: When it is true, the card is not reset and vice versa. Would you please help review the trivial fix for this issue? BUGURL: https://bugs.openjd

Re: RFR [8043720] (smartcardio) Native memory should be handled more accurately

2014-05-28 Thread Valerie (Yu-Ching) Peng
Changes look fine. Thanks, Valerie On 05/28/14 14:00, Ivan Gerasimov wrote: One additional change: In pcsc_multi2jstring() it is better to make sure the whole parsed buffer is null-terminates. This way we can guarantee that in the following line we will not access memory outside the buffer:

Re: GSSCredential inside Subject?

2014-05-28 Thread Valerie (Yu-Ching) Peng
AFAIK, this searchSubject utility function is looking for the requested GSSCredentialSpi objects (not GSSCredentialImpl object which contains a Hashtable of GSSCredentialSpi objects and their keys). When creating the Subject object ourselves, we only convert and stores Kerberos-specific cred

Change in PKIX certificate chain validation Java 6->Java 7

2014-05-28 Thread Robert Gibson
Hi, I was researching a StackOverflow question [1] and I came across some behaviour with the validation of certificate chains that I don't quite understand. I have a chain consisting of a root certificate with validity period 1999->2019; an intermediate certificate with validity period 2004->202

Re: Change in PKIX certificate chain validation Java 6->Java 7

2014-05-28 Thread Jason Uh
Hi Robert, This was actually fixed in https://bugs.openjdk.java.net/browse/JDK-8021804 and is pending a backport to JDK 7u. Thanks, Jason On 5/28/14 4:04 PM, Robert Gibson wrote: Hi, I was researching a StackOverflow question [1] and I came across some behaviour with the validation of cert

Re: GSSCredential inside Subject?

2014-05-28 Thread Wang Weijun
On May 29, 2014, at 7:25, Valerie (Yu-Ching) Peng wrote: > > AFAIK, this searchSubject utility function is looking for the requested > GSSCredentialSpi objects (not GSSCredentialImpl object which contains a > Hashtable of GSSCredentialSpi objects and their keys). The method returns GSSCrede