RFR: [XS] 8215411: some GetByteArrayElements calls miss corresponding Release

2018-12-17 Thread Baesken, Matthias
Hello, please review the following change. I noticed that we miss at some places (for example in case of early returns) where GetByteArrayElements is used, the corresponding ReleaseByteArrayElements call. In VirtualMachineImpl.c I also removed a check for isCopy (is the returned byte array a

Re: Code Review Request, JDK-8209333 Socket reset issue for TLS 1.3 socket close

2018-12-17 Thread Xue-Lei Fan
ping ... On 12/10/2018 1:14 PM, Xue-Lei Fan wrote: Hi, Please review the TLS 1.3 half-close issue in JDK.     http://cr.openjdk.java.net/~xuelei/8209333/webrev.00/ While trying to duplex close a TLS connection upon the half-close policy, there might be pending receiving data in the closing

Re: Possible bug in SSLEngine / SSLSession implementation

2018-12-17 Thread Norman Maurer
So is what I see something that should be fixed in general ? Like I said it does not matter if its TLSv1.3 or earlier. Bye Norman > On 12. Dec 2018, at 15:42, Norman Maurer wrote: > > Hi Jamil, > > This was just noticed during a test which uses TLS1.2. > >> On 12. Dec 2018, at 15:35, Jamil

Re: Code Review Request, JDK-8209333 Socket reset issue for TLS 1.3 socket close

2018-12-17 Thread Jamil Nimeh
Hi Xuelei, just a couple questions: * SSLSocketImpl o 611: Are you sure conContext.inputRecord should go into a try-with-resources?  As far as I can tell, the inheritence chain is SSLSocketInputRecord->InputRecord and that directly or by extension implements the SSLReco

Re: Code Review Request, JDK-8209333 Socket reset issue for TLS 1.3 socket close

2018-12-17 Thread Xue-Lei Fan
On 12/17/2018 11:28 AM, Jamil Nimeh wrote: Hi Xuelei, just a couple questions: * SSLSocketImpl o 611: Are you sure conContext.inputRecord should go into a try-with-resources?  As far as I can tell, the inheritence chain is SSLSocketInputRecord->InputRecord and that direct

Re: 12 RFR(M) 8214583: AccessController.getContext may return wrongvalue after JDK-8212605

2018-12-17 Thread Bernd Eckenfels
In a related matter, are the existing tests reliable to detect the Situation (at least for the Default runtime/compiler behavior). i.e. are the testcases covering stack Evaluation in a compiled context where EA would elimiiminate it? Gruss Bernd -- http://bernd.eckenfels.net Von: dean.l...@ora

Re: Code Review Request JDK-8215443: The use of TransportContext.fatal() leads to bad coding style

2018-12-17 Thread Anthony Scarpino
It looks like in TransportContext.java:68, you had a mistype that added "fa" to the end of a comment. Also in fatal():267, did you plan to return the exception and have the calling method throw the exception? As is, the exception is never return and fatal() continues to throw the exceptions.

Re: RFR JDK-7092821 "java.security.Provider.getService() is synchronized and became scalability bottleneck"

2018-12-17 Thread Sean Mullan
On 12/14/18 1:57 PM, Nico Williams wrote: On Fri, Dec 14, 2018 at 02:09:50PM +, Bernd Eckenfels wrote: Maybe a comment should point to the description of this pattern (if it applies): https://www.oracle.com/technetwork/java/seccodeguide-139067.html#4-5 +1 Do document what initialized/chec

Re: Code Review Request, JDK-8209333 Socket reset issue for TLS 1.3 socket close

2018-12-17 Thread Jamil Nimeh
Hi Xuelei, comments in-line. On 12/17/2018 12:11 PM, Xue-Lei Fan wrote: On 12/17/2018 11:28 AM, Jamil Nimeh wrote: Hi Xuelei, just a couple questions:   * SSLSocketImpl   o 611: Are you sure conContext.inputRecord should go into a     try-with-resources?  As far as I can tell, the inhe

Re: Possible bug in SSLEngine / SSLSession implementation

2018-12-17 Thread Jamil Nimeh
Yes, I think so.  I'm not sure if we're going to make a separate issue for this specifically or handle it as part of a larger session management improvement we're working on. --Jamil On 12/17/2018 11:13 AM, Norman Maurer wrote: So is what I see something that should be fixed in general ? Lik

Re: RFR: [XS] 8215411: some GetByteArrayElements calls miss corresponding Release

2018-12-17 Thread David Holmes
Hi Matthias, On 17/12/2018 6:59 pm, Baesken, Matthias wrote: Hello, please review the following change. I noticed that we miss at some places (for example in case of early returns) where GetByteArrayElements is used, the corresponding ReleaseByteArrayElements call. In VirtualMachineImpl.c I

12 RFR(XS) 8214329: SwingMark SubMenus 9% regression in 12-b19 on Linux client

2018-12-17 Thread dean . long
https://bugs.openjdk.java.net/browse/JDK-8214329 http://cr.openjdk.java.net/~dlong/8214329/webrev/ In "8212605: Pure-Java implementation of AccessController.doPrivileged", the stackwalk in JVM_GetStackAccessControlContext was changed from using a vframeStream to using a javaVFrame, so that it c

Re: 12 RFR(M) 8214583: AccessController.getContext may return wrong value after JDK-8212605

2018-12-17 Thread Mandy Chung
This looks okay to me. Mandy On 12/14/18 4:59 PM, dean.l...@oracle.com wrote: https://bugs.openjdk.java.net/browse/JDK-8214583 http://cr.openjdk.java.net/~dlong/8214583/webrev This change includes two new regression test that demonstrate the problem, and a fix that allows the tests to pass.

Re: 12 RFR(M) 8214583: AccessController.getContext may return wrong value after JDK-8212605

2018-12-17 Thread dean . long
Thanks Mandy. dl On 12/17/18 2:55 PM, Mandy Chung wrote: This looks okay to me. Mandy On 12/14/18 4:59 PM, dean.l...@oracle.com wrote: https://bugs.openjdk.java.net/browse/JDK-8214583 http://cr.openjdk.java.net/~dlong/8214583/webrev This change includes two new regression test that demonstr

Re: RFR: [XS] 8215411: some GetByteArrayElements calls miss corresponding Release

2018-12-17 Thread David Holmes
Correction ... On 18/12/2018 8:25 am, David Holmes wrote: Hi Matthias, On 17/12/2018 6:59 pm, Baesken, Matthias wrote: Hello, please review the following change. I noticed that we miss at some places (for example in case of early returns) where GetByteArrayElements is used,  the corresponding

RFR[12] JDK-8214096: sun.security.util.SignatureUtil passes null parameter, so JCE validation fails

2018-12-17 Thread Valerie Peng
Any one has time to review this straightforward fix? Details on cause and fix is elaborated in the link below: Bug: https://bugs.openjdk.java.net/browse/JDK-8214096 Webrev can be found at http://cr.openjdk.java.net/~valeriep/8214096/webrev.00/ Regards, Valerie

Re: Code Review Request JDK-8215443: The use of TransportContext.fatal() leads to bad coding style

2018-12-17 Thread Xue-Lei Fan
On 12/17/2018 1:17 PM, Anthony Scarpino wrote: It looks like in TransportContext.java:68, you had a mistype that added "fa" to the end of a comment. Oops, I will update it. Also in fatal():267, did you plan to return the exception and have the calling method throw the exception?  As is, the

Re: RFR[12] JDK-8214096: sun.security.util.SignatureUtil passes null parameter, so JCE validation fails

2018-12-17 Thread Weijun Wang
Hi Valerie, Please put lines 87 and 100 into the if-not-null block. Otherwise fine. Do you think we can enhance the Signature::setParameter method and claim a null parameter is not meaningful at all and should not have any effect on the internal state of the signature object? Otherwise an appli

Re: RFR: 8214570 : Use {@systemProperty} for definitions of system properties

2018-12-17 Thread Alan Bateman
This looks okay to me (cc'ing security-dev as that is where the smart card I/O API is maintained) On 18/12/2018 05:23, Priya Lakshmi Muthuswamy wrote: Hi, Kindly review the changes for https://bugs.openjdk.java.net/browse/JDK-8214570 webrev : http://cr.openjdk.java.net/~pmuthuswamy/8214570/