None.
| Issue |
Description |
| JDK-8290368 |
Introduce LDAP and RMI Protocol Specific Object Factory Filters to JNDI Implementation
In this release, new system and security properties are introduced to allow more granular control over the set of JNDI object factories allowed to reconstruct Java objects from JNDI/LDAP and JNDI/RMI contexts:
The new jdk.jndi.ldap.object.factoriesFilter property specifies which object factory classes are allowed to instantiate Java objects from object references returned by JNDI/LDAP contexts. Its default value only allows object factories defined in the java.naming module.
The new jdk.jndi.rmi.object.factoriesFilter property specifies which object factory classes are allowed to instantiate Java objects from object references returned by JNDI/RMI contexts. Its default value only allows object factories defined in the jdk.rmi module.
These new factory filter properties complement the jdk.jndi.object.factoriesFilter global factories filter property by determining if a specific object factory is permitted to instantiate objects for the LDAP or RMI protocols used in JNDI.
An application depending on custom object factories to recreate Java objects from JNDI/LDAP or JNDI/RMI contexts will need to supply a security or system property with an updated value to allow such third-party object factories to reconstruct LDAP or RMI objects. If usage of a factory is denied, the lookup operation may result in a plain instance of javax.naming.Reference instance returned, which may lead to a ClassCastException being thrown in the application.
For more information, see the java.naming and jdk.naming.rmi module-info documentation.
|
|
Introduce LDAP and RMI Protocol Specific Object Factory Filters to JNDI Implementation
In this release, new system and security properties are introduced to allow more granular control over the set of JNDI object factories allowed to reconstruct Java objects from JNDI/LDAP and JNDI/RMI contexts:
The new jdk.jndi.ldap.object.factoriesFilter property specifies which object factory classes are allowed to instantiate Java objects from object references returned by JNDI/LDAP contexts. Its default value only allows object factories defined in the java.naming module.
The new jdk.jndi.rmi.object.factoriesFilter property specifies which object factory classes are allowed to instantiate Java objects from object references returned by JNDI/RMI contexts. Its default value only allows object factories defined in the jdk.naming.rmi module.
These new factory filter properties complement the jdk.jndi.object.factoriesFilter global factories filter property by determining if a specific object factory is permitted to instantiate objects for the LDAP or RMI protocols used in JNDI.
An application depending on custom object factories to recreate Java objects from JNDI/LDAP or JNDI/RMI contexts will need to supply a security or system property with an updated value to allow such third-party object factories to reconstruct LDAP or RMI objects. If usage of a factory is denied, the lookup operation may result in a plain instance of javax.naming.Reference instance returned, which may lead to a ClassCastException being thrown in the application.
|
|
Introduce LDAP and RMI Protocol Specific Object Factory Filters to JNDI Implementation
In this release, new system and security properties are introduced to allow more granular control over the set of JNDI object factories allowed to reconstruct Java objects from JNDI/LDAP and JNDI/RMI contexts:
The new jdk.jndi.ldap.object.factoriesFilter property specifies which object factory classes are allowed to instantiate Java objects from object references returned by JNDI/LDAP contexts. By default, only object factories defined with the setting of the property 'jdk.jndi.ldap.object.factoriesFilter=com.sun.jndi.ldap.*;!' are allowed.
The new jdk.jndi.rmi.object.factoriesFilter property specifies which object factory classes are allowed to instantiate Java objects from object references returned by JNDI/RMI contexts. By default, only object factories defined with the setting of the property jdk.jndi.rmi.object.factoriesFilter=com.sun.jndi.rmi.**;!* are allowed.
These new factory filter properties complement the jdk.jndi.object.factoriesFilter global factories filter property by determining if a specific object factory is permitted to instantiate objects for the LDAP or RMI protocols used in JNDI.
An application depending on custom object factories to recreate Java objects from JNDI/LDAP or JNDI/RMI contexts will need to supply a security or system property with an updated value to allow such third-party object factories to reconstruct LDAP or RMI objects. If usage of a factory is denied, the lookup operation may result in a plain instance of javax.naming.Reference instance returned, which may lead to a ClassCastException being thrown in the application.
|
| Priority |
Bug |
Summary |
| P3 |
JDK-8042381 |
Test javax/swing/JRootPane/4670486/bug4670486.java fails with Action has not been received |
| P4 |
JDK-8328089 |
Automate javax/swing/JTable/4222153/bug4222153.java applet test |
| P4 |
JDK-8328087 |
Automate javax/swing/JTable/TAB/TAB.java applet test |
| P4 |
JDK-8327969 |
Convert javax/swing/border/Test6910490.java applet test to main |
| P4 |
JDK-8327750 |
Convert javax/swing/JFileChooser/FileFilterDescription/FileFilterDescription.java applet test to main |
| P4 |
JDK-8327751 |
Convert javax/swing/JInternalFrame/6726866/bug6726866.java applet test to main |
| P4 |
JDK-8327752 |
Convert javax/swing/JOptionPane/4174551/bug4174551.java applet to main |
| P4 |
JDK-8327754 |
Convert javax/swing/JPopupMenu/7160604/bug7160604.java applet to main |
| P4 |
JDK-8327755 |
Convert javax/swing/JScrollBar/8039464/Test8039464.java applet to main |
| P4 |
JDK-8327872 |
Convert javax/swing/JToolTip/4644444/bug4644444.java applet test to main |
| P4 |
JDK-8327874 |
Convert javax/swing/JTree/4314199/bug4314199.java applet test to main |
| P4 |
JDK-8280818 |
Expand bug8033699.java to iterate over all LaFs |
| P4 |
JDK-8345767 |
javax/swing/JSplitPane/4164779/JSplitPaneKeyboardNavigationTest.java fails in ubuntu22.04 |
| P4 |
JDK-8344338 |
javax/swing/JTextArea/bug4265784.java fails on Ubuntu 24.04.1 |
| P4 |
JDK-8351884 |
Refactor bug8033699.java test code |
| P4 |
JDK-8326606 |
Test javax/swing/text/BoxView/6494356/bug6494356.java performs a synchronization on a value based class |
| Priority |
Bug |
Summary |
| P3 |
JDK-8299338 |
AssertionError in ResponseSubscribers$HttpResponseInputStream::onSubscribe |
| P3 |
JDK-8294916 |
Cancelling a request must eventually cause its response body subscriber to be unregistered |
| P3 |
JDK-8277969 |
HttpClient SelectorManager shuts down when custom Executor rejects a task |
| P3 |
JDK-8297424 |
java/net/httpclient/AsyncExecutorShutdown.java fails in AssertionError due to misplaced assert |
| P3 |
JDK-8298340 |
java/net/httpclient/CancelRequestTest.java fails with AssertionError: Found some subscribers for testPostInterrupt |
| P3 |
JDK-8298931 |
java/net/httpclient/CancelStreamedBodyTest.java fails with AssertionError due to Pending TCP connections: 1 |
| P4 |
JDK-8274453 |
(sctp) com/sun/nio/sctp/SctpChannel/CloseDescriptors.java test should be resilient to lsof warnings |
| P4 |
JDK-8355578 |
[java.net] Use @requires tag instead of exiting based on "os.name" property value |
| P4 |
JDK-8353662 |
Add test for non-local file URL fallback to FTP |
| P4 |
JDK-8276681 |
Additional malformed Javadoc inline tags in JDK source |
| P4 |
JDK-8286194 |
ExecutorShutdown test fails intermittently |
| P4 |
JDK-8301255 |
Http2Connection may send too many GOAWAY frames |
| P4 |
JDK-8288746 |
HttpClient resources could be reclaimed more eagerly |
| P4 |
JDK-8301004 |
httpclient: Add more debug to HttpResponseInputStream |
| P4 |
JDK-8297075 |
java/net/httpclient/CancelStreamedBodyTest.java fails with "java.lang.AssertionError: WARNING: tracker for HttpClientImpl(1) has outstanding operations" |
| P4 |
JDK-8217914 |
java/net/httpclient/ConnectTimeoutHandshakeSync.java failed on connection refused while doing POST |
| P4 |
JDK-8297200 |
java/net/httpclient/SpecialHeadersTest.java failed once in AssertionError due to selector thread remaining alive |
| P4 |
JDK-8301169 |
java/net/httpclient/ThrowingSubscribersAsInputStream.java,ThrowingSubscribersAsInputStreamAsync.java, and other httpclient tests failing on windows: Unable to establish loopback connection |
| P4 |
JDK-8358617 |
java/net/HttpURLConnection/HttpURLConnectionExpectContinueTest.java fails with 403 due to system proxies |
| P4 |
JDK-8314978 |
Multiple server call from connection failing with expect100 in getOutputStream |
| P4 |
JDK-8302635 |
Race condition in HttpBodySubscriberWrapper when cancelling request |
| P4 |
JDK-8297149 |
REDO JDK-8296889: Race condition when cancelling a request |
| P4 |
JDK-8317522 |
Test logic for BODY_CF in AbstractThrowingSubscribers.java is wrong |
| P4 |
JDK-8343074 |
test/jdk/com/sun/net/httpserver/docs/test1/largefile.txt could be generated |
| P4 |
JDK-8355475 |
UNCTest should use an existing UNC path |
| P4 |
JDK-8276401 |
Use blessed modifier order in java.net.http |
| P4 |
JDK-8352895 |
UserCookie.java runs wrong test class |
| P5 |
JDK-8275079 |
Remove unnecessary conversion to String in java.net.http |
| Priority |
Bug |
Summary |
| P3 |
JDK-8273539 |
[PPC64] gtest build error after JDK-8264207 |
| P3 |
JDK-8354941 |
Build failure with glibc 2.42 due to uabs() name collision |
| P3 |
JDK-8342330 |
C2: "node pinned on loop exit test?" assert failure |
| P3 |
JDK-8274039 |
codestrings gtest fails when hsdis is present |
| P3 |
JDK-8294839 |
Disable StressLongCountedLoop in compiler/loopopts/TestRemoveEmptyLoop.java |
| P4 |
JDK-8350483 |
AArch64: turn on signum intrinsics by default on Ampere CPUs |
| P4 |
JDK-8330106 |
C2: VectorInsertNode::make() shouldn't call ConINode::make() directly |
| P4 |
JDK-8345471 |
Clean up compiler/intrinsics/sha/cli tests |
| P4 |
JDK-8264207 |
CodeStrings does not honour fixed address assumption. |
| P4 |
JDK-8295005 |
compiler/loopopts/TestRemoveEmptyLoop.java fails with release VMs after JDK-8294839 |
| P4 |
JDK-8315505 |
CompileTask timestamp printed can overflow |
| P4 |
JDK-8295210 |
IR framework should not whitelist -XX:-UseTLAB |
| Priority |
Bug |
Summary |
| P2 |
JDK-8340389 |
vmTestbase/gc/gctests/PhantomReference/phantom001/TestDescription.java Test exit code: 97 with -Xcomp UseAVX=3 |
| P3 |
JDK-8340146 |
ZGC: TestAllocateHeapAt.java should not run with UseLargePages |
| P4 |
JDK-8332494 |
java/util/zip/EntryCount64k.java failing with java.lang.RuntimeException: '\\A\\Z' missing from stderr |
| P4 |
JDK-8297499 |
Parallel: Missing iteration over klass when marking objArrays/objArrayOops during Full GC |
| P4 |
JDK-8285773 |
Replace Algorithms.eatMemory(...) with WB.fullGC() in vmTestbase/gc/gctests/ReferencesGC/ReferencesGC.java |
| P4 |
JDK-8285951 |
Replace Algorithms.eatMemory(...) with WB.fullGC() in vmTestbase_vm_gc_ref tests |
| P4 |
JDK-8297740 |
runtime/ClassUnload/UnloadTest.java failed with "Test failed: should still be live" |
| P5 |
JDK-8345173 |
BlockLocationPrinter::print_location misses a ResourceMark |
| Priority |
Bug |
Summary |
| P2 |
JDK-8351997 |
AArch64: Interpreter volatile reference stores with G1 are not sequentially consistent |
| P3 |
JDK-8319932 |
[JVMCI] class unloading related tests can fail on libgraal |
| P3 |
JDK-8357793 |
[PPC64] VM crashes with -XX:-UseSIGTRAP -XX:-ImplicitNullChecks |
| P3 |
JDK-8344671 |
Few JFR streaming tests fail with application not alive error on MacOS 15 |
| P3 |
JDK-8313083 |
Print 'rss' and 'cache' as part of the container information |
| P3 |
JDK-8297106 |
Remove the -Xcheck:jni local reference capacity checking |
| P4 |
JDK-8286660 |
codestrings gtest fails on AArch64: "udf" in padding |
| P4 |
JDK-8276175 |
codestrings.validate_vm gtest still broken on ppc64 after JDK-8276046 |
| P4 |
JDK-8330022 |
Failure test/hotspot/jtreg/vmTestbase/nsk/sysdict/share/BTreeTest.java: Could not initialize class java.util.concurrent.ThreadLocalRandom |
| P4 |
JDK-8350767 |
Fix -Wzero-as-null-pointer-constant warnings in nsk jni stress tests |
| P4 |
JDK-8325910 |
Rename jnihelper.h |
| P4 |
JDK-8334320 |
Replace vmTestbase/metaspace/share/TriggerUnloadingWithWhiteBox.java with ClassUnloadCommon from testlibrary |
| P4 |
JDK-8354327 |
Rewrite runtime/LoadClass/LoadClassNegative.java |
| P4 |
JDK-8357968 |
RISC-V: Interpreter volatile reference stores with G1 are not sequentially consistent |
| P4 |
JDK-8283467 |
runtime/Thread/StopAtExit.java needs updating |
| P4 |
JDK-8352946 |
SEGV_BND signal code of SIGSEGV missing from our signal-code table |
| P4 |
JDK-8353568 |
SEGV_BNDERR signal code adjust definition |