| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
| |
CVE-2019-2602
CVE-2019-2684
CVE-2019-2698
|
|
|
|
|
|
|
| |
In new attr the only needed header attr/xattr.h is removed as obsolete.
The new standard has been for a long time to use sys/xattr.h. Fix openjdk
to use this header and remove the now unneeded attr-dev dependency.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- CVE-2018-3136
- CVE-2018-3139
- CVE-2018-3149
- CVE-2018-3169
- CVE-2018-3180
- CVE-2018-3214
- CVE-2018-13785
This commit upgrades OpenJDK7 to the latest release, 7u201. This
contains many security fixes, additional information can be found at: http://blog.fuseyism.com/index.php/2019/01/03/security-icedtea-2-6-16-for-openjdk-7-released/
|
|
|
|
|
|
|
| |
There is at least one (possibly more) places where signed overflow
needs to work or things break. It is formally UB, but fortunately
there is compiler flag to not break things when possible. Fixes
build on x86_64.
|
|
|
|
| |
use bash for icedtea-bootstrap
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This commit updates $license variable in all APKBUILDs to comply with
short names specified by SPDX version 3.0 [1] where possible. It was
done using find-and-replace method on substrings inside $license
variables.
Only license names were updated, not "expressions" specifying relation
between the licenses (e.g. "X and Y", "X or Y", "X and (Y or Z)") or
exceptions (e.g. "X with exceptions").
Many licenses have a version or multiple variants, e.g. MPL-2.0,
BSD-2-Clause, BSD-3-Clause. However, $license in many aports do not
contain license version or variant. Since there's no way how to infer
this information just from abuild, it were left without the variant
suffix or version, i.e. non SPDX compliant.
GNU licenses (AGPL, GFDL, GPL, LGPL) are especially complicated. They
exist in two variants: -only (formerly e.g. GPL-2.0) and -or-later
(formerly e.g. GPL-2.0+). We did not systematically noted distinguish
between these variants, so GPL-2.0, GPL2, GPLv2 etc. may mean
GPL-2.0-only or GPL-2.0-or-later. Thus GNU licenses without "+" (e.g.
GPL2+) were left without the variant suffix, i.e. non SPDX compliant.
Note: This commit just fixes format of the license names, no
verification has been done if the specified license information is
actually correct!
[1]: https://spdx.org/licenses/
|
| |
|
| |
|
|
|
|
|
| |
Musl on Power does not define regs member as a pt_regs pointer type,
hence it's necessary to use member gp_regs instead.
|
|
|
|
|
| |
cpio moved form /bin/cpio to /usr/bin/cpio. The makefiles has the former
hardcoded.
|
| |
|
| |
|
|
|
|
|
| |
Use proper _jarch for ppc64le platform, otherwise it will fails
since _jarch is NULL.
|
|
|
|
| |
This reverts commit 4aca47cd73b84dce2c878e3fb057ee1c2db5990f.
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
S8151921: Improved page resolution
S8155968: Update command line options
S8155973, CVE-2016-5542: Tighten jar checks
S8157176: Improved classfile parsing
S8157739, CVE-2016-5554: Classloader Consistency Checking
S8157749: Improve handling of DNS error replies
S8157753: Audio replay enhancement
S8157759: LCMS Transform Sampling Enhancement
S8157764: Better handling of interpolation plugins
S8158302: Handle contextual glyph substitutions
S8158993, CVE-2016-5568: Service Menu services
S8159495: Fix index offsets
S8159503: Amend Annotation Actions
S8159511: Stack map validation
S8159515: Improve indy validation
S8159519, CVE-2016-5573: Reformat JDWP messages
S8160090: Better signature handling in pack200
S8160094: Improve pack200 layout
S8160098: Clean up color profiles
S8160591, CVE-2016-5582: Improve internal array handling
S8160838, CVE-2016-5597: Better HTTP service
PR3207, RH1367357: lcms2: Out-of-bounds read in Type_MLU_Read()
|
| |
|
|
|
|
| |
This is just a backport of 94969c8a556eedeeafb78a33752ab6b6e6f7f892 from openjdk8.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Build on armhf fails:
```
gcc -DLINUX -D_GNU_SOURCE -DCC_INTERP -DZERO -DARM -DZERO_LIBARCH=\"arm\" -DPRODUCT -I. -I/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/share/vm/prims -I/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/share/vm -I/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/share/vm/precompiled -I/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/cpu/zero/vm -I/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/os_cpu/linux_zero/vm -I/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/os/linux/vm -I/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/os/posix/vm -I../generated -DHOTSPOT_RELEASE_VERSION="\"24.111-b01\"" -DHOTSPOT_BUILD_TARGET="\"product\"" -DHOTSPOT_BUILD_USER="\"buildozer\"" -DHOTSPOT_LIB_ARCH=\"arm\" -DHOTSPOT_VM_DISTRO="\"OpenJDK\"" -DDERIVATIVE_ID="\"IcedTea 2.6.7\"" -DDISTRIBUTION_ID="\"Custom build (Fri Sep 2 06:53:44 GMT 2016)\"" -c -Os -fomit-frame-pointer -pipe -fPIC -DTARGET_OS_FAMILY_linux -DTARGET_ARCH_zero -DTARGET_ARCH_MODEL_zero -DTARGET_OS_ARCH_linux_zero -DTARGET_OS_ARCH_MODEL_linux_zero -DTARGET_COMPILER_gcc -I/usr/lib/libffi-3.2.1/include -std=gnu++98 -fno-rtti -fno-exceptions -D_REENTRANT -fcheck-new -fvisibility=hidden -fno-delete-null-pointer-checks -fno-lifetime-dse -D_LITTLE_ENDIAN -pipe -g -DTARGET_OS_FAMILY_linux -DTARGET_ARCH_zero -DTARGET_ARCH_MODEL_zero -DTARGET_OS_ARCH_linux_zero -DTARGET_OS_ARCH_MODEL_linux_zero -DTARGET_COMPILER_gcc -I/usr/lib/libffi-3.2.1/include -std=gnu++98 -fpic -fno-rtti -fno-exceptions -D_REENTRANT -fcheck-new -fvisibility=hidden -fno-delete-null-pointer-checks -fno-lifetime-dse -D_LITTLE_ENDIAN -pipe -g -O3 -fno-strict-aliasing -DHOTSPOT_ASM -DVM_LITTLE_ENDIAN -DINCLUDE_TRACE=1 -Wpointer-arith -Wsign-compare -Os -fomit-frame-pointer -pipe -fPIC -std=gnu++98 -Wno-error -fno-delete-null-pointer-checks -fno-lifetime-dse -o cppInterpreter_arm.o /home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/cpu/zero/vm/cppInterpreter_arm.S
/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/cpu/zero/vm/arm32JIT.cpp: In function 'void Thumb2_codegen(Thumb2_Info*, unsigned int)':
/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/cpu/zero/vm/arm32JIT.cpp:5720:7: error: duplicate case value
case opc_fast_aldc_w:
^~~~
/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/cpu/zero/vm/arm32JIT.cpp:5719:7: error: previously used here
case opc_return_register_finalizer:
^~~~
/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/cpu/zero/vm/arm32JIT.cpp:6985:7: error: duplicate case value
case opc_return_register_finalizer: {
^~~~
/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/cpu/zero/vm/arm32JIT.cpp:6877:5: error: previously used here
case opc_fast_aldc_w:
^~~~
/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/cpu/zero/vm/arm32JIT.cpp: In function 'void Thumb2_Initialize()':
/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/cpu/zero/vm/arm32JIT.cpp:8188:34: error: overloaded function with no contextual type information
mov_imm(&codebuf, ARM_IP, (u32)fmod);
^~~~
make[7]: *** [/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/make/linux/makefiles/rules.make:150: arm32JIT.o] Error 1
```
http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
There's some problem with busybox 1.25.0-r5, the build fails with error:
```
bootstrap/jdk1.6.0/bin/javac -J-XX:ThreadStackSize=1664 -J-XX:-PrintVMOptions -J-XX:+UnlockDiagnosticVMOptions -J-XX:-LogVMOutput -J-Xmx512m -J-Xms512m -J-XX:PermSize=32m -J-XX:MaxPermSize=160m -g -source 7 -target 7 -encoding ascii -Xbootclasspath:/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.3/openjdk.build-boot/classes -sourcepath /home/buildozer/aports/community/openjdk7/src/icedtea-2.6.3/generated.build:../../../src/solaris/classes:../../../src/share/classes -d /home/buildozer/aports/community/openjdk7/src/icedtea-2.6.3/openjdk.build-boot/classes @/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.3/openjdk.build-boot/tmp/sun/sun.awt.X11/xawt/.classes.list.filtered
Annotation processing got disabled, since it requires a 1.6 compliant JVM
----------
1. ERROR in /home/buildozer/aports/community/openjdk7/src/icedtea-2.6.3/openjdk-boot/jdk/src/solaris/classes/sun/awt/X11/XWarningWindow.java (at line 64)
icons[0][0] = new IconInfo(sun.awt.AWTIcon32_security_icon_bw16_png.security_icon_bw16_png);
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
sun.awt.AWTIcon32_security_icon_bw16_png cannot be resolved to a variable
----------
2. ERROR in /home/buildozer/aports/community/openjdk7/src/icedtea-2.6.3/openjdk-boot/jdk/src/solaris/classes/sun/awt/X11/XWarningWindow.java (at line 65)
icons[0][1] = new IconInfo(sun.awt.AWTIcon32_security_icon_interim16_png.security_icon_interim16_png);
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
sun.awt.AWTIcon32_security_icon_interim16_png cannot be resolved to a variable
----------
...
32. ERROR in /home/buildozer/aports/community/openjdk7/src/icedtea-2.6.3/openjdk-boot/jdk/src/solaris/classes/sun/awt/X11/XWindowPeer.java (at line 438)
defaultIconInfo.add(new IconInfo(sun.awt.AWTIcon64_java_icon48_png.java_icon48_png));
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
sun.awt.AWTIcon64_java_icon48_png cannot be resolved to a variable
----------
```
This means that files AWTIcon*.java are missing, they haven't been
generated for some unknown reason.
I verified that the build works on edge with busybox 1.24.2-r11 (from v3.4).
The fix involves installing coreutils, so it's more a workaround, but
IcedTea's build system is very complex, so finding the root cause would be
very difficult and time consuming.
Note: Installing just GNU sed didn't help.
|
| |
|
| |
|
| |
|
|
|
|
| |
bootstrapping icedtea seems to have parallel issues.
|
|
|
|
|
| |
fix duplicate 'provides = so:openjdk7:libjvm.so=0' due to abuild
recently got support for sonameprefix.
|
|
|