Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6390230

JRE 1.5.0._06 HANGS IE : PROBLEM WITH MULTIPLE SAS/GRAPH SIGNED APPLETS

    Details

    • Type: Bug
    • Status: Closed
    • Priority: P2
    • Resolution: Duplicate
    • Affects Version/s: 5.0u6
    • Fix Version/s: None
    • Component/s: deploy
    • Labels:
      None
    • Subcomponent:
    • CPU:
      x86
    • OS:
      windows_xp

      Description

      Someone installed JRE 1.5.0_06 today and tried to bring up three of our SAS/Graph applets in one browser session - the Map, Graph, and Contour applets.

      These are signed applets, and he got the "Do you want to run the application" message from the JRE.

      He is able to click the Run button on the first message, but then things lock up, and he has to kill IE to free it up.

      Two applets work OK, but the problem occurs when he adds a third applet.

      If you choose to always trust SAS so the message doesn't appear, then the problem won't occur.

      Also, the same html file works fine on Firefox 1.5.0.1.

      Also attached is a .jpg of the screen when things are locked.

      Internet Explorer: 6.0.2900.2180.spsp_sp2_rtm.040803-2158CO Update Version: SP2

      ---------------------------------

      Testing on Different Machine:

      "I tried this on another PC (my testing PC) and found that there was no hang this
      time, but the Internet Explorer Information Bar restricted the file so active
      content could not access my computer.

      After I right clicked on the Information Bar and selected Allow Blocked Content,
      then I was able to run the signed applets, and the graphs came up fine.

      But, if I allow active content in IE by doing the following steps, then IE hangs
      after you run the first signed applet.

      Here are the instructions for allowing active content in IE:

      From Internet Explorer, click on Tools -> Internet Options
      On the Advanced tab, check the box in the Security section by "Allow active
      content to run in files on My Computer".
      -------------------------------

      Testing with previous Update releases:

      JRE 1.5.0_01 - the problem does not occur
      JRE 1.5.0_02 - the problem does not occur
      JRE 1.5.0_03 - the problem does not occur
      JRE 1.5.0_04 - Not tested
      JRE 1.5.0_05 - the problem does not occur
      JRE 1.5.0_06 - the problem does occur

      Note that the security window asking if you want to trust the signed applet by
      SAS Institute changed between 1.5.0_05 and 1.5.0_06. See security_1.5.0_05.jpg
      and security_1.5.0_06.jpg in the attachments.

      The 1.5.0_06 window says "The applications digital signature has an error. Do
      you want to run the application?" IÂ'm using the same jars for plug-in _05 and
      _06, so there must be some new error checking for _06.


      Some other testing that I tried:

      The problem didn't occur with Java plug-in 1.4.2_09 when using our v9.1.3 SP4
      jars.

      It does occur with plug-in 1.5.0_06 when using our v9.1.3 SP4 jars.



      --------------------------


      1) Are all 3 applets signed by SAS?

      YES

      2) Does the dialog "The application's digital signature has an error"
      pop up for the first 2 applets? Can customer click "run" on this dialog for the first 2 applets without seeing any hang?

      The second dialog freezes




      ###@###.###
      This happens only with 1.5.0_06 release using IE. could this be related to the security bulletin 00128 ("Secure Static Versioning") changes introduced in 1.5.0_06?

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                dgu Dennis Gu (Inactive)
                Reporter:
                rverabel Raghu Verabelli (Inactive)
              • Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Imported:
                  Indexed: