Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6589656

Bundle security improvements for JKernel

    Details

    • Subcomponent:
    • Resolved In Build:
      b02
    • CPU:
      generic
    • OS:
      generic
    • Verification:
      Not verified

      Description

      Incorporate review feedback into security pieces of JKernel:

         1) Avoid unnecessary code:
             a) Optimization in StandaloneByteArrayAccess (stripped out)
             b) Usage of custom digest stream classes (omitted)
         2) sun.jkernel.StandaloneSHA class should be package private
         3) StandaloneMessageDigest should guard itself against bypassing its factory method.
         4) DownloadManager and SplitJRE should use StandaloneMessageDigest directly.
         5) Unit tests accidently left out of the external code review and integration
            putback are included, with a few small improvements. (See the CR 6572493 j2se
            webrev URL for the originals)
              test/sun/jkernel/DownloadManager/ParallelClassloading.java
              test/sun/jkernel/StandaloneMessageDigest/ByteArrayToFromHexDigits.java
              test/sun/jkernel/StandaloneMessageDigest/MeasureStandaloneMessageDigest.java
              test/sun/jkernel/StandaloneMessageDigest/StandaloneMessageDigest.java

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                psoper Pete Soper (Inactive)
                Reporter:
                psoper Pete Soper (Inactive)
              • Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Imported:
                  Indexed: