Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8132652

Java_sun_nio_ch_Net_poll passes a long to an int

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: P4
    • Resolution: Fixed
    • Affects Version/s: 8, 9
    • Fix Version/s: 9
    • Component/s: core-libs
    • Subcomponent:
    • Resolved In Build:
      b77
    • CPU:
      x86
    • OS:
      solaris_11

      Backports

        Description

        FULL PRODUCT VERSION :
        $ /java/re/jdk/9/latest/binaries/solaris-x64/bin/java -version
        java version "1.9.0-ea"
        Java(TM) SE Runtime Environment (build 1.9.0-ea-b74)
        Java HotSpot(TM) 64-Bit Server VM (build 1.9.0-ea-b74, mixed mode)


        ADDITIONAL OS VERSION INFORMATION :
        $ uname -a
        SunOS telling 5.11 11.2 i86pc i386 i86pc


        A DESCRIPTION OF THE PROBLEM :
        In http://hg.openjdk.java.net/jdk9/jdk9/jdk/file/5e0789110c5f/src/java.base/unix/native/libnio/ch/Net.c,

            Java_sun_nio_ch_Net_poll(JNIEnv* env, jclass this, jobject fdo, jint events, jlong timeout)

        passes the "timeout" argument to the C library function

            int poll(struct pollfd * fds, nfds_t nfds, int timeout)

        without checking if the value of "timeout" is in the range of a C int, or doing something useful if it is not.

        This *might* be okay, because this "poll" method is internal, and it might be that only int values are passed to it. That *seems* to be the case in, for example http://hg.openjdk.java.net/jdk9/jdk9/jdk/file/5e0789110c5f/src/java.base/share/classes/sun/nio/ch/SocketAdaptor.java, where the instance variable "timeout" is an int, though when it is passed to SocketChannel.poll() it it first widened to a long, which is safe. I have not checked the other callers of the Java_sun_nio_ch_Net_poll method.


        REPRODUCIBILITY :
        This bug can be reproduced rarely.

          Attachments

            Issue Links

              Activity

                People

                Assignee:
                bpb Brian Burkhalter
                Reporter:
                webbuggrp Webbug Group
                Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                  Dates

                  Created:
                  Updated:
                  Resolved: