Bug ID: JDK-6530627 JVM 1.5 aborts intermittently in Internet Explorer

Versions (Unresolved/Resolved/Fixed)

The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.

JDK 6
6-poolResolved

Three UGS customers reports that JVM 1.5 aborts intermittently in Internet Explorer.

Configuration Details: Windows XP SP2, JRE 1.5.0.06

However note that they have been able to replicate the issue on JRE 1.5.0.10. Also note that this issue is not seen on older versions of the JRE like JRE 1.4.2_08.

Please find attached the log file generated when they have a crash.

Details on the error:
User runs thin client and is prompted for login.  After login, the login page clears and IE crashes.

EVALUATION Dennis provided this suggestion for debugging: The problem is happening when loading the IE browser keystore, one way to debug is to try to decrease the size of IE browser keystore, especially for personal keystore. You can ask customer to use IE browser UI to remove some certificate from IE keystore, then see if you can reproduce the bug, if they know which certificate cause the loading fail, then we will be easy to debug our code to see why this certificate cause crash. Will reassign this bug to Dennis since it fits more with his expertise.

12-03-2007

EVALUATION I reviewed the error log and evaluated the native implementation of WIExplorerCertStore.loadCertificates(). Nothing obvious from the code that could cause this intermittent crash. 2 things I would suggest: 1) We make use of MS Win32 API CertGetEnhancedKeyUsage when validating the certificate. This API has a known bug that it would return incorrect number of EKUs when running WinXP, WinNT, and Win2000. Our code relies on the correct number of EKUs to operate; if this is indeed the case, it could cause expected behavior in plugin. The use of more than 100 entries in a single certificate is currently not supported by Microsoft. Customer should review the contents of their current certificate and ensure that it has less than 100 EKU entries. Use 2 or more certificates each contain fewer number of EKUs if necessary. 2) If customer's certificate is small enough and the problem still persists, customer must provide us with a test case and steps to reproduce in order further debug. The error log provided is not enough for us to proceed our investigation.

07-03-2007