JDK-6589656 : Bundle security improvements for JKernel
  • Type: Bug
  • Component: deploy
  • Sub-Component: deployment_toolkit
  • Affected Version: 6u4
  • Priority: P3
  • Status: Closed
  • Resolution: Fixed
  • OS: generic
  • CPU: generic
  • Submitted: 2007-08-06
  • Updated: 2012-10-18
  • Resolved: 2008-06-13
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 6
6u10 b02Fixed
Related Reports
Relates :  
JDK-6572493 - Bundle security components for JKernel
Description
Incorporate review feedback into security pieces of JKernel:

   1) Avoid unnecessary code:
       a) Optimization in StandaloneByteArrayAccess (stripped out)
       b) Usage of custom digest stream classes (omitted)
   2) sun.jkernel.StandaloneSHA class should be package private
   3) StandaloneMessageDigest should guard itself against bypassing its factory method.
   4) DownloadManager and SplitJRE should use StandaloneMessageDigest directly.
   5) Unit tests accidently left out of the external code review and integration
      putback are included, with a few small improvements. (See the CR 6572493 j2se
      webrev URL for the originals)
        test/sun/jkernel/DownloadManager/ParallelClassloading.java
        test/sun/jkernel/StandaloneMessageDigest/ByteArrayToFromHexDigits.java
        test/sun/jkernel/StandaloneMessageDigest/MeasureStandaloneMessageDigest.java
        test/sun/jkernel/StandaloneMessageDigest/StandaloneMessageDigest.java
Comments
EVALUATION Need to get this in final state ASAP.
07-08-2007