Bug ID: JDK-8292739 Invalid legacy entries may be returned by Provider.getServices() call

Type: Bug
Component: security-libs
Sub-Component: java.security

Priority: P4
Status: Resolved
Resolution: Fixed
OS: generic
CPU: generic

Submitted: 2022-08-22
Updated: 2024-07-25
Resolved: 2022-08-24

Versions (Unresolved/Resolved/Fixed)

The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.

JDK 17	JDK 20
17.0.13Fixed	20 b12Fixed

Just like Provider.getService(String, String) impl which checks for validness of legacy entry before returning it, Provider.getServices() impl should also check for validness and only include valid legacy entries in the returned set.

[jdk17u-fix-request] Approval Request from Dan Lutker Backporting JDK-8276660 to fix issue with Provider registration not taking immediate effect. Ran tier1-4 and reproducer of the issue without a problem. Also pulling in followups of JDK-8292739 and JDK-8279222 as to not introduce bugs. This was not clean and required reverting and re-applying JDK-8254711 to get the correct code.
23-07-2024
A pull request was submitted for review. Branch: master URL: https://git.openjdk.org/jdk17u-dev/pull/2730 Date: 2024-07-19 18:46:32 +0000
22-07-2024
Changeset: 14623c60 Author: Valerie Peng <valeriep@openjdk.org> Date: 2022-08-24 18:23:19 +0000 URL: https://git.openjdk.org/jdk/commit/14623c6087105a4228ff190e9e27372729b2bc4b
24-08-2022
A pull request was submitted for review. URL: https://git.openjdk.org/jdk/pull/9992 Date: 2022-08-24 00:07:21 +0000
24-08-2022
Check and remove invalid legacy entries inside Provider.getServices() impl.
22-08-2022