Changes in 1.6.0_16 (6u16)
6u16 contains Olson time zone data version 2009i.
Bug Fixes
6862295 hotspot jvmti JDWP threadid changes during debugging session (leading to ignored breakpoints)
Changes in 1.6.0_15 (6u15)
Root Certificates
Root Certificates are included in this release.
* Added one new root certificate and removed 3 root certificates from Entrust. (Refer to 6805338.)
* Added three new root certificates from Keynectis. (Refer to 6845457.)
* Added three new root certificates from Quovadis. (Refer to 6846473.)
Blacklist Entries
This update release includes the following new entry to the Blacklist:
* JNLPAppletLauncher (See Sun Alert 263490 .)
Note: Users should install JDK and JRE 6 Update 15 or later on systems running JDK and JRE 5.0 and SDK and JRE 1.4.2 to take advantage of this blacklist feature. For more information see the Blacklist Jar Feature section in the 6u14 Release Notes.
Debug Issue
Java ™ Virtual Machine Tool Interface (JVM TI) breakpoints are reliable only when either the Parallel Scavenge garbage collector (-XX:+UseParallelGC) or the Parallel Compacting garbage collector (-XX:+UseParallelOldGC) is used.
When other collectors are used, breakpoints may stop functioning, and JVM TI object tags may become unusable after a full GC operation is performed. Java ™ Debug Interface (JDI) ThreadReferences have an embedded thread ID that depends on JVM TI object tags, thus the embedded thread ID may change unexpectedly. This may cause confusion in thread based JDI events.
Note that the Serial garbage collector (-XX:+UseSerialGC) is vulnerable to this problem and is selected by default on some platforms. The work around is to explicitly select the Parallel Scavenge collector using the command line option -XX:+UseParallelGC.
(Refer to 6862295.)
Bug Fixes
This release contains fixes for one or more security vulnerabilities. For more information, please see Sun Alerts 263408 , 263409 , 263428 , 263429 , 263488 , 263489 , and 264648.
Bug fixes for vulnerabilities are listed in the following table.
BugId Category Subcategory Description 6656610 java accessibility AccessibleResourceBundle.getContents exposes mutable static (findbugs)
6656586 java classes_awt Cursor.predefined is protected static mutable (findbugs)
6805231 java classes_awt Security Warning Icon is missing in Windows 2000 Prof from Jdk build 6u12
6818787 java classes_awt It is possible to reposition the security icon too far from the border of the window on X11
6823373 java classes_awt [ZDI-CAN-460] Java Web Start JPEG header parsing needs more scruity
6660539 java classes_beans Introspector cache mutable static
6777487 java classes_beans Encoder allows reading private variables with certain names
6801071 java classes_net Remote sites can compromise user privacy and possibly hijack web session
6801497 java classes_net Proxy is assumed to be immutable but is non-final
6657695 java classes_security AbstractSaslImpl.logger is a static mutable (findbugs)
6824440 java classes_security XML Signature HMAC issue
6657625 java classes_sound RmfFileReader/StandardMidiFileWriter.types are public mutable statics (findbugs)
6738524 java classes_sound JDK13Services allows read access to system properties from untrusted code
6777448 java classes_sound JDK13Services.getProviders creates instances with full privileges
6588003 java classes_swing LayoutQueue mutable statics
6660049 java classes_swing Synth Region.uiToRegionMap/lowerCaseNameMap are mutable statics
6849518 java classes_swing NPE is thrown in jemmy library since 6u15 b01 at javax.swing.plaf.synth.SynthContext.isSubregion()
6656625 java imageio ImageReaderSpi.STANDARD_INPUT_TYPE/ImageWriterSpi.STANDARD_OUTPUT_TYPE are mutable static (findbugs)
6657133 java imageio Mutable statics in imageio plugins (findbugs)
6830335 java jar Java JAR Pack200 Decompression Integer Overflow Vulnerability
6755840 java_plugin plugin Version selection allows old zip and certificate handling to be exploited
6848964 javawebstart general TCK jnlp test jnlp_file/appletDesc/index.html#misc fails with NPE starting 6u15 b01
6862844 javawebstart other java web start ActiveX control security problem caused by ATL PROP_ENTRY macro
6845701 jaxp parse Xerces2 Java XML library infinite loop with malformed XML input
6813167 jax-ws other 6u14 JAX-WS audit mutable static bugs
6736293 jmx classes OpenType checks can be bypassed through finalizer resurrection
6657619 jndi dns DnsContext.debug is public static mutable (findbugs)
Other bug fixes are listed in the following table.
BugId Category Subcategory Description 6786503 hotspot garbage_collector Overflow list performance can be improved
6787254 hotspot garbage_collector Work queue capacity can be increased substantially on some platforms
6805338 java classes_security Add 1 new Entrust root CA cert and remove 3 others with 1024 bit keys
6845457 java classes_security Add root certs for Keynectis CA
6846473 java classes_security Add QuoVadis root CA certs to the JRE
6848984 java classes_util_i18n (tz) Support tzdata2009i
6851214 java classes_util_i18n (tz) New Jordan rule creates a failure for SimpleTimeZone parsing post tzdata2009h
6845077 java install silent JDK should install JRE/Java DB silently
6846531 javawebstart other REGRESSION application from ocie.net does not work with 6.0_14
6461727 jce pkcs11_csp TripleDES KeyGenerators in SunPKCS11 and SunJCE do not agree on key length
Changes in 1.6.0_16 (6u16)
6u16 contains Olson time zone data version 2009i.
Bug Fixes
6862295 hotspot jvmti JDWP threadid changes during debugging session (leading to ignored breakpoints)
Changes in 1.6.0_15 (6u15)
Root Certificates
Root Certificates are included in this release.
* Added one new root certificate and removed 3 root certificates from Entrust. (Refer to 6805338.)
* Added three new root certificates from Keynectis. (Refer to 6845457.)
* Added three new root certificates from Quovadis. (Refer to 6846473.)
Blacklist Entries
This update release includes the following new entry to the Blacklist:
* JNLPAppletLauncher (See Sun Alert 263490 .)
Note: Users should install JDK and JRE 6 Update 15 or later on systems running JDK and JRE 5.0 and SDK and JRE 1.4.2 to take advantage of this blacklist feature. For more information see the Blacklist Jar Feature section in the 6u14 Release Notes.
Debug Issue
Java ™ Virtual Machine Tool Interface (JVM TI) breakpoints are reliable only when either the Parallel Scavenge garbage collector (-XX:+UseParallelGC) or the Parallel Compacting garbage collector (-XX:+UseParallelOldGC) is used.
When other collectors are used, breakpoints may stop functioning, and JVM TI object tags may become unusable after a full GC operation is performed. Java ™ Debug Interface (JDI) ThreadReferences have an embedded thread ID that depends on JVM TI object tags, thus the embedded thread ID may change unexpectedly. This may cause confusion in thread based JDI events.
Note that the Serial garbage collector (-XX:+UseSerialGC) is vulnerable to this problem and is selected by default on some platforms. The work around is to explicitly select the Parallel Scavenge collector using the command line option -XX:+UseParallelGC.
(Refer to 6862295.)
Bug Fixes
This release contains fixes for one or more security vulnerabilities. For more information, please see Sun Alerts 263408 , 263409 , 263428 , 263429 , 263488 , 263489 , and 264648.
Bug fixes for vulnerabilities are listed in the following table.
BugId Category Subcategory Description 6656610 java accessibility AccessibleResourceBundle.getContents exposes mutable static (findbugs)
6656586 java classes_awt Cursor.predefined is protected static mutable (findbugs)
6805231 java classes_awt Security Warning Icon is missing in Windows 2000 Prof from Jdk build 6u12
6818787 java classes_awt It is possible to reposition the security icon too far from the border of the window on X11
6823373 java classes_awt [ZDI-CAN-460] Java Web Start JPEG header parsing needs more scruity
6660539 java classes_beans Introspector cache mutable static
6777487 java classes_beans Encoder allows reading private variables with certain names
6801071 java classes_net Remote sites can compromise user privacy and possibly hijack web session
6801497 java classes_net Proxy is assumed to be immutable but is non-final
6657695 java classes_security AbstractSaslImpl.logger is a static mutable (findbugs)
6824440 java classes_security XML Signature HMAC issue
6657625 java classes_sound RmfFileReader/StandardMidiFileWriter.types are public mutable statics (findbugs)
6738524 java classes_sound JDK13Services allows read access to system properties from untrusted code
6777448 java classes_sound JDK13Services.getProviders creates instances with full privileges
6588003 java classes_swing LayoutQueue mutable statics
6660049 java classes_swing Synth Region.uiToRegionMap/lowerCaseNameMap are mutable statics
6849518 java classes_swing NPE is thrown in jemmy library since 6u15 b01 at javax.swing.plaf.synth.SynthContext.isSubregion()
6656625 java imageio ImageReaderSpi.STANDARD_INPUT_TYPE/ImageWriterSpi.STANDARD_OUTPUT_TYPE are mutable static (findbugs)
6657133 java imageio Mutable statics in imageio plugins (findbugs)
6830335 java jar Java JAR Pack200 Decompression Integer Overflow Vulnerability
6755840 java_plugin plugin Version selection allows old zip and certificate handling to be exploited
6848964 javawebstart general TCK jnlp test jnlp_file/appletDesc/index.html#misc fails with NPE starting 6u15 b01
6862844 javawebstart other java web start ActiveX control security problem caused by ATL PROP_ENTRY macro
6845701 jaxp parse Xerces2 Java XML library infinite loop with malformed XML input
6813167 jax-ws other 6u14 JAX-WS audit mutable static bugs
6736293 jmx classes OpenType checks can be bypassed through finalizer resurrection
6657619 jndi dns DnsContext.debug is public static mutable (findbugs)
Other bug fixes are listed in the following table.
BugId Category Subcategory Description 6786503 hotspot garbage_collector Overflow list performance can be improved
6787254 hotspot garbage_collector Work queue capacity can be increased substantially on some platforms
6805338 java classes_security Add 1 new Entrust root CA cert and remove 3 others with 1024 bit keys
6845457 java classes_security Add root certs for Keynectis CA
6846473 java classes_security Add QuoVadis root CA certs to the JRE
6848984 java classes_util_i18n (tz) Support tzdata2009i
6851214 java classes_util_i18n (tz) New Jordan rule creates a failure for SimpleTimeZone parsing post tzdata2009h
6845077 java install silent JDK should install JRE/Java DB silently
6846531 javawebstart other REGRESSION application from ocie.net does not work with 6.0_14
6461727 jce pkcs11_csp TripleDES KeyGenerators in SunPKCS11 and SunJCE do not agree on key length
Changes in 1.5.0_20
The full internal version number for this update release is 1.5.0_20-b02 (where
"b" means "build"). The external version number is 5.0u20.
OlsonData 2009i
This release contains Olson time zone data version 2009i. For more information,
refer to Timezone Data Versions in the JRE Software .
Security Baseline
This update release specifies the following security baseline:
JRE Family Version Java SE
Security Baseline Java SE for Business
Security Baseline 1.4.2 1.4.2_19 1.4.2_22
In December, 2008, Java SE 1.4.2 reached its end of service life with the
release of 1.4.2_19. Future revisions of Java SE 1.4.2 (1.4.2_20 and above)
include the Access Only option and are available to Java SE for Business
subscribers.
For more information about the security baseline, see Deploying Java Applets
With Family JRE Versions in Java Plug-in for Internet Explorer .
Root Certificates
Root Certificates are included in this release.
* Added one new root certificate and removed 3 root certificates from Entrust. (Refer to 6805338.)
* Added three new root certificates from Keynectis. (Refer to 6845457.)
* Added three new root certificates from Quovadis. (Refer to 6846473.)
Bug Fixes
This release contains fixes for one or more security vulnerabilities. For more
information, please see Sun Alerts 263408 , 263409 , 263488 , 263489 , and 264648.
Bug fixes for vulnerabilities are listed in the following table.
BugId Category Subcategory Description 6656610 java accessibility AccessibleResourceBundle.getContents exposes mutable static (findbugs)
6656586 java classes_awt Cursor.predefined is protected static mutable (findbugs)
6660539 java classes_beans Introspector cache mutable static
6446522 java classes_lang 3Y Race condition in reflection checks
6801071 java classes_net Remote sites can compromise user privacy and possibly hijack web session
6801497 java classes_net Proxy is assumed to be immutable but is non-final
6406003 java classes_security Security issues in the Provider class
6429594 java classes_security Fix for 6406003 can be circumvented
6444262 java classes_security Provider deserialization still has problems
6657695 java classes_security AbstractSaslImpl.logger is a static mutable (findbugs)
6657625 java classes_sound RmfFileReader/StandardMidiFileWriter.types are public mutable statics (findbugs)
6738524 java classes_sound JDK13Services allows read access to system properties from untrusted code
6777448 java classes_sound JDK13Services.getProviders creates instances with full privileges
6588003 java classes_swing LayoutQueue mutable statics
6660049 java classes_swing Synth Region.uiToRegionMap/lowerCaseNameMap are mutable statics
6656625 java imageio ImageReaderSpi.STANDARD_INPUT_TYPE/ImageWriterSpi.STANDARD_OUTPUT_TYPE are mutable static (findbugs)
6657133 java imageio Mutable statics in imageio plugins (findbugs)
6830335 java jar Java JAR Pack200 Decompression Integer Overflow Vulnerability
6862844 javawebstart other java web start ActiveX control security problem caused by ATL PROP_ENTRY macro
6845701 jaxp parse Xerces2 Java XML library infinite loop with malformed XML input
6657619 jndi dns DnsContext.debug is public static mutable (findbugs)
Other bug fixes are listed in the following table.
BugId Category Subcategory Description 6851379 java classes_2d font files not deleted upon exit
6805338 java classes_security Add 1 new Entrust root CA cert and remove 3 others with 1024 bit keys
6845457 java classes_security Add root certs for Keynectis CA
6846473 java classes_security Add QuoVadis root CA certs to the JRE
6848984 java classes_util_i18n (tz) Support tzdata2009i
6851214 java classes_util_i18n (tz) New Jordan rule creates a failure for SimpleTimeZone parsing post tzdata2009h
* Bugs fixed:
- si_{set,get}_finalizer were not exported from ecl.dll and thus the library
TRIVIAL-GARBAGE failed to build in Windows
- The MSVC port did not define @ECL_LDRPATH@ and failed to build ecl.dll
- The sequence functions did not understand the newest specialized array types.
* Visible changes:
- The configuration flag --with-__thread now defaults to NO because many
platforms do not support it and GCC does not complain, making reliable
detection impossible.
- For further compatibility with SBCL, ECL now supports two additional
buffer types :FULL and :LINE which are compatible with :FULLY-BUFFERED
and :LINE-BUFFERED (Thanks to Matthew Mondor)
- The sockets library can now be loaded using either (REQUIRE 'SOCKETS)
or (REQUIRE 'SB-BSD-SOCKETS).
Changes since previous packaged version are too long to list,
they include 1,5 years of continuous development, adding features,
compiler optimizations, and fixing bugs. See log at
http://www.sbcl.org/all-news.html
Changes in 0.9.9:
* bugfixes
* extend and improve support for attributes
* adapat to latest libfirm
Changes in 0.9.8:
* several bugfixes
* add/correct semantic checks
* improve error recovery
* support more GCC extensions
* add/improve/correct warnings
Changes in 1.8.7 (since 1.8.6)
* Bugs fixed
** Fix compilation with `--disable-deprecated'
** Fix %fast-slot-ref/set!, to avoid possible segmentation fault
** Fix MinGW build problem caused by HAVE_STRUCT_TIMESPEC confusion
** Fix build problem when scm_t_timespec is different from struct timespec
** Fix build when compiled with -Wundef -Werror
** More build fixes for `alphaev56-dec-osf5.1b' (Tru64)
** Build fixes for `powerpc-ibm-aix5.3.0.0' (AIX 5.3)
** With GCC, always compile with `-mieee' on `alpha*' and `sh*'
** Better diagnose broken `(strftime "%z" ...)' in `time.test' (bug #24130)
** Fix parsing of SRFI-88/postfix keywords longer than 128 characters
** Fix reading of complex numbers where both parts are inexact decimals
** Allow @ macro to work with (ice-9 syncase)
Previously, use of the @ macro in a module whose code is being
transformed by (ice-9 syncase) would cause an "Invalid syntax" error.
Now it works as you would expect (giving the value of the specified
module binding).
** Have `scm_take_locale_symbol ()' return an interned symbol (bug #25865)
** Fix potential deadlocks when running on multiple threads
** Fix problems building with the i586-mingw32msvc cross-compiler
It's now possible to build Guile for Windows by using the
i586-mingw32msvc cross-compiler on GNU/Linux. This kind of build
produces DLLs and a main program that can be copied to and used on a
Windows PC. For how to do this, see the `Cross building Guile'
section in `README'.
User-visible changes between 0.6.2 and 0.7.0:
Requirements:
At run-time requires libtool and gcc (for the libcc C interface) and
gdb (for the disassembler (SEE)) on some platforms.
License:
Changed to GPLv3
Bug fixes
Now works with address-space randomization.
The single-step debugger works again in some engines.
Many others.
Ports:
AMD64, ARM, IA-64 (Itanium): better performance
PPC, PPC64: disassembler and assembler
Gforth EC: R8C, 4stack, misc, 8086 work
MacOS X: better support
Invocation:
New flags --ignore-async-signals, --vm-commit (default overcommit)
--print-sequences
Forth 200x:
X:extension-query: produce true for all implemented extensions
X:required REQUIRED etc. (not new)
X:defined: [DEFINED] and [UNDEFINED]
X:parse-name: PARSE-NAME (new name)
X:deferred: deferred words (new: DEFER@ DEFER! ACTION-OF)
X:structures: +FIELD FIELD: FFIELD: CFIELD: etc.
X:ekeys: new: EKEY>FKEY K-SHIFT-MASK K-CTRL-MASK K-ALT-MASK K-F1...K-F12
X:fp-stack (not new)
X:number-prefixes (partially new, see below)
Number prefixes:
0x is a hex prefix: 0xff and 0XfF now produces (decimal) 255
# is a decimal prefix: #10 now produces (decimal) 10
Signs after the number prefix are now accepted, e.g, #-50.
' now only handles a single (x)char: 'ab is no longer accepted,
'a' now produces (decimal) 97
Unicode support (currently supports only uniform encoding):
added xchars words for dealing with variable-width multi-byte characters
provide 8bit (ISO Latin 1) and UTF-8 support for xchars
New words:
\C C-FUNCTION C-LIBRARY END-C-LIBRARY C-LIBRARY-NAME (libcc C interface)
LIB-ERROR (complements OPEN-LIB)
OUTFILE-EXECUTE INFILE-EXECUTE BASE-EXECUTE (limited change of global state)
16-bit and 32-bit memory acces: UW@ UL@ SW@ SL@ W! L! W@ L@ /W /L
NEXT-ARG SHIFT-ARGS (OS command-line argument processing)
NOTHROW (for backtrace control)
FTRUNC FMOD (undocumented)
SEE-CODE SEE-CODE-RANGE (show generated dynamic native code)
Improvements/changes of existing words:
S\", .\" now support \l, \m, \z, and limits hex and octal character specs.
OPEN-FILE with W/O no longer creates or truncates files (no compat. file)
OPEN-LIB now understands ~ at the start, like OPEN-FILE.
TRY...ENDTRY changed significantly, compatibility files available (see docs).
The disassembler (DISCODE) can now use gdb to disassemble code
Uninitialized defered words now give a warning when executed
Division is floored (disable with "configure --enable-force-cdiv")
Gforth (not gforth-fast) reports division by zero and overflow on division
on all platforms.
Newly documented words:
S>NUMBER? S>UNUMBER?
EKEY keypress names: K-LEFT K-RIGHT K-UP K-DOWN K-HOME K-END K-PRIOR
K-NEXT K-INSERT K-DELETE
CLEARSTACKS
FORM
Environment variable GFORTHSYSTEMPREFIX (used by word SYSTEM and friends)
C interface:
exported symbols now start with "gforth_" (for referencing them from C code)
libcc C function call interface (requires libtool and gcc at run-time)
alternative: undocumented libffi-based interface
Libraries:
depth-changes.fs: report stack depth changes during interpretation
ans-report.fs now reports CfV extensions
fsl-util.4th: FSL support files (undocumented)
regexp.fs for regular expressions (undocumented)
complex.fs for complex numbers (undocumented)
fft.fs for Fast Fourier Transform (undocumented)
wf.fs, a Wiki implementation (undocumented)
httpd.fs, a web server (undocumented)
status.fs, show interpreter status in separate xterm (undocumented)
profile.fs for profiling (undocumented, incomplete)
endtry-iferror.fs, recover-endtry.fs to ease the TRY change transition
test/tester.fs: Now works with FP numbers (undocumented)
test/ttester.fs: Version of tester.fs with improved interface (T{...}T).
compat library:
compat/execute-parsing.fs
Speed improvements:
automatic performance tuning on building
static stack caching (good speedup on PPC)
mixed-precision division is now faster
support for int128 types on AMD64
workarounds for gcc performance bugs (in particular, PR 15242)
branch target alignment (good speedup on Alpha).
Changes since previous packaged version (8.12.0) include half year
of very active development:
- The dynamic FFI is now implemented using libffi.
- Support of UNICODE.
- Multithreading (provided Boehm-GC built with threads support).
- Command line flags to control the different memory limits:
--heap-size, --lisp-stack, --frame-stack and --c-stack.
- The stack size is now measured in bytes, not in lisp words.
- The out of memory error (ext:storage-exhausted) can now be recovered.
By default a correctable error is signaled and the user is given the
chance to increase the heap size.
- Better compiler, optimizer, debugger.
- Improved handling of compiler errors.
- New and more easily extensible implementation of streams.
- *STANDARD-INPUT*, *{STANDARD,ERROR,TRACE}-OUTPUT* are no longer synonyms to
*TERMINAL-IO* but directly the input or output streams associated to stdin,
stdout and stderr.
- Improved numerics.
- Read-only readtables.
- Numerous bug fixes.
Changes
* Add support for static properties.
* Add support for delegate properties.
* Support virtual default handler for signals.
* Add limited support for derived compact classes.
* Add libgdata bindings (Víctor Manuel Jáquez Leal).
* Add libusb-1.0 bindings (Evan Nemerson).
* Many bug fixes and binding updates.
Vala 0.7.4
Changes
* Add support for array properties.
* Support implicit and explicit GValue casts.
* Add initial support for generic methods.
* Add postgres bindings.
* Many bug fixes and binding updates.
Vala 0.7.3
Changes
* Add initial support for POSIX profile.
* Add --vapi and --gir commandline options.
* Add initial x11, xcb, and cairo-xcb bindings.
* Many bug fixes and binding updates.
Vala 0.7.2
Changes
* Improvements to the .gir reader and writer (Didier Ptitjes).
* Many bug fixes and binding updates.
Vala 0.7.1
Changes
* Introduce new syntax to connect/disconnect signal handlers.
* Add experimental support for fixed-length arrays.
*
Update Genie parser (Jamie McCracken).
* Updates to the GLib, Cairo, GTK+, GStreamer, and POSIX bindings.
* Many bug fixes.
Vala 0.7.0
Changes
* Do not generate header files unless requested by the -H commandline
o option. This requires changes in the build system of Vala projects.
* Support conditional compilation.
Vala 0.6.1
Changes
* Updates to the GLib, Cairo, GTK+, GStreamer, and POSIX bindings.
* Minor bug fixes.
Vala 0.6.0
Changes
* Improvements to the .gir reader and writer (Didier Ptitjes).
* Add librsvg-2.0 bindings (Evan Nemerson).
* Add Maemo libosso bindings (Jukka-Pekka Iivonen).
* Add V4L2 bindings (Matías De la Puente).
* Many bug fixes.
Changes from 3.1.6 to 3.1.7
---------------------------
1. Gawk now has support for z/OS (IBM S/390 architecture).
2. Gawk now handles multibyte strings better in [s]printf with field
widths and such.
3. Gawk now uses libsigsegv to print a message before core dumping. This
handles infinite recursion of an awk function a little better.
Use of the library can be disabled at configure time with the
--disable-libsigsegv option for unusual systems.
4. The handling of BINMODE is now somewhat more sane.
5. A getline from a directory is no longer fatal; instead it returns -1.
6. Per POSIX, special variable names (like FS) cannot be used as function
parameter names.
7. The new -O / --optimize option enables simple constant folding on
the parse tree during parsing. We hope that with time the number
of optimizations will increase.
8. Updated to the latest autotools: Autoconf 2.63, Automake 1.11,
Libtool 2.2.6a, and Gettext 0.17. Also latest Bison: 2.4.1.
9. Some improvement in testing for isinf / isnan in builtin.c.
10. Improved the handling of `a = a b c' to be more general.
11. Locale handling for %'d should now work on certain non-Unix /
non-Linux systems.
12. Lots of bugs fixed, see the ChangeLog for the details.
4.1.0
- The new parameter "parantheses-synonyms" and the command-line
option "-no-parantheses-synonyms" allows disabling list-like behaviour
of "{ ... }" and "[ ... ]" tokens
- The new parameter "symbol-escape" and the command-line
option "-no-symbol-escape" allows disabling "| ... |" symbol escape
syntax
- Added command-line option "-r5rs-syntax" to disable CHICKEN-specific
read-syntax
- Added compiler command-line-option "-no-compiler-syntax"
- Deprecated "getenv" (use "get-environment-variable" instead)
- Removed "macro?" and "undefine-macro!"
- Support for Microsoft Visual Studio / MSVC has been dropped
- The compiler provides now a simple flow-analysis pass that does
basic checking of argument-count and -types for core library procedures
(new option "-scrutinize")
- New compiler-options "-no-argc-checks", "-no-bound-checks",
"-no-procedure checks", "-no-procedure-checks-for-usual-bindings",
"-types TYPEFILE" and "-consult-inline-file FILENAME"
- Added a "chicken-setup" stub-application to catch incorrect use of
this tool (which has been replaced in 4.0.0 with "chicken-install")
- Changed "setup-install-flag" and "setup-verbose-flag" to
"setup-install-mode" and "setup-verbose-mode" in "setup-api" module,
the old names are still available but deprecated
- Posix unit:
added "socket?", "block-device?" and "character-device?", deprecated
redundant "stat-..." procedures
- Also in Posix unit: "canonical-path" has been deprecated, "normalize-pathname"
from the "files" unit provides now most of the functionality
- Added "directory-exists?"
- "(for-each (lambda ...) X)" is compiled as a loop
- The argument-count check for format-strings for "[sf]printf" with a constant
string argument is done at compile-time
- A stub application named "chicken-setup" is installed to catch when a
user invokes theobsolete tool instead of the new "chicken-install".
4.0.0
- removed `apropos' and `apropos-list' from the "utils" library unit;
available as an extension
- removed texinfo and PDF documentation - this will possible be added back
later
- replaced PCRE regex engine with Alex Shinn's "irregex" regular expression
package
- removed `-extension' option
- removed `-static-extensions' csc option and added `-static-extension NAME'
- `regex' unit: removed `regexp*' and `regex-optimize'
- added `CHICKEN_new_finalizable_gc_root()'
- `length' checks its argument for being cyclic
- removed custom declarations and "link-options" and "c-options" declarations
- deprecated "-quiet" option to "chicken" program
- added "-update-db" option to chicken-install
- the compiler now suggests possibly required module-imports
- moved non-standard syntax-definitions into "chicken-syntax" library unit
- the pretty-printer prints the end-of-file object readably now
- alternative conditional execution paths have separate allocation computation
(previously the allocation of all alternatives was coalesced)
- removed unused "%kmp-search" from "srfi-13" library unit
- expander handles syntax-reexports and makes unexported syntax available
for exported expanders in import libraries
- added checks in some procedures in the "tcp" library unit
- the macro system has been completely overhauled and converted
to hygienic macros
- a macro-aware module system has been added
- added "-sx" option to csi
- removed the following deprecated functions:
[un]shift!
andmap ormap
byte-vector? byte-vector-fill!
make-byte-vector byte-vector
byte-vector-set! byte-vector-ref
byte-vector->list list->byte-vector
string->byte-vector byte-vector->string
byte-vector-length
make-static-byte-vector static-byte-vector->pointer
byte-vector-move! byte-vector-append!
set-file-position! set-user-id! set-group-id!
set-process-group-id!
macro? undefine-macro!
- the situation-identifiers "run-time" and "compile-time" have
been removed
- the compiler options "-check-imports", "-import" and "-emit-exports"
have been removed
- new procedures:
strip-syntax
expand
- new macros
define-syntax
module
export
- the following macros have been removed:
define-foreign-record
define-foreign-enum
define-macro
define-extension
- "local" mode, in which locally defined exported toplevel variables can
be inlined
- new options and declarations "[-]local", "[-]inline-global" and "-emit-inline-file"
- optimization levels changed to use inlining:
-optimize-level 3: enables -inline -local (but *not* -unsafe)
-optimize-level 4: enables -inline -local -unsafe
- increased default inlining-limit to 20
- support for cross-module inlining
- "make <VARIABLES> bench" runs the benchmark suite
- "chicken-setup" has been replaced by new command line tools
"chicken-install", "chicken-uninstall" and "chicken-status", which are
more flexible and allow greater freedom when creating local or application-
specific repositories
- extension-installation can be done directly from SVN repositories or a local
file tree
- enabled chicken mirror site as alternative download location
Upstream changes:
- Core
+ Key and Iterator refactor
+ Major pbc_to_exe generated code speed improvement
+ New "Infinite Memory" GC core for demonstration purposes
+ gc_debug runcore and GC-related heisenbug fixes
+ Elimination of variable expansion in parrot_config
+ CLI arguments are processed as Unicode by default
+ Substantial optimizations in NCI
+ Parrot builds on Win64
+ Hashes can use native types as keys and values
+ Fixed installed pbc_to_exe
+ Simplification of PMC generation code
+ Improved GC encapsulation and API documentation
- Documentation
+ List of candidates for embedding API (docs/embed.pod)
+ PIR book sent to publisher
- Testing
+ Several conversions of Perl test to pure PIR.
+ C indentation coding standards test improvement
+ Improved test coverage of example code
- Deprecations
+ Removal of PGE rules: <null> <fail> <sp> <lt> <gt> <dot>
+ Removal of PGE methods: .text .item .result_object
+ Deprecation of most dynops
+ Miscellaneous
+ Beginnings of OpenGL::Math library; OpenGL bindings and library
marked experimental
+ Localizing and consting fixes
+ Many memory and thread-related leaks plugged
LuaJIT is a Just-In-Time Compiler for the Lua programming language.
Lua is a powerful, light-weight programming language designed for extending
applications. Lua is also frequently used as a general-purpose, stand-alone
language. More information about Lua can be found at: http://www.lua.org/
LuaJIT is based on the Lua 5.1.x virtual machine and bytecode interpreter from
lua.org. It compiles bytecode to native x86 (i386+) machine code to speed up the
execution of Lua programs.
Packaged by pho@cielonegro.org.
$HOME's parent directory isn't readable by an unprivileged user.
Tested on Linux with unprivileged pkgsrc (DreamHost, where the
problem was encountered) and on Mac OS X with a more typical setup.
Changes in 1.5.0_19
The full internal version number for this update release is 1.5.0_19-b02 (where "b" means "build"). The external version number is 5.0u19.
OlsonData 2009g
This release contains Olson time zone data version 2009g. For more information, refer to Timezone Data Versions in the JRE Software .
Security Baseline
This update release specifies the following security baseline:
JRE Family Version Java SE
Security Baseline Java SE for Business
Security Baseline 1.4.2 1.4.2_19 1.4.2_20
In December, 2008, Java SE 1.4.2 reached its end of service life with the release of 1.4.2_19. Future revisions of Java SE 1.4.2 (1.4.2_20 and above) include the Access Only option and are available to Java SE for Business subscribers.
For more information about the security baseline, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer .
Additional Supported System Configurations
As of this update, support has been added for the following system configurations:
* Internet Explorer 8
* Windows Server 2008
* SLES 11
Refer to the Supported System Configurations page.
Service Tag Support
Service Tag support on Solaris, Linux, and Windows is add in this release. If Service Tag software has been installed on a system where JRE 1.5.0_19 is being installed, a unique service tag is automatically created for that particular JRE instance. There is no change in the JDK/JRE installation instruction, and there is no change in the Java runtime.
Service Tag software can be downloaded from Sun Inventory. JDK and JRE service tags allow installed instances of the JDK and JRE to be discovered and registered under a user's account on Sun Connection.
Known Issues
IE 8 Hangs with OBJECT Tag
When an OBJECT tag is used to specify an applet, and the browser does not receive any mouse button events or keyboard events before the browser gets to the point of interpreting (executing) the OBJECT> tag, then IE 8 hangs.
This bug is seen when an html file containing OBJECT tag is specified as a command line parameter while launching IE. For example:
iexplorer.exe file.html
In this case, there is no mouse button event between invocation of IE and OBJECT tag execution.
A workaround is to force the user to use a mouse or keyboard before IE8 reaches the tag. For example, if applet.html contains an OBJECT tag, then the following command line invocation hangs the browser:
iexplorer.exe applet.html
However, if you specify applet.html in another html file, as follows, then the user is forced to use the keyboard or mouse button, and the hang does not occur:
<HTML><BODY><A href="file:applet.html"> click </A> </BODY></HT
ML>
Refer to CR 6825659 for further information.
Bug Fixes
Bug fixes are listed in the following table.
BugId Category Subcategory Description 6260293 hotspot compiler2 fix set_ctrl() inconsistencies in loopopts
6394438 hotspot compiler2 crash in C2 compiler in MachSpillCopyNode::implementation on 5.0_U4
6435614 hotspot compiler2 code fails with impossible ArrayIndexOutOfBounds Exception
6754146 hotspot compiler2 1.5.0_15 C2 compiler crashes in PhaseChaitin::Split()
6788347 hotspot compiler2 C2Compiler crash 6u7
6798785 hotspot compiler2 Crash in OopFlow::build_oop_map: incorrect comparison of 64bit pointers
5081701 hotspot garbage_collector CMS: ATG crash with perm gen collection enabled
6415354 hotspot garbage_collector CMS: assert(thisOop->is_oop_or_null(true),"expected an oop or NULL")
6722112 hotspot garbage_collector CMS: Incorrect encoding of overflown object arrays during concurrent precleaning
6722113 hotspot garbage_collector CMS: Incorrect overflow handling during precleaning of Reference lists
6739357 hotspot garbage_collector CMS: Switch off CMSPrecleanRefLists1 until 6722113 can be fixed
6786503 hotspot garbage_collector Overflow list performance can be improved
6787254 hotspot garbage_collector Work queue capacity can be increased substantially on some platforms
6751861 hotspot jvmti Memory leak occurs in JVMTI(jdk5.0u16)
6447157 hotspot other Crashdump (hs_err_pid*.log) does not contain the crash time
6320309 hotspot runtime_system symbol resolution -- wait() vs interrupt -- can result in IE being thrown from unexpected locations
6680485 hotspot runtime_system Wrong error-handling with Solaris-specific interruptible I/O (Solaris)
6821003 hotspot runtime_system Update hotspot windows os_win32 for windows 7
6277781 idl serialization Serialization of Enums over IIOP is broke.
6614558 idl serialization jmx interop JDK5 - JDK6 issue when calling getMBeanInfo
6529796 java char_encodings Support JIS X 0213:2004 in existing JDK versions, especially for Windows Vista
6710199 java char_encodings SJIS_0213 does not handle "unmappable" encoding operation correctly
4744405 java classes_2d RFE: lookupPrintServices() to refresh the printers list dynamically
6358622 java classes_2d hotspot crash when printing to non-available network printer
6428762 java classes_2d RHEL5: Sazanami Mincho Font rendering quality is poor
6574633 java classes_2d native printDialog crashes when changing printer
6633656 java classes_2d Cross platform print dialog doesn't check for orientation being unsupported.
6524352 java classes_awt support for high-resolution mouse wheel
6668385 java classes_awt Java applet crashes IE 6 in AwtComponent::ImmAssociateContext()
6675956 java classes_awt REGRESSION : Different behavior of Container.findComponentAt in jdk5
6707023 java classes_awt Chinese Characters in JTextPane Cause Pane to Hang
6219755 java classes_io PipedOutputStream.write() remains blocked after PipedInputStream was closed
6242664 java classes_lang String.offsetByCodePoints doesn't work for Strings returned by String.substring
6819886 java classes_lang System.getProperty("os.name") reports Vista on Windows 7
6651382 java classes_management The Java JVM SNMP provider reports incorrect stats when asked for multiple OIDs
6598160 java classes_net Windows IPv6 Socket implementation doesn't set the handle to not inherit
6648001 java classes_net Cancelling HTTP authentication causes subsequent deadlocks
6693244 java classes_net Java Web Start app fails on 6u10 beta w/ AssertionError in AuthenticationInfo.requestCompleted
5100121 java classes_nio (se) select not immune to EINTR
6497734 java classes_nio (dc) assert "JNI handle should not be null" under Java_sun_nio_ch_FileDispatcher_preClose0()
6552236 java classes_security PolicyFile not synchronized during refresh
6699856 java classes_swing Creating text in a JTextPane using Chinese text causes undesired behavior
6735259 java classes_swing NPE at WindowsComboBoxUI$XPComboBoxButton.getState(WindowsComboBoxUI.java:408)
4823811 java classes_text [Fmt-Da] SimpleDateFormat patterns don't allow embedding of some literal punctuation
6576792 java classes_util_concurrent ThreadPoolExecutor methods leak interrupts when run in pool threads
6409997 java classes_util_i18n Default locale/encoding detection for Windows Vista
6834474 java classes_util_i18n (tz) Support tzdata2009g
6740278 java dragndrop An image(256 colors) in clipboard should be displayed correctly
6404011 java imageio IllegalArgumentException: "Invalid ICC Profile Data" when reading certain JPEGs
6687968 java imageio PNGImageReader leaks native memory through an Inflater.
6541870 java serialization NullPointerException in ObjectInputStream with Externalizables
6608975 java serviceability HeapDumpPath option is ignored for dumps written by HeapDumpOnCtrlBreak functionality
6745217 java serviceability jmap throws sun.jvm.hotspot.utilities.AssertionFailure: BitMap index out of bounds (1.5.0_15-b04)
6754987 java serviceability Crash triggering Heapdump via -XX:+HeapDumpOnCtrlBreak AND -XX:+UseParallelOldGC
6803304 java sunservicetags Service Tag support for JRE for solaris/linux/windows
6680432 java_deployment security Display only Digital Signature key usage certificate in client authentication dialog box.
6567254 java_plugin ns6 Stack stomp in CSecureJNIEnv
6603064 java_plugin other Legacy_lifecycle:Exception getting thrown on while making LiveConnect calls once applet is refreshed
6595618 java_plugin plugin Intermittent problems with signed applet certificate verification
6618901 java_plugin plugin 6.0 JRE applet running on Vista limits heap to 64 MB
6696175 javawebstart jnlp_file javaws not recognizing properties which contains % character
6809409 jaxp sax jaxp Issue 56 SAXException doesn't do the exception chaining properly
6809019 jaxp xslt Performance degradation for fix to: 6537909 in 1.5.0_14
6796140 jets other Further ORB changes after 6725987
6176036 jndi ldap Require a way to specify read timeout for LDAP operations
Changes in 1.5.0_18
The full internal version number for this update release is 1.5.0_18-b02 (where "b" means "build"). The external version number is 5.0u18.
Security Baseline
This update release specifies the following security baseline:
JRE Family Version Security Baseline 1.4.2 1.4.2_20
For more information about the security baseline, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer .
OlsonData 2009a
This release contains Olson time zone data version 2009a. For more information, refer to Timezone Data Versions in the JRE Software .
Java Naming and Directory Interface (JNDI) API Change
The behavior of the JNDI feature to store and retrieve Java objects in an LDAP directory has been slightly modified.
When storing a Java object in an LDAP directory, the location of the object's class file (its codebase) may be specified. Later, when restoring the original object, its codebase along with additional object data is retrieved from the directory and used by the class loader.
An object's codebase is no longer implicitly trusted. Instead, a new system property called com.sun.jndi.ldap.object.trustURLCodebase must explicitly be set to the string value true in order for a codebase to be used. Otherwise, the codebase will be ignored by the class loader when restoring a Java object, and only those class files that appear on the classpath will be recognized.
Java Management Extensions(JMX) Change
In a JMX access property file, the readwrite access no longer allows the remote createMBean and unregisterMBean operations. These must now be provided explicitly via new clauses.
The default jmxremote.access file of the JRE ($JRE_HOME/lib/management/jmxremote.access) shows what this looks like:
monitorRole readonly
controlRole readwrite \
create javax.management.monitor.*,javax.management.timer.* \
unregister
CORBA Memory Leak Fix - Special Note
This update release and revision 5.0u16-rev-b12 and subsequent updates and revisions contain a fix for 6725987. When using updates and revisions prior to these, an ORB may contain valid references (that is, a memory leak) even after calling its shutdown() and destroy() methods, and it may respond to some method calls.
With this fix, the ORB correctly cleans up and the Garbage Collector can free up the memory held by such references. Incorrect accesses to such references or methods are likely to result in a NullPointerException to the application.
Root Certificates Included
Root Certificates are included in this release. The following root certificates have been added:
* VeriSign TSA Root Cert to the JDK (Refer to 6732157.)
* Two additional T-systems root CA certs (Refer to 6803022.)
* Two Unizeto root certs (Refer to 6803036.)
Bug Fixes
This release contains fixes for one or more security vulnerabilities. For more information, please see Sun Alerts 254569, 254570, 254571, 254608, and 254611.
Other bug fixes are listed in the following table.
BugId Category Subcategory Description 6676016 hotspot garbage_collector ParallelOldGC leaks memory
6461933 java classes_awt To adjust system boot time in nowMillisUTC() frequently
6637607 java classes_awt 1st char. is discarded after a modal dialogue shows up and disappears
6677578 java classes_awt Print dialog doesn't come up when brower window is maximized
6571589 java classes_lang (thread) Thread.getStackTrace() returns null
6446855 java classes_net https connections failing when connecting through a proxy
6687282 java classes_net URLConnection for HTTPS connection through Proxy w/ Digest Authentication gives 400 Bad Request
6720866 java classes_net Slow performance using HttpURLConnection for upload
6732157 java classes_security Add VeriSign TSA Root Cert to the JDK
6803022 java classes_security Add T-systems root CA certs to the JRE
6803036 java classes_security Add Unizeto root certs to the JRE
6639183 java classes_util_concurrent Scheduling large negative delay hangs entire ScheduledExecutor
6725789 java classes_util_concurrent ScheduledExecutorService does not work as expected in jdk7/6/5
6598520 java classes_util_i18n (tz) Windows time zone mapping table needs to be updated for KB933360
6650748 java classes_util_i18n (tz) Java runtime doesn't detect VET time zone correctly on Windows
6743394 java classes_util_i18n (tz) tzmappings must be updated for Windows
6783139 java classes_util_i18n (tz) Windows time zone mapping table needs to be updated for KB955839
6796489 java classes_util_i18n (tz) Support tzdata2009a
6487638 java classes_util_logging Calling LogManager.addLogger() and Logger.getLogger() cause deadlock
6719011 java_plugin ocx Applet isn't started when it's outside of the visible area of a browser window
6643769 java_plugin other Applet main windows steals focus on Popup windows which is running Applet.
6784894 java_plugin other Regression: applets loaded from local disk can not access co-located resources
6591117 jce pkcs11_csp Poor preformance of PKCS#11 security provider compared to Sun default provider
6725987 jets other ORB.destroy() does not cleanup correctly and ORB object instances are not garbage collected.
Changes in 1.5.0_17
The full internal version number for this update release is 1.5.0_17-b04 (where "b" means "build"). The external version number is 5.0u17.
Security Baseline
This update release specifies the following security baseline:
JRE Family Version Security Baseline 1.4.2 1.4.2_19
For more information about the security baseline, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer .
OlsonData 2008i
This release contains Olson time zone data version 2008i. For more information, refer to Timezone Data Versions in the JRE Software .
Updated UTF-8 Charset Implementation
Due to security concerns, the UTF-8 charset implementation in the JRE has been updated to handle the non-shortest form of UTF-8 byte sequences, and this introduces an incompatibility from previous releases. For example, the byte sequence of 0xc0 0xaf for U+002f, which has the shortest form of 0x2f, is a malformed input to the decoding operation. More details regarding the Non-shortest form of UTF-8 can be found at:
* UTF8-Shortest Form
* UTF8 Specification
Root Certificates Included
Root Certificates are included in this release. The following root certificates have been added:
* Camerfirma root certificates
* T-systems root CA certificate (Deutsche Telekom Root CA 2)
* SwissSign root certificates
Bug Fixes
This release contains fixes for one or more security vulnerabilities. For more information, please see Sun Alerts 244986, 244987, 244988, 244990, 244991, 244992, 245246, 246266, 246286, 246346, 246386, and 246387.
Other bug fixes are listed in the following table.
BugId Category Subcategory Description 6403625 hotspot compiler2 crash in compiled code when using profiler agent
6519515 hotspot compiler2 Loop-opts incorrectly removed a safepoint poll from a loop with an early exit
6606675 hotspot compiler2 Crash in CodeBuffer resize in 1.4.2_15
6676462 hotspot compiler2 JVM sometimes would suddenly consume significant amount of memory
6704367 hotspot runtime_system Stack sizes error with 1.5.0_14
6372405 idl orb Server thread hangs when fragments don't complete because of connection abort
5005426 java char_encodings Buffered stream data is discarded by IllegalStateException in 1.4.2 and Tiger
6359722 java classes_2d Uncatchable recursive NullPointerException at sun.font.TrueTypeFont.open()
6448405 java classes_2d static HashMap cache in LineBreakMeasurer can grow wihout bounds
6525150 java classes_2d Printer has "paper out" status and won't print due to a PrinterException
6638533 java classes_2d Layout should not apply shaping to precomposed arabic presentation form glyphs.
6532373 java classes_awt xcb_xlib.c:50: xcb_xlib_unlock: Assertion 'c->xlib.lock' failed.
6678061 java classes_awt undefined keycodes for certain keyboard layouts
6689088 java classes_awt Focus traversal doesn't work in the reverse order / related to the SR 70175950 / CR 6684528
6446990 java classes_net HttpURLConnection#available() reads more and more data into memory
6448457 java classes_nio (ch) Channels.newOutputStream().write() does not write all data
6728890 java classes_security Add SwissSign root certificates to the JDK
6754779 java classes_security Add Camerfirma root certificates to the JDK
6768559 java classes_security Add t-systems root CA certificate (Deutsche Telekom Root CA 2) to the JRE
6438246 java classes_swing File name field is mislabeled when JFileChooser is used in DIRECTORIES_ONLY mode
6581899 java classes_swing JTextField & JTextArea - Poor performance with JRE 1.5.0_08
6648714 java classes_swing JScrollPane repaints incorrectly on larger monitor of dual monitor system (5.0)
6466476 java classes_util_i18n (tz) Introduction of tzdata2005r can introduce incompatility issues with some JDK1.1 3-letter TZ Ids
6764308 java classes_util_i18n (tz) Support tzdata2008i
6623981 java compiler javac StackOverFlowError in 1.4.1/1.4.2
6709709 java javadoctool javadoc does not get compilation errors after type erasure
6536107 java_plugin iexplorer GDI leak detected by opening the Print Dialog repeatedly
6746185 javawebstart other Malformed URL Exception: JWS regression introduced in 1.5.0_16
6578538 jce classes_crypto com.sun.crypto.provider.SunJCE instance leak using KRB5 and LoginContext
6697180 jmx classes JMX query results in java.io.IOException: Illegal state - also a deadlock can also be seen
6618387 jsse runtime SSL client sessions do not close cleanly. A TCP reset occurs instead of a close_notify alert.
6668231 jsse runtime Presence of a critical subjectAltName causes JSSE's SunX509 to fail trusted checks
Changes in 1.5.0_19
The full internal version number for this update release is 1.5.0_19-b02 (where "b" means "build"). The external version number is 5.0u19.
OlsonData 2009g
This release contains Olson time zone data version 2009g. For more information, refer to Timezone Data Versions in the JRE Software .
Security Baseline
This update release specifies the following security baseline:
JRE Family Version Java SE
Security Baseline Java SE for Business
Security Baseline 1.4.2 1.4.2_19 1.4.2_20
In December, 2008, Java SE 1.4.2 reached its end of service life with the release of 1.4.2_19. Future revisions of Java SE 1.4.2 (1.4.2_20 and above) include the Access Only option and are available to Java SE for Business subscribers.
For more information about the security baseline, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer .
Additional Supported System Configurations
As of this update, support has been added for the following system configurations:
* Internet Explorer 8
* Windows Server 2008
* SLES 11
Refer to the Supported System Configurations page.
Service Tag Support
Service Tag support on Solaris, Linux, and Windows is add in this release. If Service Tag software has been installed on a system where JRE 1.5.0_19 is being installed, a unique service tag is automatically created for that particular JRE instance. There is no change in the JDK/JRE installation instruction, and there is no change in the Java runtime.
Service Tag software can be downloaded from Sun Inventory. JDK and JRE service tags allow installed instances of the JDK and JRE to be discovered and registered under a user's account on Sun Connection.
Known Issues
IE 8 Hangs with OBJECT Tag
When an OBJECT tag is used to specify an applet, and the browser does not receive any mouse button events or keyboard events before the browser gets to the point of interpreting (executing) the OBJECT> tag, then IE 8 hangs.
This bug is seen when an html file containing OBJECT tag is specified as a command line parameter while launching IE. For example:
iexplorer.exe file.html
In this case, there is no mouse button event between invocation of IE and OBJECT tag execution.
A workaround is to force the user to use a mouse or keyboard before IE8 reaches the tag. For example, if applet.html contains an OBJECT tag, then the following command line invocation hangs the browser:
iexplorer.exe applet.html
However, if you specify applet.html in another html file, as follows, then the user is forced to use the keyboard or mouse button, and the hang does not occur:
<HTML><BODY><A href="file:applet.html"> click </A> </BODY></HT
ML>
Refer to CR 6825659 for further information.
Bug Fixes
Bug fixes are listed in the following table.
BugId Category Subcategory Description 6260293 hotspot compiler2 fix set_ctrl() inconsistencies in loopopts
6394438 hotspot compiler2 crash in C2 compiler in MachSpillCopyNode::implementation on 5.0_U4
6435614 hotspot compiler2 code fails with impossible ArrayIndexOutOfBounds Exception
6754146 hotspot compiler2 1.5.0_15 C2 compiler crashes in PhaseChaitin::Split()
6788347 hotspot compiler2 C2Compiler crash 6u7
6798785 hotspot compiler2 Crash in OopFlow::build_oop_map: incorrect comparison of 64bit pointers
5081701 hotspot garbage_collector CMS: ATG crash with perm gen collection enabled
6415354 hotspot garbage_collector CMS: assert(thisOop->is_oop_or_null(true),"expected an oop or NULL")
6722112 hotspot garbage_collector CMS: Incorrect encoding of overflown object arrays during concurrent precleaning
6722113 hotspot garbage_collector CMS: Incorrect overflow handling during precleaning of Reference lists
6739357 hotspot garbage_collector CMS: Switch off CMSPrecleanRefLists1 until 6722113 can be fixed
6786503 hotspot garbage_collector Overflow list performance can be improved
6787254 hotspot garbage_collector Work queue capacity can be increased substantially on some platforms
6751861 hotspot jvmti Memory leak occurs in JVMTI(jdk5.0u16)
6447157 hotspot other Crashdump (hs_err_pid*.log) does not contain the crash time
6320309 hotspot runtime_system symbol resolution -- wait() vs interrupt -- can result in IE being thrown from unexpected locations
6680485 hotspot runtime_system Wrong error-handling with Solaris-specific interruptible I/O (Solaris)
6821003 hotspot runtime_system Update hotspot windows os_win32 for windows 7
6277781 idl serialization Serialization of Enums over IIOP is broke.
6614558 idl serialization jmx interop JDK5 - JDK6 issue when calling getMBeanInfo
6529796 java char_encodings Support JIS X 0213:2004 in existing JDK versions, especially for Windows Vista
6710199 java char_encodings SJIS_0213 does not handle "unmappable" encoding operation correctly
4744405 java classes_2d RFE: lookupPrintServices() to refresh the printers list dynamically
6358622 java classes_2d hotspot crash when printing to non-available network printer
6428762 java classes_2d RHEL5: Sazanami Mincho Font rendering quality is poor
6574633 java classes_2d native printDialog crashes when changing printer
6633656 java classes_2d Cross platform print dialog doesn't check for orientation being unsupported.
6524352 java classes_awt support for high-resolution mouse wheel
6668385 java classes_awt Java applet crashes IE 6 in AwtComponent::ImmAssociateContext()
6675956 java classes_awt REGRESSION : Different behavior of Container.findComponentAt in jdk5
6707023 java classes_awt Chinese Characters in JTextPane Cause Pane to Hang
6219755 java classes_io PipedOutputStream.write() remains blocked after PipedInputStream was closed
6242664 java classes_lang String.offsetByCodePoints doesn't work for Strings returned by String.substring
6819886 java classes_lang System.getProperty("os.name") reports Vista on Windows 7
6651382 java classes_management The Java JVM SNMP provider reports incorrect stats when asked for multiple OIDs
6598160 java classes_net Windows IPv6 Socket implementation doesn't set the handle to not inherit
6648001 java classes_net Cancelling HTTP authentication causes subsequent deadlocks
6693244 java classes_net Java Web Start app fails on 6u10 beta w/ AssertionError in AuthenticationInfo.requestCompleted
5100121 java classes_nio (se) select not immune to EINTR
6497734 java classes_nio (dc) assert "JNI handle should not be null" under Java_sun_nio_ch_FileDispatcher_preClose0()
6552236 java classes_security PolicyFile not synchronized during refresh
6699856 java classes_swing Creating text in a JTextPane using Chinese text causes undesired behavior
6735259 java classes_swing NPE at WindowsComboBoxUI$XPComboBoxButton.getState(WindowsComboBoxUI.java:408)
4823811 java classes_text [Fmt-Da] SimpleDateFormat patterns don't allow embedding of some literal punctuation
6576792 java classes_util_concurrent ThreadPoolExecutor methods leak interrupts when run in pool threads
6409997 java classes_util_i18n Default locale/encoding detection for Windows Vista
6834474 java classes_util_i18n (tz) Support tzdata2009g
6740278 java dragndrop An image(256 colors) in clipboard should be displayed correctly
6404011 java imageio IllegalArgumentException: "Invalid ICC Profile Data" when reading certain JPEGs
6687968 java imageio PNGImageReader leaks native memory through an Inflater.
6541870 java serialization NullPointerException in ObjectInputStream with Externalizables
6608975 java serviceability HeapDumpPath option is ignored for dumps written by HeapDumpOnCtrlBreak functionality
6745217 java serviceability jmap throws sun.jvm.hotspot.utilities.AssertionFailure: BitMap index out of bounds (1.5.0_15-b04)
6754987 java serviceability Crash triggering Heapdump via -XX:+HeapDumpOnCtrlBreak AND -XX:+UseParallelOldGC
6803304 java sunservicetags Service Tag support for JRE for solaris/linux/windows
6680432 java_deployment security Display only Digital Signature key usage certificate in client authentication dialog box.
6567254 java_plugin ns6 Stack stomp in CSecureJNIEnv
6603064 java_plugin other Legacy_lifecycle:Exception getting thrown on while making LiveConnect calls once applet is refreshed
6595618 java_plugin plugin Intermittent problems with signed applet certificate verification
6618901 java_plugin plugin 6.0 JRE applet running on Vista limits heap to 64 MB
6696175 javawebstart jnlp_file javaws not recognizing properties which contains % character
6809409 jaxp sax jaxp Issue 56 SAXException doesn't do the exception chaining properly
6809019 jaxp xslt Performance degradation for fix to: 6537909 in 1.5.0_14
6796140 jets other Further ORB changes after 6725987
6176036 jndi ldap Require a way to specify read timeout for LDAP operations
Changes in 1.5.0_18
The full internal version number for this update release is 1.5.0_18-b02 (where "b" means "build"). The external version number is 5.0u18.
Security Baseline
This update release specifies the following security baseline:
JRE Family Version Security Baseline 1.4.2 1.4.2_20
For more information about the security baseline, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer .
OlsonData 2009a
This release contains Olson time zone data version 2009a. For more information, refer to Timezone Data Versions in the JRE Software .
Java Naming and Directory Interface (JNDI) API Change
The behavior of the JNDI feature to store and retrieve Java objects in an LDAP directory has been slightly modified.
When storing a Java object in an LDAP directory, the location of the object's class file (its codebase) may be specified. Later, when restoring the original object, its codebase along with additional object data is retrieved from the directory and used by the class loader.
An object's codebase is no longer implicitly trusted. Instead, a new system property called com.sun.jndi.ldap.object.trustURLCodebase must explicitly be set to the string value true in order for a codebase to be used. Otherwise, the codebase will be ignored by the class loader when restoring a Java object, and only those class files that appear on the classpath will be recognized.
Java Management Extensions(JMX) Change
In a JMX access property file, the readwrite access no longer allows the remote createMBean and unregisterMBean operations. These must now be provided explicitly via new clauses.
The default jmxremote.access file of the JRE ($JRE_HOME/lib/management/jmxremote.access) shows what this looks like:
monitorRole readonly
controlRole readwrite \
create javax.management.monitor.*,javax.management.timer.* \
unregister
CORBA Memory Leak Fix - Special Note
This update release and revision 5.0u16-rev-b12 and subsequent updates and revisions contain a fix for 6725987. When using updates and revisions prior to these, an ORB may contain valid references (that is, a memory leak) even after calling its shutdown() and destroy() methods, and it may respond to some method calls.
With this fix, the ORB correctly cleans up and the Garbage Collector can free up the memory held by such references. Incorrect accesses to such references or methods are likely to result in a NullPointerException to the application.
Root Certificates Included
Root Certificates are included in this release. The following root certificates have been added:
* VeriSign TSA Root Cert to the JDK (Refer to 6732157.)
* Two additional T-systems root CA certs (Refer to 6803022.)
* Two Unizeto root certs (Refer to 6803036.)
Bug Fixes
This release contains fixes for one or more security vulnerabilities. For more information, please see Sun Alerts 254569, 254570, 254571, 254608, and 254611.
Other bug fixes are listed in the following table.
BugId Category Subcategory Description 6676016 hotspot garbage_collector ParallelOldGC leaks memory
6461933 java classes_awt To adjust system boot time in nowMillisUTC() frequently
6637607 java classes_awt 1st char. is discarded after a modal dialogue shows up and disappears
6677578 java classes_awt Print dialog doesn't come up when brower window is maximized
6571589 java classes_lang (thread) Thread.getStackTrace() returns null
6446855 java classes_net https connections failing when connecting through a proxy
6687282 java classes_net URLConnection for HTTPS connection through Proxy w/ Digest Authentication gives 400 Bad Request
6720866 java classes_net Slow performance using HttpURLConnection for upload
6732157 java classes_security Add VeriSign TSA Root Cert to the JDK
6803022 java classes_security Add T-systems root CA certs to the JRE
6803036 java classes_security Add Unizeto root certs to the JRE
6639183 java classes_util_concurrent Scheduling large negative delay hangs entire ScheduledExecutor
6725789 java classes_util_concurrent ScheduledExecutorService does not work as expected in jdk7/6/5
6598520 java classes_util_i18n (tz) Windows time zone mapping table needs to be updated for KB933360
6650748 java classes_util_i18n (tz) Java runtime doesn't detect VET time zone correctly on Windows
6743394 java classes_util_i18n (tz) tzmappings must be updated for Windows
6783139 java classes_util_i18n (tz) Windows time zone mapping table needs to be updated for KB955839
6796489 java classes_util_i18n (tz) Support tzdata2009a
6487638 java classes_util_logging Calling LogManager.addLogger() and Logger.getLogger() cause deadlock
6719011 java_plugin ocx Applet isn't started when it's outside of the visible area of a browser window
6643769 java_plugin other Applet main windows steals focus on Popup windows which is running Applet.
6784894 java_plugin other Regression: applets loaded from local disk can not access co-located resources
6591117 jce pkcs11_csp Poor preformance of PKCS#11 security provider compared to Sun default provider
6725987 jets other ORB.destroy() does not cleanup correctly and ORB object instances are not garbage collected.
Changes in 1.5.0_17
The full internal version number for this update release is 1.5.0_17-b04 (where "b" means "build"). The external version number is 5.0u17.
Security Baseline
This update release specifies the following security baseline:
JRE Family Version Security Baseline 1.4.2 1.4.2_19
For more information about the security baseline, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer .
OlsonData 2008i
This release contains Olson time zone data version 2008i. For more information, refer to Timezone Data Versions in the JRE Software .
Updated UTF-8 Charset Implementation
Due to security concerns, the UTF-8 charset implementation in the JRE has been updated to handle the non-shortest form of UTF-8 byte sequences, and this introduces an incompatibility from previous releases. For example, the byte sequence of 0xc0 0xaf for U+002f, which has the shortest form of 0x2f, is a malformed input to the decoding operation. More details regarding the Non-shortest form of UTF-8 can be found at:
* UTF8-Shortest Form
* UTF8 Specification
Root Certificates Included
Root Certificates are included in this release. The following root certificates have been added:
* Camerfirma root certificates
* T-systems root CA certificate (Deutsche Telekom Root CA 2)
* SwissSign root certificates
Bug Fixes
This release contains fixes for one or more security vulnerabilities. For more information, please see Sun Alerts 244986, 244987, 244988, 244990, 244991, 244992, 245246, 246266, 246286, 246346, 246386, and 246387.
Other bug fixes are listed in the following table.
BugId Category Subcategory Description 6403625 hotspot compiler2 crash in compiled code when using profiler agent
6519515 hotspot compiler2 Loop-opts incorrectly removed a safepoint poll from a loop with an early exit
6606675 hotspot compiler2 Crash in CodeBuffer resize in 1.4.2_15
6676462 hotspot compiler2 JVM sometimes would suddenly consume significant amount of memory
6704367 hotspot runtime_system Stack sizes error with 1.5.0_14
6372405 idl orb Server thread hangs when fragments don't complete because of connection abort
5005426 java char_encodings Buffered stream data is discarded by IllegalStateException in 1.4.2 and Tiger
6359722 java classes_2d Uncatchable recursive NullPointerException at sun.font.TrueTypeFont.open()
6448405 java classes_2d static HashMap cache in LineBreakMeasurer can grow wihout bounds
6525150 java classes_2d Printer has "paper out" status and won't print due to a PrinterException
6638533 java classes_2d Layout should not apply shaping to precomposed arabic presentation form glyphs.
6532373 java classes_awt xcb_xlib.c:50: xcb_xlib_unlock: Assertion 'c->xlib.lock' failed.
6678061 java classes_awt undefined keycodes for certain keyboard layouts
6689088 java classes_awt Focus traversal doesn't work in the reverse order / related to the SR 70175950 / CR 6684528
6446990 java classes_net HttpURLConnection#available() reads more and more data into memory
6448457 java classes_nio (ch) Channels.newOutputStream().write() does not write all data
6728890 java classes_security Add SwissSign root certificates to the JDK
6754779 java classes_security Add Camerfirma root certificates to the JDK
6768559 java classes_security Add t-systems root CA certificate (Deutsche Telekom Root CA 2) to the JRE
6438246 java classes_swing File name field is mislabeled when JFileChooser is used in DIRECTORIES_ONLY mode
6581899 java classes_swing JTextField & JTextArea - Poor performance with JRE 1.5.0_08
6648714 java classes_swing JScrollPane repaints incorrectly on larger monitor of dual monitor system (5.0)
6466476 java classes_util_i18n (tz) Introduction of tzdata2005r can introduce incompatility issues with some JDK1.1 3-letter TZ Ids
6764308 java classes_util_i18n (tz) Support tzdata2008i
6623981 java compiler javac StackOverFlowError in 1.4.1/1.4.2
6709709 java javadoctool javadoc does not get compilation errors after type erasure
6536107 java_plugin iexplorer GDI leak detected by opening the Print Dialog repeatedly
6746185 javawebstart other Malformed URL Exception: JWS regression introduced in 1.5.0_16
6578538 jce classes_crypto com.sun.crypto.provider.SunJCE instance leak using KRB5 and LoginContext
6697180 jmx classes JMX query results in java.io.IOException: Illegal state - also a deadlock can also be seen
6618387 jsse runtime SSL client sessions do not close cleanly. A TCP reset occurs instead of a close_notify alert.
6668231 jsse runtime Presence of a critical subjectAltName causes JSSE's SunX509 to fail trusted checks
