Blame SOURCES/NEWS

2578b9
Key:
2578b9
2578b9
JDK-X  - https://bugs.openjdk.java.net/browse/JDK-X
2578b9
CVE-XXXX-YYYY: https://cve.mitre.org/cgi-bin/cvename.cgi?name=XXXX-YYYY
2578b9
2578b9
New in release OpenJDK 11.0.14.1 (2022-02-08):
2578b9
=============================================
2578b9
Live versions of these release notes can be found at:
2578b9
  * https://bitly.com/openjdk110141
2578b9
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.14.1.txt
2578b9
2578b9
* Other changes
2578b9
  - JDK-8218546: Unable to connect to https://google.com using java.net.HttpClient
2578b9
  - JDK-8280786: Build failure on Solaris after 8262392
2578b9
  - JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1
2578b9
2578b9
New in release OpenJDK 11.0.14 (2022-01-18):
2578b9
=============================================
2578b9
Live versions of these release notes can be found at:
2578b9
  * https://bitly.com/openjdk11014
2578b9
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.14.txt
2578b9
2578b9
* New features
2578b9
  - JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
2578b9
* Security fixes
2578b9
  - JDK-8217375: jarsigner breaks old signature with long lines in manifest
2578b9
  - JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if zip has dir named "." inside
2578b9
  - JDK-8264934, CVE-2022-21248: Enhance cross VM serialization
2578b9
  - JDK-8268488: More valuable DerValues
2578b9
  - JDK-8268494: Better inlining of inlined interfaces
2578b9
  - JDK-8268512: More content for ContentInfo
2578b9
  - JDK-8268795: Enhance digests of Jar files
2578b9
  - JDK-8268801: Improve PKCS attribute handling
2578b9
  - JDK-8268813, CVE-2022-21283: Better String matching
2578b9
  - JDK-8269151: Better construction of EncryptedPrivateKeyInfo
2578b9
  - JDK-8269944: Better HTTP transport redux
2578b9
  - JDK-8270386, CVE-2022-21291: Better verification of scan methods
2578b9
  - JDK-8270392, CVE-2022-21293: Improve String constructions
2578b9
  - JDK-8270416, CVE-2022-21294: Enhance construction of Identity maps
2578b9
  - JDK-8270492, CVE-2022-21282: Better resolution of URIs
2578b9
  - JDK-8270498, CVE-2022-21296: Improve SAX Parser configuration management
2578b9
  - JDK-8270646, CVE-2022-21299: Improved scanning of XML entities
2578b9
  - JDK-8270952, CVE-2022-21277: Improve TIFF file handling
2578b9
  - JDK-8271962: Better TrueType font loading
2578b9
  - JDK-8271968: Better canonical naming
2578b9
  - JDK-8271987: Manifest improved manifest entries
2578b9
  - JDK-8272014, CVE-2022-21305: Better array indexing
2578b9
  - JDK-8272026, CVE-2022-21340: Verify Jar Verification
2578b9
  - JDK-8272236, CVE-2022-21341: Improve serial forms for transport
2578b9
  - JDK-8272272: Enhance jcmd communication
2578b9
  - JDK-8272462: Enhance image handling
2578b9
  - JDK-8273290: Enhance sound handling
2578b9
  - JDK-8273756, CVE-2022-21360: Enhance BMP image support
2578b9
  - JDK-8273838, CVE-2022-21365: Enhanced BMP processing
2578b9
  - JDK-8274096, CVE-2022-21366: Improve decoding of image files
2578b9
  - JDK-8279541: Improve HarfBuzz
2578b9
* Other changes
2578b9
  - JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/ChoiceKeyEventReaction.html fails
2578b9
  - JDK-7105119: [TEST_BUG] [macosx] In test UIDefaults.toString() must be called with the invokeLater()
2578b9
  - JDK-7151826: [TEST_BUG] [macosx] The test javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
2578b9
  - JDK-7179006: [macosx] Print-to-file doesn't work: printing to the default printer instead
2578b9
  - JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/bug4726194.java fails on MacOSX
2578b9
  - JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003  Wrong number of thread end events
2578b9
  - JDK-8039261: [TEST_BUG]: There is not a minimal security level in Java Preferences and the TestApplet.html is blocked.
2578b9
  - JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/AltTabCrashTest.java fails with exception
2578b9
  - JDK-8075909: [TEST_BUG] The regression-swing case failed as it does not have the 'Open' button when select 'subdir' folder with NimbusLAF
2578b9
  - JDK-8078219: Verify lack of @test tag in files in java/net test directory
2578b9
  - JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails with "RuntimeException: Process terminated prematurely"
2578b9
  - JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/ThreadMXBeanStateTest.java timed out intermittently
2578b9
  - JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails intermittently
2578b9
  - JDK-8131745: java/lang/management/ThreadMXBean/AllThreadIds.java still fails intermittently
2578b9
  - JDK-8136517: [macosx]Test  java/awt/Focus/8073453/AWTFocusTransitionTest.java fails on MacOSX
2578b9
  - JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/4251579/bug4251579.java failure due to timing
2578b9
  - JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/Test6541987.java fails
2578b9
  - JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/bug4760494.java leaves key pressed
2578b9
  - JDK-8159904: [TEST_BUG] Failure on solaris of java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
2578b9
  - JDK-8163086: java/awt/Window/TranslucentJAppletTest/TranslucentJAppletTest.java fails
2578b9
  - JDK-8165828: [TEST_BUG] The reg case:javax/swing/plaf/metal/MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look and Feel
2578b9
  - JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not fired! on Windows
2578b9
  - JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException: Default button is not pressed
2578b9
  - JDK-8169959: javax/swing/JTable/6263446/bug6263446.java: Table should be editing
2578b9
  - JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/7156657/bug7156657.java fails on OS X
2578b9
  - JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails on Windows
2578b9
  - JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java fails intermittently
2578b9
  - JDK-8179880: Refactor javax/security shell tests to plain java tests
2578b9
  - JDK-8180568: Refactor javax/crypto shell tests to plain java tests
2578b9
  - JDK-8180569: Refactor sun/security/krb5/ shell tests to plain java tests
2578b9
  - JDK-8180571: Refactor sun/security/pkcs11 shell tests to plain java tests and fix failures
2578b9
  - JDK-8180573: Refactor sun/security/tools shell tests to plain java tests
2578b9
  - JDK-8187649: ArrayIndexOutOfBoundsException in java.util.JapaneseImperialCalendar
2578b9
  - JDK-8190753: (zipfs): Accessing a large entry (> 2^31 bytes) leads to a negative initial size for ByteArrayOutputStream
2578b9
  - JDK-8195703: BasicJDWPConnectionTest.java: 'App exited unexpectedly with 2'
2578b9
  - JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java fails
2578b9
  - JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java fails
2578b9
  - JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/NoEventsTest.java fails on Windows
2578b9
  - JDK-8197811: Test java/awt/Choice/PopupPosTest/PopupPosTest.java fails on Windows
2578b9
  - JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java fails on mac
2578b9
  - JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java fails on mac
2578b9
  - JDK-8198619: java/awt/Focus/FocusTraversalPolicy/ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java fails on mac
2578b9
  - JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java fails on mac
2578b9
  - JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/SubMenuShowTest/SubMenuShowTest.html fails on mac
2578b9
  - JDK-8199138: Add RISC-V support to Zero
2578b9
  - JDK-8199529: javax/swing/text/Utilities/8142966/SwingFontMetricsTest.java fails on windows
2578b9
  - JDK-8201224: Make string buffer size dynamic in mlvmJvmtiUtils.c
2578b9
  - JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/FollowReferences/followref003/TestDescription.java fails with "Location mismatch" errors
2578b9
  - JDK-8204161: [TESTBUG] auto failed with the "Applet thread threw exception: java.lang.UnsupportedOperationException" exception
2578b9
  - JDK-8206085: Refactor langtools/tools/javac/versions/Versions.java
2578b9
  - JDK-8207936: TestZipFile failed with java.lang.AssertionError exception
2578b9
  - JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
2578b9
  - JDK-8209611: use C++ compiler for hotspot tests
2578b9
  - JDK-8210182: Remove macros for C compilation from vmTestBase but non jvmti
2578b9
  - JDK-8210198: Clean up JNI_ENV_ARG for vmTestbase/jvmti/Get[A-F] tests
2578b9
  - JDK-8210205: build fails on AIX in hotspot cpp tests (for example getstacktr001.cpp)
2578b9
  - JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION on windows-x86
2578b9
  - JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java back to tier1
2578b9
  - JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros for vmTestbase/jvmti[A-N] tests
2578b9
  - JDK-8210392: assert(Compile::current()->live_nodes() < Compile::current()->max_node_limit()) failed: Live Node limit exceeded limit
2578b9
  - JDK-8210395: Add doc to SecurityTools.java
2578b9
  - JDK-8210429: Clean up JNI_ENV_ARG for vmTestbase/jvmti/Get[G-Z] tests
2578b9
  - JDK-8210481: Remove #ifdef cplusplus from vmTestbase
2578b9
  - JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros for vmTestbase/jvmti[N-R] tests
2578b9
  - JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros for vmTestbase/jvmti[R-U] tests
2578b9
  - JDK-8210689: Remove the multi-line old C style for string literals
2578b9
  - JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros for vmTestbase/jvmti/unit tests
2578b9
  - JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
2578b9
  - JDK-8210920: Native C++ tests are not using CXXFLAGS
2578b9
  - JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR: hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti, thread)"
2578b9
  - JDK-8211036: Remove the NSK_STUB macros from vmTestbase for non jvmti
2578b9
  - JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase for jvmti/[G-I]*
2578b9
  - JDK-8211148: var in implicit lambdas shouldn't be accepted for source < 11
2578b9
  - JDK-8211171: move JarUtils to top-level testlibrary
2578b9
  - JDK-8211227: Inconsistent TLS protocol version in debug output
2578b9
  - JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase for jvmti/[A-G]*
2578b9
  - JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
2578b9
  - JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase for jvmti/[I-S]*
2578b9
  - JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase for jvmti/scenarios/[A-E]
2578b9
  - JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase for jvmti/scenarios/[E-M]
2578b9
  - JDK-8211905: Remove multiple casts for EM06 file
2578b9
  - JDK-8211999: Window positioning bugs due to overlapping GraphicsDevice bounds (Windows/HiDPI)
2578b9
  - JDK-8212082: Remove the NSK_CPP_STUB macros for remaining vmTestbase/jvmti/[sS]*
2578b9
  - JDK-8212083: Handle remaining gc/lock native code and fix two strings
2578b9
  - JDK-8212148: Remove remaining NSK_CPP_STUBs
2578b9
  - JDK-8213110: Remove the use of applets in automatic tests
2578b9
  - JDK-8213189: Make restricted headers in HTTP Client configurable and remove Date by default
2578b9
  - JDK-8213263: fix legal headers in test/langtools
2578b9
  - JDK-8213296: Fix legal headers in test/jdk/java/net
2578b9
  - JDK-8213301: Fix legal headers in jdk logging tests
2578b9
  - JDK-8213305: Fix legal headers in test/java/math
2578b9
  - JDK-8213306: Fix legal headers in test/java/nio
2578b9
  - JDK-8213328: Update test copyrights in test/java/util/zip and test/jdk/tools
2578b9
  - JDK-8213330: Fix legal headers in i18n tests
2578b9
  - JDK-8213707: [TEST] vmTestbase/nsk/stress/except/except011.java failed due to wrong class name
2578b9
  - JDK-8214469: [macos] PIT: java/awt/Choice/ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
2578b9
  - JDK-8215410: Regression test for JDK-8214994
2578b9
  - JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
2578b9
  - JDK-8215624: Add parallel heap iteration for jmap –histo
2578b9
  - JDK-8215889: assert(!_unloading) failed: This oop is not available to unloading class loader data with ZGC
2578b9
  - JDK-8216318: The usage of Disposer in the java.awt.Robot can be deleted
2578b9
  - JDK-8216417: cleanup of IPv6 scope-id handling
2578b9
  - JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java failed with UnsupportedOperation exception
2578b9
  - JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
2578b9
  - JDK-8217633: Configurable extensions with system properties
2578b9
  - JDK-8217882: java/net/httpclient/MaxStreams.java failed once
2578b9
  - JDK-8217903: java/net/httpclient/Response204.java fails with 404
2578b9
  - JDK-8218483: Crash in "assert(_daemon_threads_count->get_value() > daemon_count) failed: thread count mismatch 5 : 5"
2578b9
  - JDK-8219986: Change to Xcode 10.1 for building on Macosx at Oracle
2578b9
  - JDK-8220575: Correctly format test URI's that contain a retrieved IPv6 address
2578b9
  - JDK-8221259: New tests for java.net.Socket to exercise long standing behavior
2578b9
  - JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails on MacOS + Solaris
2578b9
  - JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/FocusTraversal.java fails on ubuntu
2578b9
  - JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/IconifyTest.java fails on ubuntu18.04
2578b9
  - JDK-8222446: assert(C->env()->system_dictionary_modification_counter_changed()) failed: Must invalidate if TypeFuncs differ
2578b9
  - JDK-8223137: Rename predicate 'do_unroll_only()' to 'is_unroll_only()'.
2578b9
  - JDK-8223138: Small clean-up in loop-tree support.
2578b9
  - JDK-8223139: Rename mandatory policy-do routines.
2578b9
  - JDK-8223140: Clean-up in 'ok_to_convert()'
2578b9
  - JDK-8223141: Change (count) suffix _ct into _cnt.
2578b9
  - JDK-8223400: Replace some enums with static const members in hotspot/runtime
2578b9
  - JDK-8223658: Performance regression of XML.validation in 13-b19
2578b9
  - JDK-8223923: C2: Missing interference with mismatched unsafe accesses
2578b9
  - JDK-8224829: AsyncSSLSocketClose.java has timing issue
2578b9
  - JDK-8225083: Remove Google certificate that is expiring in December 2021
2578b9
  - JDK-8226514: Replace wildcard address with loopback or local host in tests - part 17
2578b9
  - JDK-8226943: compile error in libfollowref003.cpp  with XCode 10.2 on macosx
2578b9
  - JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed due to "SSLException: An established connection was aborted by the software in your host machine"
2578b9
  - JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java fails on Windows7
2578b9
  - JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently positions text
2578b9
  - JDK-8230019: [REDO] compiler/types/correctness/* tests fail with "assert(recv == __null || recv->is_klass()) failed: wrong type"
2578b9
  - JDK-8230067: Add optional automatic retry when running jtreg tests
2578b9
  - JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests may fail on some platforms
2578b9
  - JDK-8231501: VM crash in MethodData::clean_extra_data(CleanExtraDataClosure*):  fatal error: unexpected tag 99
2578b9
  - JDK-8233403: Improve verbosity of some httpclient tests
2578b9
  - JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
2578b9
  - JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on MacOS
2578b9
  - JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on MacOS
2578b9
  - JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
2578b9
  - JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
2578b9
  - JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on macos
2578b9
  - JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is failing on macos
2578b9
  - JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails on macos
2578b9
  - JDK-8233562: [TESTBUG] Swing StyledEditorKit test bug4506788.java fails on MacOS
2578b9
  - JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
2578b9
  - JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on MacoS
2578b9
  - JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
2578b9
  - JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java fails on macos
2578b9
  - JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is failing on macos
2578b9
  - JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails on macos
2578b9
  - JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java fails on macos
2578b9
  - JDK-8233637: [TESTBUG] Swing ActionListenerCalledTwiceTest.java fails on macos
2578b9
  - JDK-8233638: [TESTBUG] Swing test ScreenMenuBarInputTwice.java fails on macos
2578b9
  - JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails on macos
2578b9
  - JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails on macos
2578b9
  - JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on macos
2578b9
  - JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is failing on macos
2578b9
  - JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is failing on macos
2578b9
  - JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture Recognition in all the platforms
2578b9
  - JDK-8234823: java/net/Socket/Timeouts.java testcase testTimedConnect2() fails on Windows 10
2578b9
  - JDK-8235784: java/lang/invoke/VarHandles/VarHandleTestByteArrayAsInt.java fails due to timeout with fastdebug bits
2578b9
  - JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java fails with -Xcomp -XX:TieredStopAtLevel=1
2578b9
  - JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60), cond_wait
2578b9
  - JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT, when using proxy tunnel
2578b9
  - JDK-8237354: Add option to jcmd to write a gzipped heap dump
2578b9
  - JDK-8237589: Fix copyright header formatting
2578b9
  - JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java should not specify TLS version
2578b9
  - JDK-8239334: Tab Size does not work correctly in JTextArea with setLineWrap on
2578b9
  - JDK-8239422: [TESTBUG] compiler/c1/TestPrintIRDuringConstruction.java failed when C1 is disabled
2578b9
  - JDK-8239827: The test OpenByUNCPathNameTest.java should be changed to be manual
2578b9
  - JDK-8240256: Better resource cleaning for SunPKCS11 Provider
2578b9
  - JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test Server
2578b9
  - JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/bug8020708.java fails in mach5 ubuntu system
2578b9
  - JDK-8242793: Incorrect copyright header in ContinuousCallSiteTargetChange.java
2578b9
  - JDK-8243543: jtreg test security/infra/java/security/cert/CertPathValidator/certification/BuypassCA.java fails
2578b9
  - JDK-8244292: Headful clients failing with --illegal-access=deny
2578b9
  - JDK-8245147: Refactor and improve utility of test/langtools/tools/javac/versions/Versions.java
2578b9
  - JDK-8245165: Update bug id for javax/swing/text/StyledEditorKit/4506788/bug4506788.java in ProblemList
2578b9
  - JDK-8245665: Test WeakAlg.java should only make sure no warning for weak signature algorithms by keytool on root CA
2578b9
  - JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails after 8241072 (multi-homed systems)
2578b9
  - JDK-8246807: Incorrect copyright header in TimeZoneDatePermissionCheck.sh
2578b9
  - JDK-8247403: JShell: No custom input (e.g. from GUI) possible with JavaShellToolBuilder
2578b9
  - JDK-8247510: typo in IllegalHandshakeMessage
2578b9
  - JDK-8248187: [TESTBUG] javax/swing/plaf/basic/BasicGraphicsUtils/8132119/bug8132119.java fails with String is not properly drawn
2578b9
  - JDK-8248341: ProblemList java/lang/management/ThreadMXBean/ThreadMXBeanStateTest.java
2578b9
  - JDK-8248500: AArch64: Remove the r18 dependency on Windows AArch64
2578b9
  - JDK-8248899: security/infra/java/security/cert/CertPathValidator/certification/QuoVadisCA.java fails, Certificate has been revoked
2578b9
  - JDK-8249195: Change to Xcode 11.3.1 for building on Macos at Oracle
2578b9
  - JDK-8250521: Configure initial RTO to use minimal retry for loopback connections on Windows
2578b9
  - JDK-8250810: Push missing parts of JDK-8248817
2578b9
  - JDK-8250839: Improve test template SSLEngineTemplate with SSLContextTemplate
2578b9
  - JDK-8250863: Build error with GCC 10 in NetworkInterface.c and k_standard.c
2578b9
  - JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/gf08t001/TestDriver.java fails
2578b9
  - JDK-8251155: HostIdentifier fails to canonicalize hostnames starting with digits
2578b9
  - JDK-8251377: [macos11] JTabbedPane selected tab text is barely legible
2578b9
  - JDK-8251570: JDK-8215624 causes assert(worker_id < _n_workers) failed: Invalid worker_id
2578b9
  - JDK-8251930: AArch64: Native types mismatch in hotspot
2578b9
  - JDK-8252049: Native memory leak in ciMethodData ctor
2578b9
  - JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x friendly
2578b9
  - JDK-8252114: Windows-AArch64: Enable and test ZGC and ShenandoahGC
2578b9
  - JDK-8253015: Aarch64: Move linux code out from generic CPU feature detection
2578b9
  - JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java fail on big screens
2578b9
  - JDK-8253497: Core Libs Terminology Refresh
2578b9
  - JDK-8253682: The AppletInitialFocusTest1.java is unstable
2578b9
  - JDK-8253763: ParallelObjectIterator should have virtual destructor
2578b9
  - JDK-8253866: Security Libs Terminology Refresh
2578b9
  - JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in "try throwing in GET_BODY"
2578b9
  - JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java intermittently failing with TestServer: start exception: java.io.IOException: Invalid preface
2578b9
  - JDK-8255264: Support for identifying the full range of IPv4 localhost addresses on Windows
2578b9
  - JDK-8255716: AArch64: Regression: JVM crashes if manually offline a core
2578b9
  - JDK-8255722: Create a new test for rotated blit
2578b9
  - JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
2578b9
  - JDK-8256066: Tests use deprecated TestNG API that is no longer available in new versions
2578b9
  - JDK-8256152: tests fail because of ambiguous method resolution
2578b9
  - JDK-8256182: Update qemu-debootstrap cross-compilation recipe
2578b9
  - JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/FullscreenWindowProps.java failed
2578b9
  - JDK-8256202: Some tweaks for jarsigner tests PosixPermissionsTest and SymLinkTest
2578b9
  - JDK-8256372: [macos] Unexpected symbol was displayed on JTextField with Monospaced font
2578b9
  - JDK-8256956: RegisterImpl::max_slots_per_register is incorrect on AMD64
2578b9
  - JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with InvalidPathException on windows
2578b9
  - JDK-8258855: Two tests sun/security/krb5/auto/ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java failed on OL8.3
2578b9
  - JDK-8259237: Demo selection changes with left/right arrow key. No need to press space for selection.
2578b9
  - JDK-8260571: Add PrintMetaspaceStatistics to print metaspace statistics upon VM exit
2578b9
  - JDK-8260690: JConsole User Guide Link from the Help menu is not accessible by keyboard
2578b9
  - JDK-8261036: Reduce classes loaded by CleanerFactory initialization
2578b9
  - JDK-8261071: AArch64: Refactor interpreter native wrappers
2578b9
  - JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch implementation
2578b9
  - JDK-8261236: C2: ClhsdbJstackXcompStress test fails when StressGCM is enabled
2578b9
  - JDK-8261297: NMT: Final report should use scale 1
2578b9
  - JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java fails because Reserved memory size is too big
2578b9
  - JDK-8261916: gtest/GTestWrapper.java vmErrorTest.unimplemented1_vm_assert failed
2578b9
  - JDK-8262438: sun/security/ssl/SSLLogger/LoggingFormatConsistency.java failed with "SocketException: Socket is closed"
2578b9
  - JDK-8262731: [macOS] Exception from "Printable.print" is swallowed during "PrinterJob.print"
2578b9
  - JDK-8262844: (fs) FileStore.supportsFileAttributeView might return false negative in case of ext3
2578b9
  - JDK-8263059: security/infra/java/security/cert/CertPathValidator/certification/ComodoCA.java fails due to revoked cert
2578b9
  - JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
2578b9
  - JDK-8263303: C2 compilation fails with assert(found_sfpt) failed: no node in loop that's not input to safepoint
2578b9
  - JDK-8263362: Avoid division by 0 in  java/awt/font/TextJustifier.java justify
2578b9
  - JDK-8263773: Reenable German localization for builds at Oracle
2578b9
  - JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java failed with "java.lang.RuntimeException: Wrong method"
2578b9
  - JDK-8264526: javax/swing/text/html/parser/Parser/8078268/bug8078268.java timeout
2578b9
  - JDK-8264824: java/net/Inet6Address/B6206527.java doesn't close ServerSocket properly
2578b9
  - JDK-8265019: Update tests for additional TestNG test permissions
2578b9
  - JDK-8265173: [test] divert spurious log output away from stream under test in ProcessBuilder Basic test
2578b9
  - JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
2578b9
  - JDK-8266182: Automate manual steps listed in the test jdk/sun/security/pkcs12/ParamsTest.java
2578b9
  - JDK-8266579: Update test/jdk/java/lang/ProcessHandle/PermissionTest.java & test/jdk/java/sql/testng/util/TestPolicy.java
2578b9
  - JDK-8266949: Check possibility to disable OperationTimedOut on Unix
2578b9
  - JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg tests on many-core machines
2578b9
  - JDK-8267256: Extend minimal retry for loopback connections on Windows to PlainSocketImpl
2578b9
  - JDK-8267304: Bump global JTReg memory limit to 768m
2578b9
  - JDK-8267652: c2 loop unrolling by 8 results in reading memory past array
2578b9
  - JDK-8268019: C2: assert(no_dead_loop) failed: dead loop detected
2578b9
  - JDK-8268093: Manual Testcase: "sun/security/krb5/config/native/TestDynamicStore.java" Fails with NPE
2578b9
  - JDK-8268555: Update HttpClient tests that use ITestContext to jtreg 6+1
2578b9
  - JDK-8268672: C2: assert(!loop->is_member(u_loop)) failed: can be in outer loop or out of both loops only
2578b9
  - JDK-8269034: AccessControlException for SunPKCS11 daemon threads
2578b9
  - JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to accessClassAndFindClass
2578b9
  - JDK-8269574: C2: Avoid redundant uncommon traps in GraphKit::builtin_throw() for JVMTI exception events
2578b9
  - JDK-8269656: The test test/langtools/tools/javac/versions/Versions.java has duplicate test cycles
2578b9
  - JDK-8269768: JFR Terminology Refresh
2578b9
  - JDK-8269951: [macos] Focus not painted in JButton when  setBorderPainted(false) is invoked
2578b9
  - JDK-8269984: [macos] JTabbedPane title looks like  disabled
2578b9
  - JDK-8269993: [Test]: java/net/httpclient/DigestEchoClientSSL.java contains redundant @run tags
2578b9
  - JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to run in all LaFs, including Aqua on macOS
2578b9
  - JDK-8270216: [macOS] Update named used for Java run loop mode
2578b9
  - JDK-8270280: security/infra/java/security/cert/CertPathValidator/certification/LetsEncryptCA.java  OCSP response error
2578b9
  - JDK-8270290: NTLM authentication fails if HEAD request is used
2578b9
  - JDK-8270317: Large Allocation in CipherSuite
2578b9
  - JDK-8270344: Session resumption errors
2578b9
  - JDK-8270517: Add Zero support for LoongArch
2578b9
  - JDK-8270533: AArch64: size_fits_all_mem_uses should return false if its output is a CAS
2578b9
  - JDK-8270886: Crash in PhaseIdealLoop::verify_strip_mined_scheduling
2578b9
  - JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with "lists don't have the same size expected"
2578b9
  - JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
2578b9
  - JDK-8271341: Opcode() != Op_If && Opcode() != Op_RangeCheck) || outcnt() == 2 assert failure with Test7179138_1.java
2578b9
  - JDK-8271459: C2: Missing NegativeArraySizeException when creating StringBuilder with negative capacity
2578b9
  - JDK-8271490: [ppc] [s390]: Crash in JavaThread::pd_get_top_frame_for_profiling
2578b9
  - JDK-8271560: sun/security/ssl/DHKeyExchange/LegacyDHEKeyExchange.java still fails due to "An established connection was aborted by the software in your host machine"
2578b9
  - JDK-8271567: AArch64: AES Galois CounterMode (GCM) interleaved implementation using vector instructions
2578b9
  - JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
2578b9
  - JDK-8272181: Windows-AArch64:Backport fix of `Backtracing broken on PAC enabled systems`
2578b9
  - JDK-8272316: Wrong Boot JDK help message in 11
2578b9
  - JDK-8272318: Improve performance of HeapDumpAllTest
2578b9
  - JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/PageDialogMarginTest.java catches all exceptions
2578b9
  - JDK-8272570: C2: crash in PhaseCFG::global_code_motion
2578b9
  - JDK-8272574: C2: assert(false) failed: Bad graph detected in build_loop_late
2578b9
  - JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh fails after JDK-8266182
2578b9
  - JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/security/cert/CertPathValidator/certification/BuypassCA.java no longer needs ocspEnabled
2578b9
  - JDK-8272720: Fix the implementation of loop unrolling heuristic with LoopPercentProfileLimit
2578b9
  - JDK-8272783: Epsilon: Refactor tests to improve performance
2578b9
  - JDK-8272806: [macOS] "Apple AWT Internal Exception" when input method is changed
2578b9
  - JDK-8272828: Add correct licenses to jszip.md
2578b9
  - JDK-8272836: Limit run time for java/lang/invoke/LFCaching tests
2578b9
  - JDK-8272850: Drop zapping values in the Zap* option descriptions
2578b9
  - JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
2578b9
  - JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test groups
2578b9
  - JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java fails by timeout
2578b9
  - JDK-8273026: Slow LoginContext.login() on multi threading application
2578b9
  - JDK-8273229: Update OS detection code to recognize Windows Server 2022
2578b9
  - JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on Windows 32bit
2578b9
  - JDK-8273308: PatternMatchTest.java fails on CI
2578b9
  - JDK-8273314: Add tier4 test groups
2578b9
  - JDK-8273342: Null pointer dereference in classFileParser.cpp:2817
2578b9
  - JDK-8273358: macOS Monterey does not have the font Times needed by Serif
2578b9
  - JDK-8273373: Zero: Cannot invoke JVM in primordial threads on Zero
2578b9
  - JDK-8273498: compiler/c2/Test7179138_1.java timed out
2578b9
  - JDK-8273541: Cleaner Thread creates with normal priority instead of MAX_PRIORITY - 2
2578b9
  - JDK-8273547: [11u] [JVMCI] Partial module-info.java backport of JDK-8223332
2578b9
  - JDK-8273606: Zero: SPARC64 build fails with si_band type mismatch
2578b9
  - JDK-8273646: Add openssl from path variable also in to Default System Openssl Path in OpensslArtifactFetcher
2578b9
  - JDK-8273671: Backport of 8260616 misses one JNF header inclusion removal
2578b9
  - JDK-8273790: Potential cyclic dependencies between Gregorian and CalendarSystem
2578b9
  - JDK-8273795: Zero SPARC64 debug builds fail due to missing interpreter fields
2578b9
  - JDK-8273826: Correct Manifest file name and NPE checks
2578b9
  - JDK-8273894: ConcurrentModificationException raised every time ReferralsCache drops referral
2578b9
  - JDK-8273924: ArrayIndexOutOfBoundsException thrown in java.util.JapaneseImperialCalendar.add()
2578b9
  - JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file path contains '+' character
2578b9
  - JDK-8273968: JCK javax_xml tests fail in CI
2578b9
  - JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
2578b9
  - JDK-8274083: Update testing docs to mention tiered testing
2578b9
  - JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork is deprecated
2578b9
  - JDK-8274326: [macos] Ensure initialisation of sun/lwawt/macosx/CAccessibility in JavaComponentAccessibility.m
2578b9
  - JDK-8274329: Fix non-portable HotSpot code in MethodMatcher::parse_method_pattern
2578b9
  - JDK-8274381: missing CAccessibility definitions in JNI code
2578b9
  - JDK-8274407: (tz) Update Timezone Data to 2021c
2578b9
  - JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
2578b9
  - JDK-8274468: TimeZoneTest.java fails with tzdata2021b
2578b9
  - JDK-8274522: java/lang/management/ManagementFactory/MXBeanException.java test fails with Shenandoah
2578b9
  - JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with NoSuchElementException after JDK-8271287
2578b9
  - JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently fails on weak memory model platform
2578b9
  - JDK-8274779: HttpURLConnection: HttpClient and HttpsClient incorrectly check request method when set to POST
2578b9
  - JDK-8274840: Update OS detection code to recognize Windows 11
2578b9
  - JDK-8274860: gcc 10.2.1 produces an uninitialized warning in sharedRuntimeTrig.cpp
2578b9
  - JDK-8275051: Shenandoah: Correct ordering of requested gc cause and gc request flag
2578b9
  - JDK-8275131: Exceptions after a touchpad gesture on macOS
2578b9
  - JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
2578b9
  - JDK-8275766: (tz) Update Timezone Data to 2021e
2578b9
  - JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
2578b9
  - JDK-8276066: Reset LoopPercentProfileLimit for x86 due to suboptimal performance
2578b9
  - JDK-8276139: TestJpsHostName.java not reliable, better to expand HostIdentifierCreate.java test
2578b9
  - JDK-8276157: C2: Compiler stack overflow during escape analysis on Linux x86_32
2578b9
  - JDK-8276201: Shenandoah: Race results degenerated GC to enter wrong entry point
2578b9
  - JDK-8276536: Update TimeZoneNames files to follow the changes made by JDK-8275766
2578b9
  - JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
2578b9
  - JDK-8276774: Cookie stored in CookieHandler not sent if user headers contain cookie
2578b9
  - JDK-8276854: Windows GHA builds fail due to broken Cygwin
2578b9
  - JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify output array sizes
2578b9
  - JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString() throws NPE
2578b9
  - JDK-8277529: SIGSEGV in C2 CompilerThread Node::rematerialize() compiling Packet::readUnsignedTrint
2578b9
  - JDK-8277815: Fix mistakes in legal header backports
2578b9
2578b9
Notes on individual issues:
2578b9
===========================
2578b9
2578b9
core-svc/tools:
2578b9
2578b9
JDK-8250554: New Option Added to jcmd for Writing a gzipped Heap Dump
2578b9
=====================================================================
2578b9
A new integer option `gz` has been added to the `GC.heap_dump`
2578b9
diagnostic command. If it is specified, it will enable the gzip
2578b9
compression of the written heap dump. The supplied value is the
2578b9
compression level. It can range from 1 (fastest) to 9 (slowest, but
2578b9
best compression). The recommended level is 1.
2578b9
2578b9
security-libs/javax.net.ssl:
2578b9
2578b9
JDK-8260310: Configurable Extensions With System Properties
2578b9
===========================================================
2578b9
Two new system properties have been added. The system property,
2578b9
`jdk.tls.client.disableExtensions`, is used to disable TLS extensions
2578b9
used in the client. The system property,
2578b9
`jdk.tls.server.disableExtensions`, is used to disable TLS extensions
2578b9
used in the server. If an extension is disabled, it will be neither
2578b9
produced nor processed in the handshake messages.
2578b9
2578b9
The property string is a list of comma separated standard TLS
2578b9
extension names, as registered in the IANA documentation (for example,
2578b9
server_name, status_request, and signature_algorithms_cert). Note that
2578b9
the extension names are case sensitive. Unknown, unsupported,
2578b9
misspelled and duplicated TLS extension name tokens will be ignored.
2578b9
2578b9
Please note that the impact of blocking TLS extensions is
2578b9
complicated. For example, a TLS connection may not be able to be
2578b9
established if a mandatory extension is disabled. Please do not
2578b9
disable mandatory extensions, and do not use this feature unless you
2578b9
clearly understand the impact.
2578b9
2578b9
security-libs/javax.crypto:pkcs11:
2578b9
2578b9
JDK-8272907: New SunPKCS11 Configuration Properties
2578b9
===================================================
2578b9
The SunPKCS11 provider gains new provider configuration attributes to
2578b9
better control native resources usage. The SunPKCS11 provider consumes
2578b9
native resources in order to work with native PKCS11 libraries. To
2578b9
manage and better control the native resources, additional
2578b9
configuration attributes are added to control the frequency of
2578b9
clearing native references as well as whether to destroy the
2578b9
underlying PKCS11 Token after logout.
2578b9
2578b9
The 3 new attributes for the SunPKCS11 provider configuration file
2578b9
are:
2578b9
2578b9
1) `destroyTokenAfterLogout` (boolean, defaults to false)
2578b9
2578b9
If set to true, when `java.security.AuthProvider.logout()` is called
2578b9
upon the SunPKCS11 provider instance, the underlying Token object will
2578b9
be destroyed and resources will be freed. This essentially renders the
2578b9
SunPKCS11 provider instance unusable after `logout()` calls. Note that
2578b9
a PKCS11 provider with this attribute set to `true` should not be
2578b9
added to the system provider list since the provider object is not
2578b9
usable after a `logout()` method call.
2578b9
2578b9
2) `cleaner.shortInterval` (integer, defaults to 2000, in milliseconds)
2578b9
2578b9
This defines the frequency for clearing native references during busy
2578b9
periods (such as, how often should the cleaner thread processes the
2578b9
no-longer-needed native references in the queue to free up native
2578b9
memory). Note that the cleaner thread will switch to the
2578b9
'longInterval' frequency after 200 failed tries (such as, when no
2578b9
references are found in the queue).
2578b9
2578b9
3) `cleaner.longInterval` (integer, defaults to 60000, in milliseconds)
2578b9
2578b9
This defines the frequency for checking native reference during
2578b9
non-busy period (such as, how often should the cleaner thread check
2578b9
the queue for native references). Note that the cleaner thread will
2578b9
switch back to the 'shortInterval' value if native PKCS11 references
2578b9
for cleaning are detected.
2578b9
2578b9
core-libs/java.nio:
2578b9
2578b9
JDK-8271517: Zip File System Provider Throws ZipException when entry name element contains "." or "."
2578b9
=====================================================================================================
2578b9
The ZIP file system provider has been changed to reject existing ZIP
2578b9
files that contain entries with "." or ".." in name elements. ZIP
2578b9
files with these entries can not be used as a file system. Invoking
2578b9
the `java.nio.file.FileSystems.newFileSystem(...)` methods will throw
2578b9
`ZipException` if the ZIP file contains these entries.
2578b9
2578b9
security-libs/java.security:
2578b9
2578b9
JDK-8272535: Removed Google's GlobalSign Root Certificate
2578b9
=========================================================
2578b9
The following root certificate from Google has been removed from the
2578b9
`cacerts` keystore:
2578b9
2578b9
Alias Name: globalsignr2ca [jdk]
2578b9
Distinguished Name: CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2
2578b9
2578b9
core-libs/java.time:
2578b9
2578b9
JDK-8274857:  Update Timezone Data to 2021c
2578b9
===========================================
2578b9
IANA Time Zone Database, on which JDK's Date/Time libraries are based,
2578b9
has been updated to version 2021c
2578b9
(https://mm.icann.org/pipermail/tz-announce/2021-October/000067.html). Note
2578b9
that with this update, some of the time zone rules prior to the year
2578b9
1970 have been modified according to the changes which were introduced
2578b9
with 2021b. For more detail, refer to the announcement of 2021b
2578b9
(https://mm.icann.org/pipermail/tz-announce/2021-September/000066.html)
2578b9
2578b9
New in release OpenJDK 11.0.13 (2021-10-19):
2578b9
=============================================
2578b9
Live versions of these release notes can be found at:
2578b9
  * https://bitly.com/openjdk11013
2578b9
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.13.txt
2578b9
2578b9
* Security fixes
2578b9
  - JDK-8163326, CVE-2021-35550: Update the default enabled cipher suites preference
2578b9
  - JDK-8254967, CVE-2021-35565: com.sun.net.HttpsServer spins on TLS session close
2578b9
  - JDK-8263314: Enhance XML Dsig modes
2578b9
  - JDK-8265167, CVE-2021-35556: Richer Text Editors
2578b9
  - JDK-8265574: Improve handling of sheets
2578b9
  - JDK-8265580, CVE-2021-35559: Enhanced style for RTF kit
2578b9
  - JDK-8265776: Improve Stream handling for SSL
2578b9
  - JDK-8266097, CVE-2021-35561: Better hashing support
2578b9
  - JDK-8266103: Better specified spec values
2578b9
  - JDK-8266109: More Resilient Classloading
2578b9
  - JDK-8266115: More Manifest Jar Loading
2578b9
  - JDK-8266137, CVE-2021-35564: Improve Keystore integrity
2578b9
  - JDK-8266689, CVE-2021-35567: More Constrained Delegation
2578b9
  - JDK-8267086: ArrayIndexOutOfBoundsException in java.security.KeyFactory.generatePublic
2578b9
  - JDK-8267712: Better LDAP reference processing
2578b9
  - JDK-8267729, CVE-2021-35578: Improve TLS client handshaking
2578b9
  - JDK-8267735, CVE-2021-35586: Better BMP support
2578b9
  - JDK-8268193: Improve requests of certificates
2578b9
  - JDK-8268199: Correct certificate requests
2578b9
  - JDK-8268205: Enhance DTLS client handshake
2578b9
  - JDK-8268506: More Manifest Digests
2578b9
  - JDK-8269618, CVE-2021-35603: Better session identification
2578b9
  - JDK-8269624: Enhance method selection support
2578b9
  - JDK-8270398: Enhance canonicalization
2578b9
  - JDK-8270404: Better canonicalization
2578b9
* Other changes
2578b9
  - JDK-8024368: private methods are allocated vtable indices
2578b9
  - JDK-8042902: Test java/net/Inet6Address/serialize/Inet6AddressSerializationTest.java fails intermittently
2578b9
  - JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
2578b9
  - JDK-8157404: Unable to read certain PKCS12 keystores from SequenceInputStream
2578b9
  - JDK-8158066: SourceDebugExtensionTest fails to rename file
2578b9
  - JDK-8168304: Make all of DependencyContext_test available in product mode
2578b9
  - JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java fails intermittently with BindException
2578b9
  - JDK-8181313: SA: Remove libthread_db dependency on Linux
2578b9
  - JDK-8193214: Incorrect annotations.without.processors warnings with JDK 9
2578b9
  - JDK-8194230: jdk/internal/jrtfs/remote/RemoteRuntimeImageTest.java fails with java.lang.NullPointerException
2578b9
  - JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java fails
2578b9
  - JDK-8199931: java/net/MulticastSocket/UnreferencedMulticastSockets.java fails with "incorrect data received"
2578b9
  - JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK version changes
2578b9
  - JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java failed on Mac 10.13 with zh_CN and zh_TW locales.
2578b9
  - JDK-8207316: java/nio/channels/spi/SelectorProvider/inheritedChannel/InheritedChannelTest.java failed
2578b9
  - JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
2578b9
  - JDK-8208363: test/jdk/java/lang/Package/PackageFromManifest.java missing module dependencies declaration
2578b9
  - JDK-8209380: ARM: cleanup maybe-uninitialized and reorder compiler warnings
2578b9
  - JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh to plain java test
2578b9
  - JDK-8209772: Refactor shell test java/util/ServiceLoader/basic/basic.sh to java
2578b9
  - JDK-8209773: Refactor shell test javax/naming/module/basic.sh to java
2578b9
  - JDK-8209832: Refactor jdk/internal/reflect/Reflection/GetCallerClassTest.sh to plain java test
2578b9
  - JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh to plain java test
2578b9
  - JDK-8210406: Refactor java.util.PluggableLocale:i18n shell tests to plain java tests
2578b9
  - JDK-8210407: Refactor java.util.Calendar:i18n shell tests to plain java tests
2578b9
  - JDK-8210495: compiler crashes because of illegal signature in otherwise legal code
2578b9
  - JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time image layout
2578b9
  - JDK-8210802: temp files left by tests in jdk/java/net/httpclient
2578b9
  - JDK-8210819: Update the host name in CNameTest.java
2578b9
  - JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain java test
2578b9
  - JDK-8210934: Move sun/net/www/protocol/http/GetErrorStream.java to OpenJDK
2578b9
  - JDK-8210959: JShell fails and exits when statement throws an exception whose message contains a '%'.
2578b9
  - JDK-8211055: Provide print to a file (PDF) feature even when printer was not connected
2578b9
  - JDK-8211092: test/jdk/sun/net/www/http/HttpClient/MultiThreadTest.java fails intermittently when cleaning up
2578b9
  - JDK-8211296: Remove HotSpot deprecation warning suppression for Mac/clang
2578b9
  - JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails with cleaning up
2578b9
  - JDK-8212040: Compilation error due to wrong usage of NSPrintJobDispositionValue in mac10.12
2578b9
  - JDK-8212695: Add explicit timeout to several HTTP Client tests
2578b9
  - JDK-8212718: Refactor some annotation processor tests to better use collections
2578b9
  - JDK-8213007: Update the link in test/jdk/sun/security/provider/SecureRandom/DrbgCavp.java
2578b9
  - JDK-8213137: Remove static initialization of monitor/mutex instances
2578b9
  - JDK-8213235: java/nio/channels/SocketChannel/AsyncCloseChannel.java fails with threads that didn't exit
2578b9
  - JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests to plain java tests
2578b9
  - JDK-8213576: Make test AsyncCloseChannel.java run in othervm
2578b9
  - JDK-8213694: Test Timeout.java should run in othervm mode
2578b9
  - JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/except/except002 and except003
2578b9
  - JDK-8213922: fix ctw stand-alone build
2578b9
  - JDK-8214195: Align stdout messages in test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
2578b9
  - JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/NonUniqueAliases.java failed with incorrect jtreg tags order
2578b9
  - JDK-8214937: sun/security/tools/jarsigner/warnings/NoTimestampTest.java failed due to unexpected expiration date
2578b9
  - JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
2578b9
  - JDK-8217825: Verify @AfterTest is used correctly in WebSocket tests
2578b9
  - JDK-8218145: block_if_requested is not proper inlined due to size
2578b9
  - JDK-8219417: bump jtreg requiredVersion to b14
2578b9
  - JDK-8219552: bump jtreg requiredVersion to b14 in test/jdk/sanity/client/
2578b9
  - JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails intermittently due to NumberFormatException
2578b9
  - JDK-8220445: Support for side by side MSVC Toolset versions
2578b9
  - JDK-8221988: add possibility to build with Visual Studio 2019
2578b9
  - JDK-8222751: closed/test/jdk/sun/security/util/DerIndefLenConverter/IndefBerPkcs12.java fail
2578b9
  - JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use Dependencies::find_unique_concrete_method() for non-virtual methods
2578b9
  - JDK-8224853: CDS address sanitizer errors
2578b9
  - JDK-8225082: Remove IdenTrust certificate that is expiring in September 2021
2578b9
  - JDK-8225583: Examine the HttpResponse.BodySubscribers for null handling and multiple subscriptions
2578b9
  - JDK-8225690: Multiple AttachListener threads can be created
2578b9
  - JDK-8225790: Two NestedDialogs tests fail on Ubuntu
2578b9
  - JDK-8226319: Add forgotten test/jdk/java/net/httpclient/BodySubscribersTest.java
2578b9
  - JDK-8226533: JVMCI: findUniqueConcreteMethod should handle statically bindable methods directly
2578b9
  - JDK-8226602: Test convenience reactive primitives from java.net.http with RS TCK
2578b9
  - JDK-8226683: Remove review suggestion from fix to 8219804
2578b9
  - JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due to "exit code is 134"
2578b9
  - JDK-8227766: CheckUnhandledOops is broken in MemAllocator
2578b9
  - JDK-8227815: Minimal VM: set_state is not a member of AttachListener
2578b9
  - JDK-8230674: Heap dumps should exclude dormant CDS archived objects of unloaded classes
2578b9
  - JDK-8230808: Remove Access::equals()
2578b9
  - JDK-8230841: Remove oopDesc::equals()
2578b9
  - JDK-8231717: Improve performance of charset decoding when charset is always compactable
2578b9
  - JDK-8232243: Wrong caret position in JTextPane on Windows with a screen resolution > 100%
2578b9
  - JDK-8232782: Shenandoah: streamline post-LRB CAS barrier (aarch64)
2578b9
  - JDK-8233790: Forward output from heap dumper to jcmd/jmap
2578b9
  - JDK-8233989: Create an IPv4 version of java/net/MulticastSocket/SetLoopbackMode.java
2578b9
  - JDK-8234510: Remove file seeking requirement for writing a heap dump
2578b9
  - JDK-8235211: serviceability/attach/RemovingUnixDomainSocketTest.java fails with AttachNotSupportedException: Unable to open socket file
2578b9
  - JDK-8235216: typo in test filename
2578b9
  - JDK-8235866: bump jtreg requiredVersion to 4.2b16
2578b9
  - JDK-8236111: narrow allowSmartActionArgs disabling
2578b9
  - JDK-8236413: AbstractConnectTimeout should tolerate both NoRouteToHostException and UnresolvedAddressException
2578b9
  - JDK-8236671: NullPointerException in JKS keystore
2578b9
  - JDK-8238930: problem list compiler/c2/Test8004741.java
2578b9
  - JDK-8238943: switch to jtreg 5.0
2578b9
  - JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS breaks QuietOption.java test
2578b9
  - JDK-8240983: Incorrect copyright header in Apache Santuario 2.1.3 files
2578b9
  - JDK-8241336: Some java.net tests failed with NoRouteToHostException on MacOS with special network configuration
2578b9
  - JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
2578b9
  - JDK-8241768: git needs .gitattributes
2578b9
  - JDK-8242882: opening jar file with large manifest might throw NegativeArraySizeException
2578b9
  - JDK-8244973: serviceability/attach/RemovingUnixDomainSocketTest.java fails "stderr was not empty"
2578b9
  - JDK-8245134: test/lib/jdk/test/lib/security/KeyStoreUtils.java should allow to specify aliases
2578b9
  - JDK-8246261: TCKLocalTime.java failed due to "AssertionError: expected [18:14:22] but found [18:14:23]"
2578b9
  - JDK-8246387: switch to jtreg 5.1
2578b9
  - JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed allocating blob
2578b9
  - JDK-8247469: getSystemCpuLoad() returns -1 on linux when some offline cpus are present and cpusets.effective_cpus is not available
2578b9
  - JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/TextLayout/ArabicDiacriticTest.java can leave frame open
2578b9
  - JDK-8248403: AArch64: Remove uses of kernel integer types
2578b9
  - JDK-8248414: AArch64: Remove uses of long and unsigned long ints
2578b9
  - JDK-8248657: Windows: strengthening in ThreadCritical regarding memory model
2578b9
  - JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
2578b9
  - JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
2578b9
  - JDK-8248671: AArch64: Remove unused variables
2578b9
  - JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
2578b9
  - JDK-8248816: C1: Fix signature conflict in LIRGenerator::strength_reduce_multiply
2578b9
  - JDK-8249095: tools/javac/launcher/SourceLauncherTest.java fails on Windows
2578b9
  - JDK-8249548: backward focus traversal gets stuck in button group
2578b9
  - JDK-8249773: Upgrade ReceiveISA.java test to be resilient to failure due to stray packets and interference
2578b9
  - JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o bug-id
2578b9
  - JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses @ignore w/o bug-id
2578b9
  - JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses @ignore w/o bug-id
2578b9
  - JDK-8250588: Shenandoah: LRB needs to save/restore fp registers for runtime call
2578b9
  - JDK-8250824: AArch64: follow up for JDK-8248414
2578b9
  - JDK-8251166: Add automated testcases for changes done in JDK-8214112
2578b9
  - JDK-8251252: Add automated testcase for fix done in JDK-8214253
2578b9
  - JDK-8251254: Add automated test for fix done in JDK-8218472
2578b9
  - JDK-8251361: Potential race between Logger configuration and GCs in HttpURLConWithProxy test
2578b9
  - JDK-8251549: Update docs on building for Git
2578b9
  - JDK-8251945: SIGSEGV in PackageEntry::purge_qualified_exports()
2578b9
  - JDK-8252194: Add automated test for fix done in JDK-8218469
2578b9
  - JDK-8252648: Shenandoah: name gang tasks consistently
2578b9
  - JDK-8252825: Add automated test for fix done in JDK-8218479
2578b9
  - JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java fails intermittently with C1
2578b9
  - JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially consistent
2578b9
  - JDK-8253048: AArch64: When CallLeaf, no need to preserve callee-saved registers in caller
2578b9
  - JDK-8253424: Add support for running pre-submit testing using GitHub Actions
2578b9
  - JDK-8253631: Remove unimplemented CompileBroker methods after JEP-165
2578b9
  - JDK-8253865: Pre-submit testing using GitHub Actions does not detect failures reliably
2578b9
  - JDK-8253899: Make IsClassUnloadingEnabled signature match specification
2578b9
  - JDK-8254024: Enhance native libs for AWT and Swing to work with GraalVM Native Image
2578b9
  - JDK-8254054: Pre-submit testing using GitHub Actions should not use the deprecated set-env command
2578b9
  - JDK-8254173: Add Zero, Minimal hotspot targets to submit workflow
2578b9
  - JDK-8254175: Build no-pch configuration in debug mode for submit checks
2578b9
  - JDK-8254244: Some code emitted by TemplateTable::branch is unused when running TieredCompilation
2578b9
  - JDK-8254270: linux 32 bit build doesn't compile libjdwp/log_messages.c
2578b9
  - JDK-8254282: Add Linux x86_32 builds to submit workflow
2578b9
  - JDK-8254850: Update terminology in java.awt.GridBagLayout source code comments
2578b9
  - JDK-8255255: Update Apache Santuario (XML Signature) to version 2.2.1
2578b9
  - JDK-8255305: Add Linux x86_32 tier1 to submit workflow
2578b9
  - JDK-8255352: Archive important test outputs in submit workflow
2578b9
  - JDK-8255373: Submit workflow artifact name is always "test-results_.zip"
2578b9
  - JDK-8255452: Doing GC during JVMTI MethodExit event posting breaks return oop
2578b9
  - JDK-8255718: Zero: VM should know it runs in interpreter-only mode
2578b9
  - JDK-8255790: GTKL&F: Java 16 crashes on initialising GTKL&F on Manjaro Linux
2578b9
  - JDK-8255810: Zero: build fails without JVMTI
2578b9
  - JDK-8255895: Submit workflow artifacts miss hs_errs/replays due to ZIP include mismatch
2578b9
  - JDK-8256127: Add cross-compiled foreign architectures builds to submit workflow
2578b9
  - JDK-8256215: Shenandoah: re-organize saving/restoring machine state in assembler code
2578b9
  - JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for x86_32 and lower -XX:+UseSSE
2578b9
  - JDK-8256277: Github Action build on macOS should define OS and Xcode versions
2578b9
  - JDK-8256354: Github Action build on Windows should define OS and MSVC versions
2578b9
  - JDK-8256393: Github Actions build on Linux should define OS and GCC versions
2578b9
  - JDK-8256414: add optimized build to submit workflow
2578b9
  - JDK-8256747: GitHub Actions: decouple the hotspot build-only jobs from Linux x64 testing
2578b9
  - JDK-8257056: Submit workflow should apt-get update to avoid package installation errors
2578b9
  - JDK-8257148: Remove obsolete code in AWTView.m
2578b9
  - JDK-8257497: Update keytool to create AKID from the SKID of the issuing certificate as specified by RFC 5280
2578b9
  - JDK-8257620: Do not use objc_msgSend_stret to get macOS version
2578b9
  - JDK-8257913: Add more known library locations to simplify Linux cross-compilation
2578b9
  - JDK-8258703: Incorrect 512-bit vector registers restore on x86_32
2578b9
  - JDK-8259338: Add expiry exception for identrustdstx3 alias to VerifyCACerts.java test
2578b9
  - JDK-8259535: ECDSA SignatureValue do not always have the specified length
2578b9
  - JDK-8259679: GitHub actions should use MSVC 14.28
2578b9
  - JDK-8259924: GitHub actions fail on Linux x86_32 with "Could not configure libc6:i386"
2578b9
  - JDK-8260460: GitHub actions still fail on Linux x86_32 with "Could not configure libc6:i386"
2578b9
  - JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
2578b9
  - JDK-8260923: Add more tests for SSLSocket input/output shutdown
2578b9
  - JDK-8261072: AArch64: Fix MacroAssembler::get_thread convention
2578b9
  - JDK-8261147: C2: Node is wrongly marked as reduction resulting in a wrong execution due to wrong vector instructions
2578b9
  - JDK-8261238: NMT should not limit baselining by size threshold
2578b9
  - JDK-8261496: Shenandoah: reconsider pacing updates memory ordering
2578b9
  - JDK-8261652: Remove some dead comments from os_bsd_x86
2578b9
  - JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync with the StackFrameStream
2578b9
  - JDK-8262000: jdk/jfr/event/gc/detailed/TestPromotionFailedEventWithParallelScavenge.java failed with "OutOfMemoryError: Java heap space"
2578b9
  - JDK-8262017: C2: assert(n != __null) failed: Bad immediate dominator info.
2578b9
  - JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
2578b9
  - JDK-8262409: sun/security/ssl/SSLSocketImpl/SSLSocketImplThrowsWrongExceptions. SSL test failures caused by java failed with "Server reported the wrong exception"
2578b9
  - JDK-8262470: Printed GlyphVector outline with low DPI has bad quality on Windows
2578b9
  - JDK-8262862: Harden tests sun/security/x509/URICertStore/ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
2578b9
  - JDK-8263136: C4530 was reported from VS 2019 at access bridge
2578b9
  - JDK-8263227: C2: inconsistent spilling due to dead nodes in exception block
2578b9
  - JDK-8263382: java/util/logging/ParentLoggersTest.java failed with "checkLoggers: getLoggerNames() returned unexpected loggers"
2578b9
  - JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
2578b9
  - JDK-8263432: javac may report an invalid package/class clash on case insensitive filesystems
2578b9
  - JDK-8263490: [macos] Crash occurs on JPasswordField with activated InputMethod
2578b9
  - JDK-8263531: Remove unused buffer int
2578b9
  - JDK-8263667: Avoid running GitHub actions on branches named pr/*
2578b9
  - JDK-8263776: [JVMCI] add helper to perform Java upcalls
2578b9
  - JDK-8264016: [JVMCI] add some thread local fields for use by JVMCI
2578b9
  - JDK-8264752: SIGFPE crash with option FlightRecorderOptions:threadbuffersize=30M
2578b9
  - JDK-8265132: C2 compilation fails with assert "missing precedence edge"
2578b9
  - JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after fix for JDK-8264821
2578b9
  - JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay description
2578b9
  - JDK-8265756: AArch64: initialize memory allocated for locals according to Windows AArch64 stack page growth requirement in template interpreter
2578b9
  - JDK-8265761: Font with missed font family name is not properly printed on Windows
2578b9
  - JDK-8265773: incorrect jdeps message "jdk8internals" to describe a removed JDK internal API
2578b9
  - JDK-8265836: OperatingSystemImpl.getCpuLoad() returns incorrect CPU load inside a container
2578b9
  - JDK-8266018: Shenandoah: fix an incorrect assert
2578b9
  - JDK-8266206: Build failure after JDK-8264752 with older GCCs
2578b9
  - JDK-8266248: Compilation failure in PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
2578b9
  - JDK-8266288: assert root method not found in witnessed_reabstraction_in_supers is too strong
2578b9
  - JDK-8266404: Fatal error report generated with -XX:+CrashOnOutOfMemoryError should not contain suggestion to submit a bug report
2578b9
  - JDK-8266480: Implicit null check optimization does not update control of hoisted memory operation
2578b9
  - JDK-8266615: C2 incorrectly folds subtype checks involving an interface array
2578b9
  - JDK-8266642: Improve ResolvedMethodTable hash function
2578b9
  - JDK-8266749: AArch64: Backtracing broken on PAC enabled systems
2578b9
  - JDK-8266761: AssertionError in sun.net.httpserver.ServerImpl.responseCompleted
2578b9
  - JDK-8266813: Shenandoah: Use shorter instruction sequence for checking if marking in progress
2578b9
  - JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due to uninitialized BasicObjectLock::_displaced_header
2578b9
  - JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use Metaspace with less classes
2578b9
  - JDK-8267396: Avoid recording "pc" in unhandled oops detector for better performance
2578b9
  - JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java test failed with assertion
2578b9
  - JDK-8267424: CTW: C1 fails with "State must not be null"
2578b9
  - JDK-8267459: Pasting Unicode characters into JShell does not work.
2578b9
  - JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
2578b9
  - JDK-8267666: Add option to jcmd GC.heap_dump to use existing file
2578b9
  - JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
2578b9
  - JDK-8267751: (test) jtreg.SkippedException has no serial VersionUID
2578b9
  - JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle min_jint correctly
2578b9
  - JDK-8268103: JNI functions incorrectly return a double after JDK-8265836
2578b9
  - JDK-8268127: Shenandoah: Heap size may be too small for region to align to large page size
2578b9
  - JDK-8268261: C2: assert(n != __null) failed: Bad immediate dominator info.
2578b9
  - JDK-8268347: C2: nested locks optimization may create unbalanced monitor enter/exit code
2578b9
  - JDK-8268360: Missing check for infinite loop during node placement
2578b9
  - JDK-8268362: [REDO] C2 crash when compile negative Arrays.copyOf length after loop
2578b9
  - JDK-8268366: Incorrect calculation of has_fpu_registers in C1 linear scan
2578b9
  - JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to missing null check
2578b9
  - JDK-8268417: Add test from JDK-8268360
2578b9
  - JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm performance
2578b9
  - JDK-8268617: [11u REDO] - WebSocket over authenticating proxy fails with NPE
2578b9
  - JDK-8268620: InfiniteLoopException test may fail on x86 platforms
2578b9
  - JDK-8268635: Corrupt oop in ClassLoaderData
2578b9
  - JDK-8268699: Shenandoah: Add test for JDK-8268127
2578b9
  - JDK-8268771: javadoc -notimestamp option does not work on index.html
2578b9
  - JDK-8268775: Password is being converted to String in AccessibleJPasswordField
2578b9
  - JDK-8268776: Test `ADatagramSocket.java` missing /othervm from @run tag
2578b9
  - JDK-8268965: TCP Connection Reset when connecting simple socket to SSL server
2578b9
  - JDK-8269304: Regression ~5% in 2005 in b27
2578b9
  - JDK-8269415: [11u] Remove ea from DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
2578b9
  - JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should be more resilient
2578b9
  - JDK-8269529: javax/swing/reliability/HangDuringStaticInitialization.java fails in Windows debug build
2578b9
  - JDK-8269594: assert(_handle_mark_nesting > 1) failed: memory leak: allocating handle outside HandleMark
2578b9
  - JDK-8269614: [s390] Interpreter checks wrong bit for slow path instance allocation
2578b9
  - JDK-8269650: Optimize gc-locker in [Get|Release]StringCritical for latin string
2578b9
  - JDK-8269661: JNI_GetStringCritical does not lock char array
2578b9
  - JDK-8269668: [aarch64] java.library.path not including /usr/lib64
2578b9
  - JDK-8269763: The JEditorPane is blank after JDK-8265167
2578b9
  - JDK-8269795: C2: Out of bounds array load floats above its range check in loop peeling resulting in SEGV
2578b9
  - JDK-8269847: JDK-8269594 backport breaks 11u builds
2578b9
  - JDK-8269850: Most JDK releases report macOS version 12 as 10.16 instead of 12.0
2578b9
  - JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports incorrect process cpu usage in containers
2578b9
  - JDK-8269882: stack-use-after-scope in NewObjectA
2578b9
  - JDK-8269934: RunThese24H.java failed with EXCEPTION_ACCESS_VIOLATION in java_lang_Thread::get_thread_status
2578b9
  - JDK-8270096: Shenandoah: Optimize gc/shenandoah/TestRefprocSanity.java for interpreter mode
2578b9
  - JDK-8270137: Kerberos Credential Retrieval from Cache not Working in Cross-Realm Setup
2578b9
  - JDK-8270184: [TESTBUG] Add coverage for jvmci ResolvedJavaType.toJavaName() for lambdas
2578b9
  - JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns incorrect type name for lambdas
2578b9
  - JDK-8270556: Exclude security/infra/java/security/cert/CertPathValidator/certification/LetsEncryptCA
2578b9
  - JDK-8270893: IndexOutOfBoundsException while reading large TIFF file
2578b9
  - JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
2578b9
  - JDK-8272124: Cgroup v1 initialization causes NullPointerException when cgroup path contains colon
2578b9
  - JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash when clone null CallProjections.fallthrough_ioproj
2578b9
  - JDK-8272197: Update 11u GHA workflow with Shenandoah configurations
2578b9
  - JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz after JDK-8255790
2578b9
  - JDK-8272472: StackGuardPages test doesn't build with glibc 2.34
2578b9
  - JDK-8272602: [macos] not all KEY_PRESSED events sent when control modifier is used
2578b9
  - JDK-8272628: Problemlist gc/stress/gcbasher/TestGCBasherWithCMS.java for x86_32
2578b9
  - JDK-8272700: [macos] Build failure with Xcode 13.0 after JDK-8264848
2578b9
  - JDK-8272772: Shenandoah: compiler/c2/aarch64/TestVolatilesShenandoah.java fails in 11u
2578b9
  - JDK-8273939: Backport of 8248414 to JDK11 breaks MacroAssembler::adrp
2578b9
2578b9
Notes on individual issues:
2578b9
===========================
2578b9
2578b9
security-libs/java.security:
2578b9
2578b9
JDK-8271434: Removed IdenTrust Root Certificate
2578b9
===============================================
2578b9
The following root certificate from IdenTrust has been removed from
2578b9
the `cacerts` keystore:
2578b9
2578b9
Alias Name: identrustdstx3 [jdk]
2578b9
Distinguished Name: CN=DST Root CA X3, O=Digital Signature Trust Co.
2578b9
2578b9
JDK-8261922: Updated keytool to Create AKID From SKID of Issuing Certificate as Specified by RFC 5280
2578b9
=====================================================================================================
2578b9
The `gencert` command of the `keytool` utility has been updated to
2578b9
create AKID from the SKID of the issuing certificate as specified by
2578b9
RFC 5280.
2578b9
2578b9
security-libs/javax.net.ssl:
2578b9
2578b9
JDK-8210799: ChaCha20 and Poly1305 TLS Cipher Suites
2578b9
====================================================
2578b9
New TLS cipher suites using the `ChaCha20-Poly1305` algorithm have
2578b9
been added to JSSE.  These cipher suites are enabled by default.  The
2578b9
TLS_CHACHA20_POLY1305_SHA256 cipher suite is available for TLS 1.3.
2578b9
The following cipher suites are available for TLS 1.2:
2578b9
2578b9
* TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
2578b9
* TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
2578b9
* TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256
2578b9
2578b9
Refer to the "Java Secure Socket Extension (JSSE) Reference Guide" for
2578b9
details on these new TLS cipher suites.
2578b9
2578b9
JDK-8219551: Updated the Default Enabled Cipher Suites Preference
2578b9
=================================================================
2578b9
The preference of the default enabled cipher suites has been
2578b9
changed. The compatibility impact should be minimal. If needed,
2578b9
applications can customize the enabled cipher suites and the
2578b9
preference. For more details, refer to the SunJSSE provider
2578b9
documentation and the JSSE Reference Guide documentation.
2578b9
2578b9
New in release OpenJDK 11.0.12 (2021-07-20):
2578b9
=============================================
2578b9
Live versions of these release notes can be found at:
2578b9
  * https://bitly.com/openjdk11012
2578b9
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.12.txt
2578b9
2578b9
* Security fixes
2578b9
  - JDK-8256157: Improve bytecode assembly
2578b9
  - JDK-8256491: Better HTTP transport
2578b9
  - JDK-8258432, CVE-2021-2341: Improve file transfers
2578b9
  - JDK-8260453: Improve Font Bounding
2578b9
  - JDK-8260960: Signs of jarsigner signing
2578b9
  - JDK-8260967, CVE-2021-2369: Better jar file validation
2578b9
  - JDK-8262380: Enhance XML processing passes
2578b9
  - JDK-8262403: Enhanced data transfer
2578b9
  - JDK-8262410: Enhanced rules for zones
2578b9
  - JDK-8262477: Enhance String Conclusions
2578b9
  - JDK-8262967: Improve Zip file support
2578b9
  - JDK-8264066, CVE-2021-2388: Enhance compiler validation
2578b9
  - JDK-8264079: Improve abstractions
2578b9
  - JDK-8264460: Improve NTLM support
2578b9
* Other changes
2578b9
  - JDK-6847157: java.lang.NullPointerException: HDC for component at sun.java2d.loops.Blit.Blit
2578b9
  - JDK-7106851: Test should not use System.exit
2578b9
  - JDK-8073446: TimeZone getOffset API does not  return a dst offset between years 2038-2137
2578b9
  - JDK-8076190: Customizing the generation of a PKCS12 keystore
2578b9
  - JDK-8153005: Upgrade the default PKCS12 encryption/MAC algorithms
2578b9
  - JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java fails on Windows & Linux
2578b9
  - JDK-8177068: incomplete classpath causes NPE in Flow
2578b9
  - JDK-8185734: [Windows] Structured Exception Catcher missing around gtest execution
2578b9
  - JDK-8187450: JNI local refs exceeds capacity warning in NetworkInterface::getAll
2578b9
  - JDK-8190763: Class cast exception on (CompoundEdit) UndoableEditEvent.getEdit()
2578b9
  - JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt check for non-null terminated strings with length equal to maxLen
2578b9
  - JDK-8196100: javax/swing/text/JTextComponent/5074573/bug5074573.java fails
2578b9
  - JDK-8199646: JShell tests: jdk/jshell/FailOverDirectExecutionControlTest.java failed with java.lang.UnsupportedOperationException
2578b9
  - JDK-8206925: Support the certificate_authorities extension
2578b9
  - JDK-8207160: ClassReader::adjustMethodParams can potentially return null if the args list is empty
2578b9
  - JDK-8207247: AARCH64: Enable Minimal and Client VM builds
2578b9
  - JDK-8207404: MulticastSocket tests failing on AIX
2578b9
  - JDK-8207779: Method::is_valid_method() compares 'this' with NULL
2578b9
  - JDK-8208061: runtime/LoadClass/TestResize.java fails with "Load factor too high" when running in CDS mode.
2578b9
  - JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
2578b9
  - JDK-8210443: Migrate Locale matching tests to JDK Repo.
2578b9
  - JDK-8213231: ThreadSnapshot::_threadObj can become stale
2578b9
  - JDK-8213483: ARM32: runtime/ErrorHandling/ShowRegistersOnAssertTest.java jtreg test fail
2578b9
  - JDK-8213725: JShell NullPointerException due to class file with unexpected package
2578b9
  - JDK-8213794: ARM32: disable TypeProfiling, CriticalJNINatives, Serviceablity tests for ARM32
2578b9
  - JDK-8213845: ARM32: Interpreter doesn't call result handler after native calls
2578b9
  - JDK-8214128: ARM32: wrong stack alignment on Deoptimization::unpack_frames
2578b9
  - JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java fails on ARM
2578b9
  - JDK-8214854: JDWP: Unforseen output truncation in logging
2578b9
  - JDK-8214922: Add vectorization support for fmin/fmax
2578b9
  - JDK-8215009: GCC 8 compilation error in libjli
2578b9
  - JDK-8216184: CDS/appCDS tests failed on Windows due to long path to a classlist file
2578b9
  - JDK-8216259: AArch64: Vectorize Adler32 intrinsics
2578b9
  - JDK-8216314: SIGILL in CodeHeapState::print_names()
2578b9
  - JDK-8217348: assert(thread->is_Java_thread()) failed: just checking
2578b9
  - JDK-8217465: [REDO] - Optimize CodeHeap Analytics
2578b9
  - JDK-8217561: X86: Add floating-point Math.min/max intrinsics
2578b9
  - JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
2578b9
  - JDK-8218458: [TESTBUG] runtime/NMT/CheckForProperDetailStackTrace.java fails with Expected stack trace missing from output
2578b9
  - JDK-8219142: Remove unused JIMAGE_ResourcePath
2578b9
  - JDK-8219586: CodeHeap State Analytics processes dead nmethods
2578b9
  - JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
2578b9
  - JDK-8220407: compiler/intrinsics/math/TestFpMinMaxIntrinsics.java timedout
2578b9
  - JDK-8222302: [TESTBUG]test/hotspot/jtreg/compiler/intrinsics/sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any other CPU
2578b9
  - JDK-8222412: AARCH64: multiple instructions encoding issues
2578b9
  - JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns into separate instructions
2578b9
  - JDK-8223444: Improve CodeHeap Free Space Management
2578b9
  - JDK-8223504: Improve performance of forall loops by better inlining of "iterator()" methods
2578b9
  - JDK-8223667: ASAN build broken
2578b9
  - JDK-8225081: Remove Telia Company CA certificate expiring in April 2021
2578b9
  - JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
2578b9
  - JDK-8225438: javax/net/ssl/TLSCommon/TestSessionLocalPrincipal.java failed with Read timed out
2578b9
  - JDK-8225756: [testbug] compiler/loopstripmining/CheckLoopStripMining.java sets too short a SafepointTimeoutDelay
2578b9
  - JDK-8226374: Restrict TLS signature schemes and named groups
2578b9
  - JDK-8226627: assert(t->singleton()) failed: must be a constant
2578b9
  - JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
2578b9
  - JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
2578b9
  - JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/Loops04.java failed XMM register should be 0-15
2578b9
  - JDK-8227609: (fs) Files.newInputStream(...).skip(n) should allow skipping beyond file size
2578b9
  - JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
2578b9
  - JDK-8231460: Performance issue (CodeHeap) with large free blocks
2578b9
  - JDK-8231713: x86_32 build failures after JDK-8226721 (Missing intrinsics for Math.ceil, floor, rint)
2578b9
  - JDK-8231841: AArch64: debug.cpp help() is missing an AArch64 line for pns
2578b9
  - JDK-8232084: HotSpot build failed with GCC 9.2.1
2578b9
  - JDK-8232591: AArch64: Add missing match rules for smaddl, smsubl and smnegl
2578b9
  - JDK-8233185: HttpServer.stop() blocks indefinitely when called on dispatch thread
2578b9
  - JDK-8233787: Break cycle in vm_version* includes
2578b9
  - JDK-8233948: AArch64: Incorrect mapping between OptoReg and VMReg for high 64 bits of Vector Register
2578b9
  - JDK-8234355: Buffer overflow in jcmd GC.class_stats due to too many classes
2578b9
  - JDK-8235368: Update BCEL to Version 6.4.1
2578b9
  - JDK-8236859: WebSocket over authenticating proxy fails with NPE
2578b9
  - JDK-8236992: AArch64: remove redundant load_klass in itable stub
2578b9
  - JDK-8237743: test/langtools/jdk/jshell/FailOverExecutionControlTest.java fails No ExecutionControlProvider with name 'nonExistent' and parameter keys: []
2578b9
  - JDK-8237804: sun/security/mscapi tests fail with "Key pair not generated, alias <nnnnnn> already exists"
2578b9
  - JDK-8238175: CTW: Class.getDeclaredMethods fails with assert(k->is_subclass_of(SystemDictionary::Throwable_klass())) failed: invalid exception class
2578b9
  - JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong handling of stoppedMixers
2578b9
  - JDK-8238812: assert(false) failed: bad AD file
2578b9
  - JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/NSTexturedJFrame.java
2578b9
  - JDK-8239386: handle ContendedPaddingWidth in vm_version_aarch64
2578b9
  - JDK-8239536: Can't use `java.util.List` object after importing `java.awt.List`
2578b9
  - JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
2578b9
  - JDK-8240848: ArrayIndexOutOfBoundsException buf for TextCallbackHandler
2578b9
  - JDK-8241082: Upgrade IANA Language Subtag Registry data to 03-16-2020 version
2578b9
  - JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039 and C2873
2578b9
  - JDK-8241101: [s390] jtreg test failure after JDK-8238696: not conformant features string
2578b9
  - JDK-8241248: NullPointerException in sun.security.ssl.HKDF.extract(HKDF.java:93)
2578b9
  - JDK-8241372: Several test failures due to javax.net.ssl.SSLException: Connection reset
2578b9
  - JDK-8241475: AArch64: Add missing support for PopCountVI node
2578b9
  - JDK-8241829: Cleanup the code for PrinterJob on windows
2578b9
  - JDK-8241960: The SHA3 message digests impl of SUN provider are not thread safe after cloned
2578b9
  - JDK-8242010: Upgrade IANA Language Subtag Registry to Version 2020-04-01
2578b9
  - JDK-8242429: Better implementation for sign extract
2578b9
  - JDK-8242557: Add length limit for strings in PNGImageWriter
2578b9
  - JDK-8242919: Paste locks up jshell
2578b9
  - JDK-8243155: AArch64: Add support for SqrtVF
2578b9
  - JDK-8243240: AArch64: Add support for MulVB
2578b9
  - JDK-8243452: JFR: Could not create chunk in repository with over 200 recordings
2578b9
  - JDK-8243559: Remove root certificates with 1024-bit keys
2578b9
  - JDK-8243597: AArch64: Add support for integer vector abs
2578b9
  - JDK-8244031: HttpClient should have more tests for HEAD requests
2578b9
  - JDK-8244205: HTTP/2 tunnel connections through proxy may be reused regardless of which proxy is selected
2578b9
  - JDK-8244847: Linux/PPC: runtime/CompressedOops/CompressedClassPointers: smallHeapTest fails
2578b9
  - JDK-8245511: G1 adaptive IHOP does not account for reclamation of humongous objects by young GC
2578b9
  - JDK-8246274: G1 old gen allocation tracking is not in a separate class
2578b9
  - JDK-8247354: [aarch64] PopFrame causes assert(oopDesc::is_oop(obj)) failed: not an oop
2578b9
  - JDK-8247408: IdealGraph bit check expression canonicalization
2578b9
  - JDK-8247432: Update IANA Language Subtag Registry to Version 2020-09-29
2578b9
  - JDK-8247438: JShell: When FailOverExecutionControlProvider fails the proximal cause is not shown
2578b9
  - JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns wrong value on Fedora 32
2578b9
  - JDK-8248043: Need to eliminate excessive i2l conversions
2578b9
  - JDK-8248411: [aarch64] Insufficient error handling when CodeBuffer is exhausted
2578b9
  - JDK-8248568: compiler/c2/TestBit.java failed: test missing from stdout/stderr
2578b9
  - JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for masked positive values
2578b9
  - JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is unstable
2578b9
  - JDK-8249189: AARCH64: more L2I conversions can be skipped
2578b9
  - JDK-8249719: MethodHandle performance suffers from bad ResolvedMethodTable hash function
2578b9
  - JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
2578b9
  - JDK-8250635: MethodArityHistogram should use Compile_lock in favour of fancy checks
2578b9
  - JDK-8250876: Fix issues with cross-compile on macos
2578b9
  - JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean tests fail with hostnames starting from digits
2578b9
  - JDK-8251525: AARCH64: Faster Math.signum(fp)
2578b9
  - JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
2578b9
  - JDK-8252311: AArch64: save two words in itable lookup stub
2578b9
  - JDK-8252779: compiler/graalunit/HotspotTest.java failed after 8251525
2578b9
  - JDK-8252883: AccessDeniedException caused by delayed file deletion on Windows
2578b9
  - JDK-8253167: ARM32 builds fail after JDK-8247910
2578b9
  - JDK-8253572: [windows] CDS archive may fail to open with long file names
2578b9
  - JDK-8253923: C2 doesn't always run loop opts for compilations that include loops
2578b9
  - JDK-8253948: Memory leak in ImageFileReader
2578b9
  - JDK-8254631: Better support ALPN byte wire values in SunJSSE
2578b9
  - JDK-8254717: isAssignableFrom checks in KeyFactorySpi.engineGetKeySpec appear to be backwards
2578b9
  - JDK-8255086: Update the root locale display names
2578b9
  - JDK-8255625: AArch64: Implement Base64.encodeBlock accelerator/intrinsic
2578b9
  - JDK-8255763: C2: OSR miscompilation caused by invalid memory instruction placement
2578b9
  - JDK-8255992: JFR EventWriter does not use first string from StringPool with id 0
2578b9
  - JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/PortUnreachable.java fails due to the hard coded threshold is small
2578b9
  - JDK-8256244: java/lang/ProcessHandle/PermissionTest.java fails with TestNG 7.1
2578b9
  - JDK-8256287: [windows] add loop fuse to map_or_reserve_memory_aligned
2578b9
  - JDK-8256523: Streamline Java SHA2 implementation
2578b9
  - JDK-8257414: Drag n Drop target area is wrong on high DPI systems
2578b9
  - JDK-8257569: Failure observed with JfrVirtualMemory::initialize
2578b9
  - JDK-8257574: C2: "failed: parsing found no loops but there are some" assert failure
2578b9
  - JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
2578b9
  - JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
2578b9
  - JDK-8257621: JFR StringPool misses cached items across consecutive recordings
2578b9
  - JDK-8257796: [TESTBUG] TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails on x86_32
2578b9
  - JDK-8257822: C2 crashes with SIGFPE due to a division that floats above its zero check
2578b9
  - JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
2578b9
  - JDK-8257853: Remove dependencies on JNF's JNI utility functions in AWT and 2D code
2578b9
  - JDK-8257858: [macOS]: Remove JNF dependency from libosxsecurity/KeystoreImpl.m
2578b9
  - JDK-8257860: [macOS]: Remove JNF dependency from libosxkrb5/SCDynamicStoreConfig.m
2578b9
  - JDK-8257988: Remove JNF dependency from libsaproc/MacosxDebuggerLocal.m
2578b9
  - JDK-8258414: OldObjectSample events too expensive
2578b9
  - JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due to missing UnlockDiagnosticVMOptions
2578b9
  - JDK-8258753: StartTlsResponse.close() hangs due to synchronization issues
2578b9
  - JDK-8259061: C2: assert(found) failed: memory-writing node is not placed in its original loop or an ancestor of it
2578b9
  - JDK-8259227: C2 crashes with SIGFPE due to a division that floats above its zero check
2578b9
  - JDK-8259232: Bad JNI lookup during printing
2578b9
  - JDK-8259276: C2: Empty expression stack when reexecuting tableswitch/lookupswitch instructions after deoptimization
2578b9
  - JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
2578b9
  - JDK-8259585: Accessible actions do not work on mac os x
2578b9
  - JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
2578b9
  - JDK-8259662: Don't wrap SocketExceptions into SSLExceptions in SSLSocketImpl
2578b9
  - JDK-8259710: Inlining trace leaks memory
2578b9
  - JDK-8259729: Missed JNFInstanceOf -> IsInstanceOf conversion
2578b9
  - JDK-8259777: Incorrect predication condition generated by ADLC
2578b9
  - JDK-8259786: initialize last parameter of getpwuid_r
2578b9
  - JDK-8259843: initialize dli_fname array before calling dll_address_to_library_name
2578b9
  - JDK-8259869: [macOS] Remove desktop module dependencies on JNF Reference APIs
2578b9
  - JDK-8259886: Improve SSL session cache performance and scalability
2578b9
  - JDK-8259983: do not use uninitialized expand_ms value in G1CollectedHeap::expand_heap_after_young_collection
2578b9
  - JDK-8260030: Improve stringStream buffer handling
2578b9
  - JDK-8260236: better init AnnotationCollector _contended_group
2578b9
  - JDK-8260255: C1: LoopInvariantCodeMotion constructor can leave some fields uninitialized
2578b9
  - JDK-8260284: C2: assert(_base == Int) failed: Not an Int
2578b9
  - JDK-8260380: Upgrade to LittleCMS 2.12
2578b9
  - JDK-8260420: C2 compilation fails with assert(found_sfpt) failed: no node in loop that's not input to safepoint
2578b9
  - JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak memory
2578b9
  - JDK-8260432: allocateSpaceForGP in freetypeScaler.c might leak memory
2578b9
  - JDK-8260616: Removing remaining JNF dependencies in the java.desktop module
2578b9
  - JDK-8260653: Unreachable nodes keep speculative types alive
2578b9
  - JDK-8260707: java/lang/instrument/PremainClass/InheritAgent0100.java times out
2578b9
  - JDK-8260925: HttpsURLConnection does not work  with other JSSE provider.
2578b9
  - JDK-8260926: Trace resource exhausted events unconditionally
2578b9
  - JDK-8261020: Wrong format parameter in create_emergency_chunk_path
2578b9
  - JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
2578b9
  - JDK-8261167: print_process_memory_info add a close call after fopen
2578b9
  - JDK-8261170: Upgrade to freetype 2.10.4
2578b9
  - JDK-8261198: [macOS] Incorrect JNI parameters in number conversion in A11Y code
2578b9
  - JDK-8261235: C1 compilation fails with assert(res->vreg_number() == index) failed: conversion check
2578b9
  - JDK-8261261: The version extra fields needs to be overridable in jib-profiles.js
2578b9
  - JDK-8261262: Kitchensink24HStress.java crashed with EXCEPTION_ACCESS_VIOLATION
2578b9
  - JDK-8261354: SIGSEGV at MethodIteratorHost
2578b9
  - JDK-8261355: No data buffering in SunPKCS11 Cipher encryption when the underlying mechanism has no padding
2578b9
  - JDK-8261397: try catch Method failing to work when dividing an integer by 0
2578b9
  - JDK-8261422: Adjust problematic String.format calls in jdk/internal/util/Preconditions.java outOfBoundsMessage
2578b9
  - JDK-8261447: MethodInvocationCounters frequently run into overflow
2578b9
  - JDK-8261481: Cannot read Kerberos settings in dynamic store on macOS Big Sur
2578b9
  - JDK-8261505: Test test/hotspot/jtreg/gc/parallel/TestDynShrinkHeap.java killed by Linux OOM Killer
2578b9
  - JDK-8261601: free memory in early return in Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
2578b9
  - JDK-8261649: AArch64: Optimize LSE atomics in C++ code
2578b9
  - JDK-8261730: C2 compilation fails with assert(store->find_edge(load) != -1) failed: missing precedence edge
2578b9
  - JDK-8261752: Multiple GC test are missing memory requirements
2578b9
  - JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c potential leaks
2578b9
  - JDK-8261812: C2 compilation fails with assert(!had_error) failed: bad dominance
2578b9
  - JDK-8261914: IfNode::fold_compares_helper faces non-canonicalized bool when running JRuby JSON workload
2578b9
  - JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java failed "assert(false) failed: unexpected node"
2578b9
  - JDK-8262110: DST starts from incorrect time in 2038
2578b9
  - JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have line number 0
2578b9
  - JDK-8262163: Extend settings printout in jcmd VM.metaspace
2578b9
  - JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
2578b9
  - JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with assert "bad barrier shape"
2578b9
  - JDK-8262446: DragAndDrop hangs on Windows
2578b9
  - JDK-8262461: handle wcstombsdmp return value correctly in unix awt_InputMethod.c
2578b9
  - JDK-8262465: Very long compilation times and high memory consumption in C2 debug builds
2578b9
  - JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt stack
2578b9
  - JDK-8262739: String inflation C2 intrinsic prevents insertion of anti-dependencies
2578b9
  - JDK-8262829: Native crash in Win32PrintServiceLookup.getAllPrinterNames()
2578b9
  - JDK-8262837: handle split_USE correctly
2578b9
  - JDK-8262900: ToolBasicTest fails to access HTTP server it starts
2578b9
  - JDK-8263260: [s390] Support latest hardware (z14 and z15)
2578b9
  - JDK-8263311: Watch registry changes for remote printers update instead of polling
2578b9
  - JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB collectors
2578b9
  - JDK-8263404: RsaPrivateKeySpec is always recognized as RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
2578b9
  - JDK-8263425: AArch64: two potential bugs in C1 LIRGenerator::generate_address()
2578b9
  - JDK-8263448: CTW: fatal error: meet not symmetric
2578b9
  - JDK-8263504: Some OutputMachOpcodes fields are uninitialized
2578b9
  - JDK-8263557: Possible NULL dereference in Arena::destruct_contents()
2578b9
  - JDK-8263558: Possible NULL dereference in fast path arena free if ZapResourceArea is true
2578b9
  - JDK-8263676: AArch64: one potential bug in C1 LIRGenerator::generate_address()
2578b9
  - JDK-8263729: [test] divert spurious output away from stream under test in ProcessBuilder Basic test
2578b9
  - JDK-8263846: Bad JNI lookup getFocusOwner in accessibility code on Mac OS X
2578b9
  - JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg and libawt
2578b9
  - JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match rule is not supported
2578b9
  - JDK-8264151: ciMethod::ensure_method_data() should return false is loading resulted in empty state
2578b9
  - JDK-8264173: [s390] Improve Hardware Feature Detection And Reporting
2578b9
  - JDK-8264190: Harden TLS interop tests
2578b9
  - JDK-8264223: CodeHeap::verify fails extra_hops assertion in fastdebug test
2578b9
  - JDK-8264328: Broken license in javax/swing/JComboBox/8072767/bug8072767.java
2578b9
  - JDK-8264360: Loop strip mining verification fails with "should be on the backedge"
2578b9
  - JDK-8264626: C1 should be able to inline excluded methods
2578b9
  - JDK-8264640: CMS ParScanClosure misses a barrier
2578b9
  - JDK-8264786: [macos] All Swing/AWT apps cause Allow Notifications prompt to appear when app is launched
2578b9
  - JDK-8264821: DirectIOTest fails on a system with large block size
2578b9
  - JDK-8264848: [macos] libjvm.dylib linker warning due to macOS version mismatch
2578b9
  - JDK-8264923: PNGImageWriter.write_zTXt throws Exception with a typo
2578b9
  - JDK-8264958: C2 compilation fails with assert "n is later than its clone"
2578b9
  - JDK-8265099: Revert backport to 11u of 8236859: WebSocket over authenticating proxy fails with NPE
2578b9
  - JDK-8265154: vinserti128 operand mix up for KNL platforms
2578b9
  - JDK-8265239: Shenandoah: Shenandoah heap region count could be off by 1
2578b9
  - JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
2578b9
  - JDK-8265421: java/lang/String/StringRepeat.java test is missing a memory requirement
2578b9
  - JDK-8265462: Handle multiple slots in the NSS Internal Module from SunPKCS11's Secmod
2578b9
  - JDK-8265537: x86 version string truncated after JDK-8249672 11u backport
2578b9
  - JDK-8265666: Enable AIX build platform to make external debug symbols
2578b9
  - JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work() lacks storestore barrier
2578b9
  - JDK-8265690: Use the latest Ubuntu base image version in Docker testing
2578b9
  - JDK-8265718: Build failure after JDK-8258414 11u backport
2578b9
  - JDK-8265750: Fatal error in safepoint.cpp after backport of 8258414
2578b9
  - JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs behind
2578b9
  - JDK-8265938: C2's conditional move optimization does not handle top Phi
2578b9
  - JDK-8266220: keytool still prompt for store password on a password-less pkcs12 file if -storetype pkcs12 is specified
2578b9
  - JDK-8266293: Key protection using PBEWithMD5AndDES fails with "java.security.InvalidAlgorithmParameterException: Salt must be 8 bytes long"
2578b9
  - JDK-8266713: [AIX] Build failure after 11u backport of JDK-8247753
2578b9
  - JDK-8266802: Shenandoah: Round up region size to page size unconditionally
2578b9
  - JDK-8266892: avoid maybe-uninitialized gcc warnings on linux s390x
2578b9
  - JDK-8266929: Unable to use algorithms from 3p providers
2578b9
  - JDK-8267235: [macos_aarch64] InterpreterRuntime::throw_pending_exception messing up LR results in crash
2578b9
  - JDK-8267561: Shenandoah: Reference processing not properly setup for outside of cycle degenerated GC
2578b9
  - JDK-8267599: Revert the change to the default PKCS12 macAlgorithm and macIterationCount props for 11u/8u/7u
2578b9
  - JDK-8267641: [11u] 8227609 backport typo
2578b9
  - JDK-8267721: Enable sun/security/pkcs11 tests for Amazon Linux 2 AArch64
2578b9
  - JDK-8268678: LetsEncryptCA.java test fails as Let’s Encrypt Authority X3 is retired
2578b9
2578b9
Notes on individual issues:
2578b9
===========================
2578b9
2578b9
security-libs/java.security:
2578b9
2578b9
JDK-8215293: Customizing PKCS12 keystore Generation
2578b9
===================================================
2578b9
New system and security properties have been added to enable users to
2578b9
customize the generation of PKCS #12 keystores. This includes
2578b9
algorithms and parameters for key protection, certificate protection,
2578b9
and MacData. The detailed explanation and possible values for these
2578b9
properties can be found in the "PKCS12 KeyStore properties" section of
2578b9
the `java.security` file.
2578b9
2578b9
Also, support for the following SHA-2 based HmacPBE algorithms has
2578b9
been added to the SunJCE provider:
2578b9
2578b9
* HmacPBESHA224
2578b9
* HmacPBESHA256
2578b9
* HmacPBESHA384
2578b9
* HmacPBESHA512
2578b9
* HmacPBESHA512/224
2578b9
* HmacPBESHA512/256
2578b9
2578b9
JDK-8256902: Removed Root Certificates with 1024-bit Keys
2578b9
=========================================================
2578b9
The following root certificates with weak 1024-bit RSA public keys
2578b9
have been removed from the `cacerts` keystore:
2578b9
2578b9
Alias Name: thawtepremiumserverca [jdk]
2578b9
Distinguished Name: EMAILADDRESS=premium-server@thawte.com, CN=Thawte Premium Server CA, OU=Certification Services Division, O=Thawte Consulting cc, L=Cape Town, ST=Western Cape, C=ZA
2578b9
2578b9
Alias Name: verisignclass2g2ca [jdk]
2578b9
Distinguished Name: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 2 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US
2578b9
2578b9
Alias Name: verisignclass3ca [jdk]
2578b9
Distinguished Name: OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US
2578b9
2578b9
Alias Name: verisignclass3g2ca [jdk]
2578b9
Distinguished Name: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US
2578b9
2578b9
Alias Name: verisigntsaca [jdk]
2578b9
Distinguished Name: CN=Thawte Timestamping CA, OU=Thawte Certification, O=Thawte, L=Durbanville, ST=Western Cape, C=ZA
2578b9
2578b9
JDK-8261361: Removed Telia Company's Sonera Class2 CA certificate
2578b9
=================================================================
2578b9
2578b9
The following root certificate have been removed from the cacerts truststore:
2578b9
2578b9
Alias Name: soneraclass2ca
2578b9
Distinguished Name: CN=Sonera Class2 CA, O=Sonera, C=FI
2578b9
2578b9
JDK-8242069: Upgraded the Default PKCS12 Encryption and MAC Algorithms
2578b9
======================================================================
2578b9
The default encryption and MAC algorithms used in a PKCS #12 keystore
2578b9
have been updated. The new algorithms are based on AES-256 and SHA-256
2578b9
and are stronger than the old algorithms that were based on RC2,
2578b9
DESede, and SHA-1. See the security properties starting with
2578b9
`keystore.pkcs12` in the `java.security` file for detailed
2578b9
information.
2578b9
2578b9
For compatibility, a new system property named
2578b9
`keystore.pkcs12.legacy` is defined that will revert the algorithms to
2578b9
use the older, weaker algorithms. There is no value defined for this
2578b9
property.
2578b9
2578b9
security-libs/javax.net.ssl:
2578b9
2578b9
JDK-8257548: Improve Encoding of TLS Application-Layer Protocol Negotiation (ALPN) Values
2578b9
=========================================================================================
2578b9
Certain TLS ALPN values couldn't be properly read or written by the
2578b9
SunJSSE provider. This is due to the choice of Strings as the API
2578b9
interface and the undocumented internal use of the UTF-8 Character Set
2578b9
which converts characters larger than U+00007F (7-bit ASCII) into
2578b9
multi-byte arrays that may not be expected by a peer.
2578b9
2578b9
ALPN values are now represented using the network byte representation
2578b9
expected by the peer, which should require no modification for
2578b9
standard 7-bit ASCII-based character Strings. However, SunJSSE now
2578b9
encodes/decodes String characters as 8-bit ISO_8859_1/LATIN-1
2578b9
characters.  This means applications that used characters above
2578b9
U+000007F that were previously encoded using UTF-8 may need to either
2578b9
be modified to perform the UTF-8 conversion, or set the Java security
2578b9
property `jdk.tls.alpnCharset` to "UTF-8" revert the behavior.
2578b9
2578b9
See the updated guide at
2578b9
https://docs.oracle.com/javase/8/docs/technotes/guides/security/jsse/alpn.html
2578b9
for more information.
2578b9
2578b9
JDK-8244460: Support for certificate_authorities Extension
2578b9
==========================================================
2578b9
The "certificate_authorities" extension is an optional extension
2578b9
introduced in TLS 1.3. It is used to indicate the certificate
2578b9
authorities (CAs) that an endpoint supports and should be used by the
2578b9
receiving endpoint to guide certificate selection.
2578b9
2578b9
With this JDK release, the "certificate_authorities" extension is
2578b9
supported for TLS 1.3 in both the client and the server sides.  This
2578b9
extension is always present for client certificate selection, while it
2578b9
is optional for server certificate selection.
2578b9
2578b9
Applications can enable this extension for server certificate
2578b9
selection by setting the `jdk.tls.client.enableCAExtension` system
2578b9
property to `true`.  The default value of the property is `false`.
2578b9
2578b9
Note that if the client trusts more CAs than the size limit of the
2578b9
extension (less than 2^16 bytes), the extension is not enabled.  Also,
2578b9
some server implementations do not allow handshake messages to exceed
2578b9
2^14 bytes.  Consequently, there may be interoperability issues when
2578b9
`jdk.tls.client.enableCAExtension` is set to `true` and the client
2578b9
trusts more CAs than the server implementation limit.
2578b9
2578b9
New in release OpenJDK 11.0.11 (2021-04-20):
2578b9
=============================================
2578b9
Live versions of these release notes can be found at:
2578b9
  * https://bitly.com/openjdk11011
2578b9
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.11.txt
2578b9
2578b9
* Security fixes
2578b9
  - JDK-8244473: Contextualize registration for JNDI
2578b9
  - JDK-8244543: Enhanced handling of abstract classes
2578b9
  - JDK-8249906, CVE-2021-2163: Enhance opening JARs
2578b9
  - JDK-8250568, CVE-2021-2161: Less ambiguous processing
2578b9
  - JDK-8253799: Make lists of normal filenames
2578b9
  - JDK-8257001: Improve Http Client Support
2578b9
* Other changes
2578b9
  - JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream readDouble() conversion to long mishandled
2578b9
  - JDK-7146776: deadlock between URLStreamHandler.getHostAddress and file.Handler.openconnection
2578b9
  - JDK-8086003: Test fails on OSX with java.lang.RuntimeException 'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3' missing
2578b9
  - JDK-8168869: jdeps: localized messages don't use proper line breaks
2578b9
  - JDK-8180837: SunPKCS11-NSS tests failing with CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
2578b9
  - JDK-8202343: Disable TLS 1.0 and 1.1
2578b9
  - JDK-8205992: jhsdb cannot attach to Java processes running in Docker containers
2578b9
  - JDK-8209193: Fix aarch64-linux compilation after -Wreorder changes
2578b9
  - JDK-8210413: AArch64: Optimize div/rem by constant in C1
2578b9
  - JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
2578b9
  - JDK-8211051: jdeps usage of --dot-output doesn't provide valid output for modular jar
2578b9
  - JDK-8211057: Gensrc step CompileProperties generates unstable CompilerProperties output
2578b9
  - JDK-8211150: G1 Full GC not purging code root memory and hence causing memory leak
2578b9
  - JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup delegation when module reads automatic module
2578b9
  - JDK-8212043: Add floating-point Math.min/max intrinsics
2578b9
  - JDK-8212218: [TESTBUG] runtime/ErrorHandling/TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
2578b9
  - JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/WindowsComboBoxSizeTest.java fails in Windows
2578b9
  - JDK-8213909: jdeps --print-module-deps should report missing dependences
2578b9
  - JDK-8214180: Need better granularity for sleeping
2578b9
  - JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed due to missing Lib2 file
2578b9
  - JDK-8214230: Classes generated by SystemModulesPlugin.java are not reproducable
2578b9
  - JDK-8214741: docs/index.html has no title or copyright
2578b9
  - JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed after 8212043
2578b9
  - JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/resexhausted003/TestDescription.java fails
2578b9
  - JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java failed - no KrbException thrown
2578b9
  - JDK-8218550: Add test omitted from JDK-8212043
2578b9
  - JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in JvmtiRawMonitor::raw_exit while posting method exit event
2578b9
  - JDK-8221995: AARCH64: problems with CAS instructions encoding
2578b9
  - JDK-8222518: Remove unnecessary caching of Parker object in java.lang.Thread
2578b9
  - JDK-8222785: aarch64: add necessary masking for immediate shift counts
2578b9
  - JDK-8223186: HotSpot compile warnings from GCC 9
2578b9
  - JDK-8225773: jdeps --check produces NPE if there are missing module dependences
2578b9
  - JDK-8225805: Java Access Bridge does not close the logger
2578b9
  - JDK-8226810: Failed to launch JVM because of NullPointerException occured on System.props
2578b9
  - JDK-8229396: jdeps ignores multi-release when generate-module-info used on command line
2578b9
  - JDK-8229474: Shenandoah: Cleanup CM::update_roots()
2578b9
  - JDK-8232225: Rework the fix for JDK-8071483
2578b9
  - JDK-8232905: JFR fails with assertion: assert(t->unflushed_size() == 0) failed: invariant
2578b9
  - JDK-8233164: C2 fails with assert(phase->C->get_alias_index(t) == phase->C->get_alias_index(t_adr)) failed: correct memory chain
2578b9
  - JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is failing intermittently in nightly lnux-x64 system
2578b9
  - JDK-8233912: aarch64: minor improvements of atomic operations
2578b9
  - JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads non-strong fields with an on-strong load barrier
2578b9
  - JDK-8234742: Improve handshake logging
2578b9
  - JDK-8234796: Refactor Handshake::execute to take a more complex type than ThreadClosure
2578b9
  - JDK-8235324: Dying objects are published from users of CollectedHeap::object_iterate
2578b9
  - JDK-8235351: Lookup::unreflect should bind with the original caller independent of Method's accessible flag
2578b9
  - JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/AttachOnDemand/attach021/TestDescription.java test
2578b9
  - JDK-8237392: Shenandoah: Remove unreliable assertion
2578b9
  - JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
2578b9
  - JDK-8237495: Java MIDI fails with a dereferenced memory error when asked to send a raw 0xF7
2578b9
  - JDK-8239355: (dc) Initial value of SO_SNDBUF should allow sending large datagrams (macOS)
2578b9
  - JDK-8240353: AArch64: missing support for -XX:+ExtendedDTraceProbes in C1
2578b9
  - JDK-8240704: CheckHandles.java failed "AssertionError: Handle use increased by more than 10 percent."
2578b9
  - JDK-8240751: Shenandoah: fold ShenandoahTracer definition
2578b9
  - JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with "assert(store != load->find_exact_control(load->in(0))) failed: dependence cycle found"
2578b9
  - JDK-8241598: Upgrade JLine to 3.14.0
2578b9
  - JDK-8241649: Optimize Character.toString
2578b9
  - JDK-8241770: Module xxxAnnotation() methods throw NCDFE if module-info.class found as resource in unnamed module
2578b9
  - JDK-8241911: AArch64: Fix a potential register clash issue in reduce_add2I
2578b9
  - JDK-8242030: Wrong package declarations in jline classes after JDK-8241598
2578b9
  - JDK-8242565: Policy initialization issues when the denyAfter constraint is enabled
2578b9
  - JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
2578b9
  - JDK-8243670: Unexpected test result caused by C2 MergeMemNode::Ideal
2578b9
  - JDK-8244088: [Regression] Switch of Gnome theme ends up in deadlocked UI
2578b9
  - JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header files
2578b9
  - JDK-8244340: Handshake processing thread lacks yielding
2578b9
  - JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown for malformed class file
2578b9
  - JDK-8244683: A TSA server used by tests
2578b9
  - JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java failed with No enum constant
2578b9
  - JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is unused
2578b9
  - JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco agent
2578b9
  - JDK-8245512: CRC32 optimization using AVX512 instructions
2578b9
  - JDK-8245527: LDAP Channel Binding support for Java GSS/Kerberos
2578b9
  - JDK-8246707: (sc) SocketChannel.read/write throws AsynchronousCloseException on closed channel
2578b9
  - JDK-8246709: sun/security/tools/jarsigner/TsacertOptionTest.java compilation failed after JDK-8244683
2578b9
  - JDK-8247200: assert((unsigned)fpargs < 32)
2578b9
  - JDK-8247766: [aarch64] guarantee(val < (1U << nbits)) failed: Field too big for insn.
2578b9
  - JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
2578b9
  - JDK-8248865: Document JNDI/LDAP timeout properties
2578b9
  - JDK-8248901: Signed immediate support in .../share/assembler.hpp is broken.
2578b9
  - JDK-8249543: Force DirectBufferAllocTest to run with -ExplicitGCInvokesConcurrent
2578b9
  - JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
2578b9
  - JDK-8249749: modify a primitive array through a stream and a for cycle causes jre crash
2578b9
  - JDK-8249787: Make TestGCLocker more resilient with concurrent GCs
2578b9
  - JDK-8249867: xml declaration is not followed by a newline
2578b9
  - JDK-8250911: [windows] os::pd_map_memory() error detection broken
2578b9
  - JDK-8251255: [linux] Add process-memory information to hs-err and VM.info
2578b9
  - JDK-8251359: Shenandoah: filter null oops before calling enqueue/SATB barrier
2578b9
  - JDK-8251925: C2: RenaissanceStressTest fails with assert(!had_error): bad dominance
2578b9
  - JDK-8251944: Add Shenandoah test config to compiler/gcbarriers/UnsafeIntrinsicsTest.java
2578b9
  - JDK-8251992: VM crashed running TestComplexAddrExpr.java test with -XX:UseAVX=X
2578b9
  - JDK-8253220: Epsilon: clean up unused code/declarations
2578b9
  - JDK-8253274: The CycleDMImagetest brokes the system
2578b9
  - JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
2578b9
  - JDK-8253368: TLS connection always receives close_notify exception
2578b9
  - JDK-8255368: Math.exp() gives wrong result for large values on x86 32-bit platforms
2578b9
  - JDK-8255401: Shenandoah: Allow oldval and newval registers to overlap in cmpxchg_oop()
2578b9
  - JDK-8253404: C2: assert(C->live_nodes() <= C->max_node_limit()) failed: Live Node limit exceeded limit
2578b9
  - JDK-8253409: Double-rounding possibility in float fma
2578b9
  - JDK-8253476: TestUseContainerSupport.java fails on some Linux kernels w/o swap limit capabilities
2578b9
  - JDK-8253524: C2: Refactor code that clones predicates during loop unswitching
2578b9
  - JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff)) failed: unexpected
2578b9
  - JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/MouseEventAfterStartDragTest.html test failed
2578b9
  - JDK-8253702: BigSur version number reported as 10.16, should be 11.nn
2578b9
  - JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
2578b9
  - JDK-8254104: MethodCounters must exist before nmethod is installed
2578b9
  - JDK-8254734: "dead loop detected" assert failure with patch from 8223051
2578b9
  - JDK-8254748: Bad Copyright header format after JDK-8212218
2578b9
  - JDK-8254799: runtime/ErrorHandling/TestHeapDumpOnOutOfMemoryError.java fails with release VMs
2578b9
  - JDK-8255058: C1: assert(is_virtual()) failed: type check
2578b9
  - JDK-8255351: Add detection for Graviton 2 CPUs
2578b9
  - JDK-8255387: Japanese characters were printed upside down on AIX
2578b9
  - JDK-8255479: [aarch64] assert(src->section_index_of(target) == CodeBuffer::SECT_NONE) failed: sanity
2578b9
  - JDK-8255544: Create a checked cast
2578b9
  - JDK-8255559: Leak File Descriptors Because of ResolverLocalFilesystem#engineResolveURI()
2578b9
  - JDK-8255681: print callstack in error case in runAWTLoopWithApp
2578b9
  - JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
2578b9
  - JDK-8255742: PrintInlining as compiler directive doesn't print virtual calls
2578b9
  - JDK-8255845: Memory leak in imageFile.cpp
2578b9
  - JDK-8255880: UI of Swing components is not redrawn after their internal state changed
2578b9
  - JDK-8255908: ExceptionInInitializerError due to UncheckedIOException while initializing cgroupv1 subsystem
2578b9
  - JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset() is incorrect for stub calls
2578b9
  - JDK-8256056: Deoptimization stub doesn't save vector registers on x86
2578b9
  - JDK-8256061: RegisterSaver::save_live_registers() omits upper halves of ZMM0-15 registers
2578b9
  - JDK-8256187: [TEST_BUG] Automate bug4275046.java test
2578b9
  - JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after JDK-8210764 due to mishandled lir_neg
2578b9
  - JDK-8256258: some missing NULL checks or asserts after CodeCache::find_blob_unsafe
2578b9
  - JDK-8256264: Printed GlyphVector outline with low DPI has bad quality on Windows
2578b9
  - JDK-8256290: javac/lambda/T8031967.java fails with StackOverflowError on x86_32
2578b9
  - JDK-8256359: AArch64: runtime/ReservedStack/ReservedStackTestCompiler.java fails
2578b9
  - JDK-8256387: Unexpected result if patching an entire instruction on AArch64
2578b9
  - JDK-8256421: Add 2 HARICA roots to cacerts truststore
2578b9
  - JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for small copies in StubGenerator::copy_memory
2578b9
  - JDK-8256489: Make gtest for long path names on Windows more resilient in the presence of virus scanners
2578b9
  - JDK-8256501: libTestMainKeyWindow fails to build with Xcode 12.2
2578b9
  - JDK-8256633: Fix product build on Windows+Arm64
2578b9
  - JDK-8256682: JDK-8202343 is incomplete
2578b9
  - JDK-8256751: Incremental rebuild with precompiled header fails when touching a header file
2578b9
  - JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset() for CallLeafNoFP on x86_32
2578b9
  - JDK-8256806: Shenandoah: optimize shenandoah/jni/TestPinnedGarbage.java test
2578b9
  - JDK-8256807: C2: Not marking stores correctly as mismatched in string opts
2578b9
  - JDK-8256810: Incremental rebuild broken on Macosx
2578b9
  - JDK-8256818: SSLSocket that is never bound or connected leaks socket resources
2578b9
  - JDK-8256888: Client manual test problem list update
2578b9
  - JDK-8257083: Security infra test failures caused by JDK-8202343
2578b9
  - JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
2578b9
  - JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
2578b9
  - JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst.testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps is on
2578b9
  - JDK-8257513: C2: assert((constant_addr - _masm.code()->consts()->start()) == con.offset())
2578b9
  - JDK-8257547: Handle multiple prereqs on the same line in deps files
2578b9
  - JDK-8257561: Some code is not vectorized after 8251925 and 8250607
2578b9
  - JDK-8257565: epsilonBarrierSet.hpp should not include barrierSetAssembler
2578b9
  - JDK-8257575: C2: "failed: only phis" assert failure in loop strip mining verification
2578b9
  - JDK-8257594: C2 compiled checkcast of non-null object triggers endless deoptimization/recompilation cycle
2578b9
  - JDK-8257633: Missing -mmacosx-version-min=X flag when linking libjvm
2578b9
  - JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java reports leaks
2578b9
  - JDK-8257707: Fix incorrect format string in Http1HeaderParser
2578b9
  - JDK-8257746: Regression introduced with JDK-8250984 - memory might be null in some machines
2578b9
  - JDK-8257798: [PPC64] undefined reference to Klass::vtable_start_offset()
2578b9
  - JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java as automatic test
2578b9
  - JDK-8257910: [JVMCI] Set exception_seen accordingly in the runtime.
2578b9
  - JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java again reports leaks after JDK-8257884
2578b9
  - JDK-8257999: Parallel GC crash in gc/parallel/TestDynShrinkHeap.java: new region is not in covered_region
2578b9
  - JDK-8258077: Using -Xcheck:jni can lead to a double-free after JDK-8193234
2578b9
  - JDK-8258247: Couple of issues in fix for JDK-8249906
2578b9
  - JDK-8258373: Update the text handling in the JPasswordField
2578b9
  - JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder.rotateDisk()
2578b9
  - JDK-8258419: RSA cipher buffer cleanup
2578b9
  - JDK-8258471: "search codecache" clhsdb command does not work
2578b9
  - JDK-8258534: Epsilon: clean up unused includes
2578b9
  - JDK-8258805: Japanese characters not entered by mouse click on Windows 10
2578b9
  - JDK-8258833: Cancel multi-part cipher operations in SunPKCS11 after failures
2578b9
  - JDK-8258836: JNI local refs exceed capacity getDiagnosticCommandInfo
2578b9
  - JDK-8258884: [TEST_BUG] Convert applet-based test open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java to a regular java test
2578b9
  - JDK-8259007: This test printed a blank page
2578b9
  - JDK-8259049: Uninitialized variable after JDK-8257513
2578b9
  - JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA to false
2578b9
  - JDK-8259580: Shenandoah: uninitialized label in VerifyThreadGCState
2578b9
  - JDK-8259231: Epsilon: improve performance under contention during virtual space expansion
2578b9
  - JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails "assert(covered_region.contains(new_memregion)) failed: new region is not in covered_region"
2578b9
  - JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert will expire in 90 days
2578b9
  - JDK-8259319: Illegal package access when SunPKCS11 requires SunJCE's classes
2578b9
  - JDK-8259339: AllocateUninitializedArray C2 intrinsic fails with void.class input
2578b9
  - JDK-8259428: AlgorithmId.getEncodedParams() should return copy
2578b9
  - JDK-8259446: runtime/jni/checked/TestCheckedReleaseArrayElements.java fails with stderr not empty
2578b9
  - JDK-8259949: x86 32-bit build fails when -fcf-protection is passed in the compiler flags
2578b9
  - JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use condition is incorrect
2578b9
  - JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE after JDK-8244543
2578b9
  - JDK-8259706: C2 compilation fails with assert(vtable_index == Method::invalid_vtable_index) failed: correct sentinel value
2578b9
  - JDK-8259707: LDAP channel binding does not work with StartTLS extension
2578b9
  - JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
2578b9
  - JDK-8259849: Shenandoah: Rename store-val to IU-barrier
2578b9
  - JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
2578b9
  - JDK-8260029: aarch64: fix typo in verify_oop_array
2578b9
  - JDK-8260308: Update LogCompilation junit to 4.13.1
2578b9
  - JDK-8260338: Some fields in HaltNode is not cloned
2578b9
  - JDK-8260349: Cannot programmatically retrieve Metaspace max set via JAVA_TOOL_OPTIONS
2578b9
  - JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
2578b9
  - JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports false positive
2578b9
  - JDK-8260497: Shenandoah: Improve SATB flushing
2578b9
  - JDK-8260502: [s390] NativeMovRegMem::verify() fails because it's too strict
2578b9
  - JDK-8260632: Build failures after JDK-8253353
2578b9
  - JDK-8260704: ParallelGC: oldgen expansion needs release-store for _end
2578b9
  - JDK-8261022: Fix incorrect result of Math.abs() with char type
2578b9
  - JDK-8261089: [TESTBUG] native library of test TestCheckedReleaseCriticalArray.java fails to compile with gcc 4.x
2578b9
  - JDK-8261183: Follow on to Make lists of normal filenames
2578b9
  - JDK-8261209: isStandalone property: remove dependency on pretty-print
2578b9
  - JDK-8261231: Windows IME was disabled after DnD operation
2578b9
  - JDK-8261251: Shenandoah: Use object size for full GC humongous compaction
2578b9
  - JDK-8261310: PPC64 Zero build fails with 'VMError::controlled_crash(int)::FunctionDescriptor functionDescriptor' has incomplete type and cannot be defined
2578b9
  - JDK-8261334: NMT: tuning statistic shows incorrect hash distribution
2578b9
  - JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
2578b9
  - JDK-8261522: [PPC64] AES intrinsics write beyond the destination array
2578b9
  - JDK-8261534: Test sun/security/pkcs11/KeyAgreement/IllegalPackageAccess.java fails on platforms where no nsslib artifacts are defined
2578b9
  - JDK-8261585: Restore HandleArea used in Deoptimization::uncommon_trap
2578b9
  - JDK-8261753: Test java/lang/System/OsVersionTest.java still failing on BigSur patch versions after JDK-8253702
2578b9
  - JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java in 11u
2578b9
  - JDK-8261912: Code IfNode::fold_compares_helper more defensively
2578b9
  - JDK-8261920: [AIX] jshell command throws java.io.IOError on non English locales
2578b9
  - JDK-8262018: Wrong format in SAP copyright header of OsVersionTest
2578b9
  - JDK-8263069: Exclude some failing tests from security/infra/java/security/cert/CertPathValidator
2578b9
2578b9
Notes on individual issues:
2578b9
===========================
2578b9
2578b9
core-libs/javax.naming:
2578b9
2578b9
JDK-8258824: LDAP Channel Binding Support for Java GSS/Kerberos
2578b9
===============================================================
2578b9
A new JNDI environment property "com.sun.jndi.ldap.tls.cbtype" has
2578b9
been added to enable TLS Channel Binding data in LDAP authentication
2578b9
over SSL/TLS protocol to the Windows AD server.  The only valid value
2578b9
at present is "tls-server-end-point", where channel binding data is
2578b9
created on the base of the TLS server certificate. See RFC-5929 [0]
2578b9
and the module description of the `java.naming` module for further
2578b9
details.
2578b9
2578b9
[0] RFC-5929 "Channel Bindings for TLS": https://www.ietf.org/rfc/rfc5929.txt
2578b9
2578b9
security-libs/java.security:
2578b9
2578b9
JDK-8260597: Added 2 HARICA Root CA Certificates
2578b9
================================================
2578b9
The following root certificates have been added to the cacerts truststore:
2578b9
2578b9
Alias Name: haricarootca2015
2578b9
Distinguished Name: CN=Hellenic Academic and Research Institutions RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
2578b9
2578b9
Alias Name: haricaeccrootca2015
2578b9
Distinguished Name: CN=Hellenic Academic and Research Institutions ECC RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
2578b9
2578b9
security-libs/javax.net.ssl:
2578b9
2578b9
JDK-8256490: Disable TLS 1.0 and 1.1
2578b9
====================================
2578b9
TLS 1.0 and 1.1 are versions of the TLS protocol that are no longer
2578b9
considered secure and have been superseded by more secure and modern
2578b9
versions (TLS 1.2 and 1.3).
2578b9
2578b9
These versions have now been disabled by default. If you encounter
2578b9
issues, you can, at your own risk, re-enable the versions by removing
2578b9
"TLSv1" and/or "TLSv1.1" from the `jdk.tls.disabledAlgorithms`
2578b9
security property in the `java.security` configuration file.
2578b9
2578b9
tools:
2578b9
2578b9
JDK-8214213: jdeps --print-module-deps Reports Transitive Dependencies
2578b9
======================================================================
2578b9
`jdeps --print-module-deps`, `--list-deps`, and `--list-reduce-deps`
2578b9
options have been enhanced as follows.
2578b9
2578b9
1. By default, they perform transitive module dependence analysis on
2578b9
libraries on the class path and module path, both directly and
2578b9
indirectly, as required by the given input JAR files or
2578b9
classes. Previously, they only reported the modules required by the
2578b9
given input JAR files or classes.  The `--no-recursive` option can be
2578b9
used to request non-transitive dependence analysis.
2578b9
2578b9
2. By default, they flag any missing dependency, i.e. not found from
2578b9
class path and module path, as an error.  The `--ignore-missing-deps`
2578b9
option can be used to suppress missing dependence errors. Note that a
2578b9
custom image is created with the list of modules output by jdeps when
2578b9
using the `--ignore-missing-deps` option for a non-modular
2578b9
application. Such an application, running on the custom image, might
2578b9
fail at runtime when missing dependence errors are suppressed.
2578b9
2578b9
xml/jaxp:
2578b9
2578b9
JDK-8249867 XML declaration is not followed by a newline
2578b9
========================================================
2578b9
2578b9
The DOM Load and Save `LSSerializer` does not have an explicit control
2578b9
for whether or not the XML Declaration ends with a newline. In this
2578b9
release, a JDK implementation specific property
2578b9
`http://www.oracle.com/xml/jaxp/properties/isStandalone` and
2578b9
corresponding System property `jdk.xml.isStandalone` are added to
2578b9
control the addition of a newline and act independently without
2578b9
having to set the pretty-print property. This property can be used to
2578b9
reverse the incompatible change introduced in Java SE 7 Update 4 with
2578b9
an update of Xalan 2.7.1 where a newline is omitted when pretty-print
2578b9
is required.
2578b9
2578b9
For details, please refer to the bug report and the java.xml module-summary.
2578b9
2578b9
Usage:
2578b9
2578b9
// to set the property, get an instance of LSSerializer and set it along with pretty-print
2578b9
LSSerializer ser = impl.createLSSerializer();
2578b9
ser.getDomConfig().setParameter("format-pretty-print", true);
2578b9
ser.getDomConfig().setParameter("http://www.oracle.com/xml/jaxp/properties/isStandalone", true);
2578b9
2578b9
// to use the System property, set it before initializing a LSSerializer
2578b9
System.setProperty("jdk.xml.isStandalone", “true”);
2578b9
2578b9
// to clear the property, place the line anywhere after the LSSerializer is initialized
2578b9
System.clearProperty("jdk.xml.isStandalone");
2578b9
2578b9
New in release OpenJDK 11.0.10 (2021-01-19):
2578b9
=============================================
2578b9
Live versions of these release notes can be found at:
2578b9
  * https://bitly.com/openjdk11010
2578b9
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.10.txt
2578b9
2578b9
* Security fixes
2578b9
  - JDK-8247619: Improve Direct Buffering of Characters
2578b9
* Other changes
2578b9
  - JDK-6722928: Support SSPI as a native GSS-API provider
2578b9
  - JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
2578b9
  - JDK-8152332: [macosx] JFileChooser cannot be serialized on Mac OS X
2578b9
  - JDK-8161684: [testconf] Add VerifyOops' testing into compiler tiers
2578b9
  - JDK-8171279: Support X25519 and X448 in TLS
2578b9
  - JDK-8173361: various crashes in JvmtiExport::post_compiled_method_load
2578b9
  - JDK-8173658: JvmtiExport::post_class_unload() is broken for non-JavaThread initiators
2578b9
  - JDK-8191006: hsdis disassembler plugin does not compile with binutils 2.29+
2578b9
  - JDK-8197981: Missing return statement in __sync_val_compare_and_swap_8
2578b9
  - JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails in headless mode
2578b9
  - JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
2578b9
  - JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
2578b9
  - JDK-8208483: Add 5 JNDI tests to com/sun/jndi/dns/FactoryTests/
2578b9
  - JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
2578b9
  - JDK-8208665: Amend cross-compilation docs with qemu-debootstrap recipe
2578b9
  - JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
2578b9
  - JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
2578b9
  - JDK-8211450: UndetVar::dup is not copying the kind field to the duplicated instance
2578b9
  - JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL) failed: resolving NULL _value"
2578b9
  - JDK-8212226: SurfaceManager throws "Invalid Image variant" for MultiResolutionImage (Windows)
2578b9
  - JDK-8213400: Support choosing group name in keytool keypair generation
2578b9
  - JDK-8213535: Windows HiDPI html lightweight tooltips are truncated
2578b9
  - JDK-8213698: Improve devkit creation and add support for linux/ppc64/ppc64le/s390x
2578b9
  - JDK-8214025: assert(t->singleton()) failed: must be a constant when ScavengeRootsInCode < 2
2578b9
  - JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java fails because of missing UnlockDiagnosticVMOptions
2578b9
  - JDK-8214787: Zero builds fail with "undefined JavaThread::thread_state()"
2578b9
  - JDK-8215583: Exclude runtime/handshake/HandshakeWalkSuspendExitTest.java
2578b9
  - JDK-8216012: Infinite loop in RSA KeyPairGenerator
2578b9
  - JDK-8216324: GetClassMethods is confused by the presence of default methods in super interfaces
2578b9
  - JDK-8217429: WebSocket over authenticating proxy fails to send Upgrade headers
2578b9
  - JDK-8217976: test/jdk/java/net/httpclient/websocket/WebSocketProxyTest.java fails intermittently
2578b9
  - JDK-8218021: Have jarsigner preserve posix permission attributes
2578b9
  - JDK-8218287: jshell tool: input behavior unstable after 12-ea+24 on Windows
2578b9
  - JDK-8218851: JVM crash in custom classloader stress test, JDK 12 & 13
2578b9
  - JDK-8220420: Cleanup c1_LinearScan
2578b9
  - JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad events to wrong jvmtiEnv
2578b9
  - JDK-8222286: Fix for JDK-8213419 is broken on s390
2578b9
  - JDK-8222527: HttpClient doesn't send HOST header when tunelling HTTP/1.1 through http proxy
2578b9
  - JDK-8222533: jtreg test jdk/internal/platform/cgroup/TestCgroupMetrics.java fails on SLES12.3 linux ppc64le machine
2578b9
  - JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails with exitValue = 137
2578b9
  - JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/tc02t001/TestDescription.java failed
2578b9
  - JDK-8224650: Add tests to support X25519 and X448 in TLS
2578b9
  - JDK-8225072: Add LuxTrust certificate that is expiring in March 2021 to list of allowed but expired certs
2578b9
  - JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash during initialization on Windows platforms
2578b9
  - JDK-8225687: Newly added sspi.cpp in JDK-6722928 still contains some small errors
2578b9
  - JDK-8227006: [linux] Runtime.availableProcessors execution time increased by factor of 100
2578b9
  - JDK-8227275: Within native OOM error handling, assertions may hang the process
2578b9
  - JDK-8227647: [Graal] Test8009761.java fails due to "RuntimeException: static java.lang.Object compiler.uncommontrap.Test8009761.m3(boolean,boolean) not compiled"
2578b9
  - JDK-8229495: SIGILL in C2 generated OSR compilation
2578b9
  - JDK-8230910: libsspi_bridge does not build on Windows 32bit
2578b9
  - JDK-8232114: JVM crashed at imjpapi.dll in native code
2578b9
  - JDK-8234147: Avoid looking up standard charsets in core libraries
2578b9
  - JDK-8234393: [macos] printing ignores printer tray
2578b9
  - JDK-8234863: Increase default value of MaxInlineLevel
2578b9
  - JDK-8235218: Minimal VM is broken after JDK-8173361
2578b9
  - JDK-8235456: Minimal VM is broken after JDK-8212160
2578b9
  - JDK-8235829: graal crashes with Zombie.java test
2578b9
  - JDK-8236124: Minimal VM slowdebug build failed after JDK-8212160
2578b9
  - JDK-8236512: PKCS11 Connection closed after Cipher.doFinal and NoPadding
2578b9
  - JDK-8236944: The legVecZ operand should be limited to zmm0-zmm15 registers
2578b9
  - JDK-8237186: Fix typo in copyright header of java/io/Reader/TransferTo.java
2578b9
  - JDK-8237499: JFR: Include stack trace in the ThreadStart event
2578b9
  - JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
2578b9
  - JDK-8237524: AArch64: String.compareTo() may return incorrect result
2578b9
  - JDK-8237950: C2 compilation fails with "Live Node limit exceeded limit" during ConvI2L::Ideal optimization
2578b9
  - JDK-8238579: HttpsURLConnection drops the timeout and hangs forever in read
2578b9
  - JDK-8239105: Add exception for expiring Digicert root certificates to VerifyCACerts test
2578b9
  - JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails -XX:+VerifyOops with "verify_oop: rsi: broken oop"
2578b9
  - JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&)
2578b9
  - JDK-8239886: Minimal VM build fails after JDK-8237499
2578b9
  - JDK-8240633: Memory leaks in the implementations of FileChooserUI
2578b9
  - JDK-8240690: Race condition between EDT and BasicDirectoryModel.FilesLoader.run0()
2578b9
  - JDK-8241234: Unify monitor enter/exit runtime entries.
2578b9
  - JDK-8241311: Move some charset mapping tests from closed to open
2578b9
  - JDK-8241797: Add some tests to the problem list
2578b9
  - JDK-8242029: AArch64: skip G1 array copy pre-barrier if marking not active
2578b9
  - JDK-8242335: Additional Tests for RSASSA-PSS
2578b9
  - JDK-8242480: Negative value may be returned by getFreeSwapSpaceSize() in the docker
2578b9
  - JDK-8242614: cleanup duplicated test ldap server in some com/sun/jndi/ldap/ tests
2578b9
  - JDK-8242846: Bring back test/jdk/tools/jlink/plugins/OrderResourcesPluginTest.java
2578b9
  - JDK-8243114: Implement montgomery{Multiply,Square}intrinsics on Windows
2578b9
  - JDK-8243290: Improve diagnostic messages for class verification and redefinition failures
2578b9
  - JDK-8243488: Add tests for set/get SendBufferSize and getReceiveBufferSize in DatagramSocket
2578b9
  - JDK-8243549: sun/security/ssl/CipherSuite/NamedGroupsWithCipherSuite.java failed with Unsupported signature algorithm: DSA
2578b9
  - JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test uses wrong class
2578b9
  - JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java test misses -version
2578b9
  - JDK-8244142: some hotspot/runtime tests don't check exit code of forked JVM
2578b9
  - JDK-8244278: Excessive code cache flushes and sweeps
2578b9
  - JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/Test8237524.java fails with --illegal-access=deny
2578b9
  - JDK-8244621: [macos10.15] Garbled FX printing plus CoreText warnings on Catalina when building with Xcode 11
2578b9
  - JDK-8244819: hsdis does not compile with binutils 2.34+
2578b9
  - JDK-8245051: c1 is broken if it is compiled by gcc without -fno-lifetime-dse
2578b9
  - JDK-8245168: jlink should not be treated as a "small" tool
2578b9
  - JDK-8245400: Upgrade to LittleCMS 2.11
2578b9
  - JDK-8246381: VM crashes with "Current BasicObjectLock* below than low_mark"
2578b9
  - JDK-8246434: Threads::print_on_error assumes that the heap has been set up
2578b9
  - JDK-8246648: issue with OperatingSystemImpl getFreeSwapSpaceSize in docker after 8242480
2578b9
  - JDK-8247201: Print potential pointer value of readable stack memory in hs_err file
2578b9
  - JDK-8247763: assert(outer->outcnt() == 2) failed: 'only phis' failure in LoopNode::verify_strip_mined()
2578b9
  - JDK-8247867: Upgrade to freetype 2.10.2
2578b9
  - JDK-8248190: Enable Power10 system and implement new byte-reverse instructions
2578b9
  - JDK-8248226: TestCloneAccessStressGCM fails with -XX:-ReduceBulkZeroing
2578b9
  - JDK-8248347: windows build broken by JDK-8243114
2578b9
  - JDK-8248532: Every time I change keyboard language at my MacBook, Java crashes
2578b9
  - JDK-8248552: C2 crashes with SIGFPE due to division by zero
2578b9
  - JDK-8248596: [TESTBUG] compiler/loopopts/PartialPeelingUnswitch.java times out with Graal enabled
2578b9
  - JDK-8248745: Add jarsigner and keytool tests for restricted algorithms
2578b9
  - JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
2578b9
  - JDK-8248845: AArch64: stack corruption after spilling vector register
2578b9
  - JDK-8249176: Update GlobalSignR6CA test certificates
2578b9
  - JDK-8249183: JVM crash in "AwtFrame::WmSize" method
2578b9
  - JDK-8249192: MonitorInfo stores raw oops across safepoints
2578b9
  - JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions allowed
2578b9
  - JDK-8249603: C1: assert(has_error == false) failed: register allocation invalid
2578b9
  - JDK-8249605: C2: assert(no_dead_loop) failed: dead loop detected
2578b9
  - JDK-8249607: C2: assert(!had_error) failed: bad dominance
2578b9
  - JDK-8249608: Vector register used by C2 compiled method corrupted at safepoint
2578b9
  - JDK-8249672: Include microcode revision in features_string on x86
2578b9
  - JDK-8249748: gtest silently ignores bad jvm arguments
2578b9
  - JDK-8249821: Separate libharfbuzz from libfontmanager
2578b9
  - JDK-8250598: Hyper-V is detected in spite of running on host OS
2578b9
  - JDK-8250605: Linux x86_32 builds fail after JDK-8249821
2578b9
  - JDK-8250636: iso8601_time returns incorrect offset part on MacOS
2578b9
  - JDK-8250665: Wrong translation for the month name of May in ar_JO,LB,SY
2578b9
  - JDK-8250772: Test com/sun/jndi/ldap/NamingExceptionMessageTest.java fails intermittently with javax.naming.ServiceUnavailableException
2578b9
  - JDK-8250825: C2 crashes with assert(field != __null) failed: missing field
2578b9
  - JDK-8250894: Provide a configure option to build and run against the platform libharfbuzz
2578b9
  - JDK-8250928: JFR: Improve hash algorithm for stack traces
2578b9
  - JDK-8250968: Symlinks attributes not preserved when using jarsigner on zip files
2578b9
  - JDK-8250984: Memory Docker tests fail on some Linux kernels w/o cgroupv1 swap limit capabilities
2578b9
  - JDK-8251118: BiasedLocking::preserve_marks should not have a HandleMark
2578b9
  - JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java failed due to timeout
2578b9
  - JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes target VM
2578b9
  - JDK-8251365: Build failure on AIX after 8250636
2578b9
  - JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
2578b9
  - JDK-8251456: [TESTBUG] compiler/vectorization/TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
2578b9
  - JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt >= 0) failed"
2578b9
  - JDK-8251535: Partial peeling at unsigned test adds incorrect loop exit check
2578b9
  - JDK-8251949: ZGC: Set explicit heap size for compiler/gcbarriers tests
2578b9
  - JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks in an infinite loop OpenJDK (build 13.0.1+9)
2578b9
  - JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
2578b9
  - JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/DisposeFrameOnDragTest.java fails on Windows
2578b9
  - JDK-8252497: Incorrect numeric currency code for ROL
2578b9
  - JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize option
2578b9
  - JDK-8252679: Two windows specific FileDIalog tests may fail on some Windows_Server_2016_Standard
2578b9
  - JDK-8252696: Loop unswitching may cause out of bound array load to be executed
2578b9
  - JDK-8252754: Hash code calculation of JfrStackTrace is inconsistent
2578b9
  - JDK-8253219: Epsilon: clean up unnecessary includes
2578b9
  - JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor calls virtual num_queues()
2578b9
  - JDK-8253226: Shenandoah: remove unimplemented ShenandoahStrDedupQueue::verify
2578b9
  - JDK-8253269: The CheckCommonColors test should provide more info on failure
2578b9
  - JDK-8253284: Zero OrderAccess barrier mappings are incorrect
2578b9
  - JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
2578b9
  - JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint should not access VMThread state from other threads
2578b9
  - JDK-8253791: Issue with useAppleColor check in CSystemColors.m
2578b9
  - JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
2578b9
  - JDK-8254081: java/security/cert/PolicyNode/GetPolicyQualifiers.java fails due to an expired certificate
2578b9
  - JDK-8254144: Non-x86 Zero builds fail with return-type warning in os_linux_zero.cpp
2578b9
  - JDK-8254166: Zero: return-type warning in zeroInterpreter_zero.cpp
2578b9
  - JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
2578b9
  - JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
2578b9
  - JDK-8254190: [s390] interpreter misses exception check after calling monitorenter
2578b9
  - JDK-8254790: SIGSEGV in string_indexof_char and stringL_indexof_char intrinsics
2578b9
  - JDK-8254854: [cgroups v1] Metric limits not properly detected on some join controller combinations
2578b9
  - JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
2578b9
  - JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
2578b9
  - JDK-8255065: Zero: accessor_entry misses the IRIW case
2578b9
  - JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
2578b9
  - JDK-8255269: Unsigned overflow in g1Policy.cpp
2578b9
  - JDK-8255365: Problem list failing client manual tests
2578b9
  - JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
2578b9
  - JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
2578b9
  - JDK-8255550: x86: Assembler::cmpq(Address dst, Register src) encoding is incorrect
2578b9
  - JDK-8255603: Memory/Performance regression after JDK-8210985
2578b9
  - JDK-8255760: Shenandoah: match constants style in ShenandoahMarkTask fallback
2578b9
  - JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/StreamFlush.java
2578b9
  - JDK-8256427: Test com/sun/jndi/dns/ConfigTests/PortUnreachable.java does not work on AIX
2578b9
  - JDK-8256452: Integrate missing part of JDK-8232370 to 11u
2578b9
  - JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/libOverpassMethods.c fails to compile on gcc 4.4.x
2578b9
  - JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to -Wl,-z,defs
2578b9
  - JDK-8256618: Zero: Linux x86_32 build still fails
2578b9
  - JDK-8256736: Zero: GTest tests fail with "unsuppported vm variant"
2578b9
  - JDK-8256809: Annotation processing causes NPE during flow analysis
2578b9
  - JDK-8257181: s390x builds are very noisy with gc-sections messages
2578b9
  - JDK-8257242: [macOS] Java app crashes while switching input methods
2578b9
  - JDK-8257545: SunJSSE FIPS regression in key exchange after JDK-8171279 11u backport
2578b9
  - JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint() from control thread should return false
2578b9
  - JDK-8257701: Shenandoah: objArrayKlass metadata is not marked with chunked arrays
2578b9
  - JDK-8258630: Add expiry exception for QuoVadis root certificate
2578b9
2578b9
Notes on individual issues:
2578b9
===========================
2578b9
2578b9
security-libs/java.security:
2578b9
2578b9
JDK-8213821: -groupname Option Added to keytool Key Pair Generation
2578b9
===================================================================
2578b9
A new `-groupname` option has been added to `keytool -genkeypair` so
2578b9
that a user can specify a named group when generating a key pair. For
2578b9
example, `keytool -genkeypair -keyalg EC -groupname secp384r1` will
2578b9
generate an EC key pair by using the `secp384r1` curve. Because there
2578b9
might be multiple curves with the same size, using the `-groupname`
2578b9
option is preferred over the `-keysize` option.
2578b9
2578b9
JDK-8248263: jarsigner Preserves POSIX File Permission and symlink Attributes
2578b9
=============================================================================
2578b9
When signing a file that contains POSIX file permission or symlink
2578b9
attributes, `jarsigner` now preserves these attributes in the newly
2578b9
signed file but warns that these attributes are unsigned and not
2578b9
protected by the signature. The same warning is printed during the
2578b9
`jarsigner -verify` operation for such files.
2578b9
2578b9
Note that the `jar` tool does not read/write these attributes. This
2578b9
change is more visible to tools like `unzip` where these attributes
2578b9
are preserved.
2578b9
2578b9
security-libs/javax.net.ssl:
2578b9
2578b9
JDK-8225764:  Support for X25519 and X448 in TLS
2578b9
================================================
2578b9
2578b9
The named elliptic curve groups `x25519` and `x448` are now available
2578b9
for JSSE key agreement in TLS versions 1.0 to 1.3, with `x25519` being
2578b9
the most preferred of the default enabled named groups.  The default
2578b9
ordered list is now:
2578b9
2578b9
* x25519
2578b9
* secp256r1
2578b9
* secp384r1
2578b9
* secp521r1
2578b9
* x448
2578b9
* secp256k1
2578b9
* ffdhe2048
2578b9
* ffdhe3072
2578b9
* ffdhe4096
2578b9
* ffdhe6144
2578b9
* ffdhe8192
2578b9
2578b9
The default list can be overridden using the system property *`jdk.tls.namedGroups`*.
2578b9
2578b9
security-libs/org.ietf.jgss:
2578b9
2578b9
JDK-8214079: Added a Default Native GSS-API Library on Windows
2578b9
==============================================================
2578b9
A native GSS-API library has been added to JDK on the Windows
2578b9
platform. The library is client-side only and uses the default
2578b9
credentials. It will be loaded when the `sun.security.jgss.native`
2578b9
system property is set to "true". A user can still load a third-party
2578b9
native GSS-API library by setting the system property
2578b9
`sun.security.jgss.lib` to its path.
2578b9
2578b9
New in release OpenJDK 11.0.9.1 (2020-10-20):
2578b9
=============================================
2578b9
Live versions of these release notes can be found at:
2578b9
  * https://bitly.com/openjdk11091
2578b9
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.9.1.txt
2578b9
2578b9
* Regression fixes
2578b9
  - JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
2578b9
2578b9
New in release OpenJDK 11.0.9 (2020-10-20):
2578b9
===========================================
2578b9
Live versions of these release notes can be found at:
2578b9
  * https://bitly.com/openjdk1109
2578b9
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.9.txt
2578b9
2578b9
* Security fixes
2578b9
  - JDK-8233624: Enhance JNI linkage
2578b9
  - JDK-8236196: Improve string pooling
2578b9
  - JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
2578b9
  - JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
2578b9
  - JDK-8237995, CVE-2020-14782: Enhance certificate processing
2578b9
  - JDK-8240124: Better VM Interning
2578b9
  - JDK-8241114, CVE-2020-14792: Better range handling
2578b9
  - JDK-8242680, CVE-2020-14796: Improved URI Support
2578b9
  - JDK-8242685, CVE-2020-14797: Better Path Validation
2578b9
  - JDK-8242695, CVE-2020-14798: Enhanced buffer support
2578b9
  - JDK-8243302: Advanced class supports
2578b9
  - JDK-8244136, CVE-2020-14803: Improved Buffer supports
2578b9
  - JDK-8244479: Further constrain certificates
2578b9
  - JDK-8244955: Additional Fix for JDK-8240124
2578b9
  - JDK-8245407: Enhance zoning of times
2578b9
  - JDK-8245412: Better class definitions
2578b9
  - JDK-8245417: Improve certificate chain handling
2578b9
  - JDK-8248574: Improve jpeg processing
2578b9
  - JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
2578b9
  - JDK-8253019: Enhanced JPEG decoding
2578b9
* Other changes
2578b9
  - JDK-6532025: GIF reader throws misleading exception with truncated images
2578b9
  - JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/PDialogTest.java needs update by removing a infinite loop
2578b9
  - JDK-8022535: [TEST BUG] javax/swing/text/html/parser/Test8017492.java fails
2578b9
  - JDK-8062947: Fix exception message to correctly represent LDAP connection failure
2578b9
  - JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
2578b9
  - JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/CloseServerSocket.java fails intermittently with Address already in use
2578b9
  - JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed due to timeout on DeadServerNoTimeoutTest is incorrect
2578b9
  - JDK-8160768: Add capability to custom resolve host/domain names within the default JNDI LDAP provider
2578b9
  - JDK-8172404: Tools should warn if weak algorithms are used before restricting them
2578b9
  - JDK-8193367: Annotated type variable bounds crash javac
2578b9
  - JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java fails intermittently: Connection reset
2578b9
  - JDK-8203026: java.rmi.NoSuchObjectException: no such object in table
2578b9
  - JDK-8203281: [Windows] JComboBox change in ui when editor.setBorder() is called
2578b9
  - JDK-8203382: Rename SystemDictionary::initialize_wk_klass to resolve_wk_klass
2578b9
  - JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and JdbExprTest.sh fail due to timeout
2578b9
  - JDK-8203928: [Test] Convert non-JDB scaffolding serviceability shell script tests to java
2578b9
  - JDK-8204963: javax.swing.border.TitledBorder has a memory leak
2578b9
  - JDK-8204994: SA might fail to attach to process with "Windbg Error: WaitForEvent failed"
2578b9
  - JDK-8205534: Remove SymbolTable dependency from serviceability agent
2578b9
  - JDK-8206309: Tier1 SA tests fail
2578b9
  - JDK-8208281: java/nio/channels/AsynchronousSocketChannel/Basic.java timed out
2578b9
  - JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java version - step1
2578b9
  - JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh is incorrect
2578b9
  - JDK-8209342: Problemlist SA tests on Solaris due to Error attaching to process: Can't create thread_db agent!
2578b9
  - JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java should be marked as headful
2578b9
  - JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with timeout
2578b9
  - JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java version - step2
2578b9
  - JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with ZGC
2578b9
  - JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
2578b9
  - JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/ap10t001/TestDescription.java failed with ObjectFree: GetCurrentThreadCpuTimerInfo returned unexpected error code
2578b9
  - JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java version - step3
2578b9
  - JDK-8210527: JShell: NullPointerException in jdk.jshell.Eval.translateExceptionStack
2578b9
  - JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related tests
2578b9
  - JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails with waitForPrompt timed out after 60 seconds
2578b9
  - JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should clarify which output is the pending reply after a timeout
2578b9
  - JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java version - step4
2578b9
  - JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java fails to find ThreadLocalObject
2578b9
  - JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh test
2578b9
  - JDK-8211694: JShell: Redeclared variable should be reset
2578b9
  - JDK-8212200: assert when shared java.lang.Object is redefined by JVMTI agent
2578b9
  - JDK-8212629: [TEST] wrong breakpoint in test/jdk/com/sun/jdi/DeferredStepTest
2578b9
  - JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57) - unexpected. lastLine=52, minLine=52, maxLine=55
2578b9
  - JDK-8212807: tools/jar/multiRelease/Basic.java times out
2578b9
  - JDK-8213182: Minimal VM build failure after JDK-8212200 (assert when shared java.lang.Object is redefined by JVMTI agent)
2578b9
  - JDK-8213214: Set -Djava.io.tmpdir= when running tests
2578b9
  - JDK-8213275: ReplaceCriticalClasses.java fails with jdk.internal.vm.PostVMInitHook not found
2578b9
  - JDK-8213574: Deadlock in string table expansion when dumping lots of CDS classes
2578b9
  - JDK-8213703: LambdaConversionException: Invalid receiver type not a subtype of implementation type interface
2578b9
  - JDK-8214074: Ghash optimization using AVX instructions
2578b9
  - JDK-8214491: Upgrade to JLine 3.9.0
2578b9
  - JDK-8214797: TestJmapCoreMetaspace.java timed out
2578b9
  - JDK-8215243: JShell tests failing intermitently with \"Problem cleaning up the following threads:\"
2578b9
  - JDK-8215244: jdk/jshell/ToolBasicTest.java testHistoryReference failed
2578b9
  - JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash optimization using AVX instructions)
2578b9
  - JDK-8215438: jshell tool: Ctrl-D causes EOF
2578b9
  - JDK-8216021: RunTest.gmk might set concurrency level to 1 on Windows
2578b9
  - JDK-8216974: HttpConnection not returned to the pool after 204 response
2578b9
  - JDK-8218948: SimpleDateFormat :: format - Zone Names are not reflected correctly during run time
2578b9
  - JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is too small on new Skylake CPUs
2578b9
  - JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs instead of aliased B&W glyphs
2578b9
  - JDK-8221658: aarch64: add necessary predicate for ubfx patterns
2578b9
  - JDK-8221759: Crash when completing \"java.io.File.path\"
2578b9
  - JDK-8221918: runtime/SharedArchiveFile/serviceability/ReplaceCriticalClasses.java fails: Shared archive not found
2578b9
  - JDK-8222074: Enhance auto vectorization for x86
2578b9
  - JDK-8222079: Don't use memset to initialize fields decode_env constructor in disassembler.cpp
2578b9
  - JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely on hostname command
2578b9
  - JDK-8223688: JShell: crash on the instantiation of raw anonymous class
2578b9
  - JDK-8223777: In posix_spawn mode, failing to exec() jspawnhelper does not result in an error
2578b9
  - JDK-8223940: Private key not supported by chosen signature algorithm
2578b9
  - JDK-8224184: jshell got IOException at exiting with AIX
2578b9
  - JDK-8224234: compiler/codegen/TestCharVect2.java fails in test_mulc
2578b9
  - JDK-8225037: java.net.JarURLConnection::getJarEntry() throws NullPointerException
2578b9
  - JDK-8225625: AES Electronic Codebook (ECB) encryption and decryption optimization using AVX512 + VAES instructions
2578b9
  - JDK-8226536: Catch OOM from deopt that fails rematerializing objects
2578b9
  - JDK-8226575: OperatingSystemMXBean should be made container aware
2578b9
  - JDK-8226697: Several tests which need the @key headful keyword are missing it.
2578b9
  - JDK-8226809: Circular reference in printed stack trace is not correctly indented & ambiguous
2578b9
  - JDK-8227059: sun/security/tools/keytool/DefaultSignatureAlgorithm.java timed out
2578b9
  - JDK-8227269: Slow class loading when running with JDWP
2578b9
  - JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java fails due to "exitValue = 6"
2578b9
  - JDK-8228448: Jconsole can't connect to itself
2578b9
  - JDK-8228967: Trust/Key store and SSL context utilities for tests
2578b9
  - JDK-8229378: jdwp library loader in linker_md.c quietly truncates on buffer overflow
2578b9
  - JDK-8229815: Upgrade Jline to 3.12.1
2578b9
  - JDK-8230000: some httpclients testng tests run zero test
2578b9
  - JDK-8230002: javax/xml/jaxp/unittest/transform/SecureProcessingTest.java runs zero test
2578b9
  - JDK-8230010: Remove jdk8037819/BasicTest1.java
2578b9
  - JDK-8230094: CCE in createXMLEventWriter(Result) over an arbitrary XMLStreamWriter
2578b9
  - JDK-8230402: Allocation of compile task fails with assert: "Leaking compilation tasks?"
2578b9
  - JDK-8230767: FlightRecorderListener returns null recording
2578b9
  - JDK-8230870: (zipfs) Add a ZIP FS test that is similar to test/jdk/java/util/zip/EntryCount64k.java
2578b9
  - JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes() can be quicker for self thread
2578b9
  - JDK-8231586: enlarge encoding space for OopMapValue offsets
2578b9
  - JDK-8231953: Wrong assumption in assertion in oop::register_oop
2578b9
  - JDK-8231968: getCurrentThreadAllocatedBytes default implementation s/b getThreadAllocatedBytes
2578b9
  - JDK-8232083: Minimal VM is broken after JDK-8231586
2578b9
  - JDK-8232161: Align some one-way conversion in MS950 charset with Windows
2578b9
  - JDK-8232855: jshell missing word in /help help
2578b9
  - JDK-8233027: OopMapSet::all_do does oms.next() twice during iteration
2578b9
  - JDK-8233228: Disable weak named curves by default in TLS, CertPath, and Signed JAR
2578b9
  - JDK-8233386: Initialize NULL fields for unused decorations
2578b9
  - JDK-8233452: java.math.BigDecimal.sqrt() with RoundingMode.FLOOR results in incorrect result
2578b9
  - JDK-8233686: XML transformer uses excessive amount of memory
2578b9
  - JDK-8233741: AES Countermode (AES-CTR) optimization using AVX512 + VAES instructions
2578b9
  - JDK-8233829: javac cannot find non-ASCII module name under non-UTF8 environment
2578b9
  - JDK-8233958: Memory retention due to HttpsURLConnection finalizer that serves no purpose
2578b9
  - JDK-8234011: (zipfs) Memory leak in ZipFileSystem.releaseDeflater()
2578b9
  - JDK-8234058: runtime/CompressedOops/CompressedClassPointers.java fails with 'Narrow klass base: 0x0000000000000000' missing from stdout/stderr
2578b9
  - JDK-8234149: Several regression tests do not dispose Frame at end
2578b9
  - JDK-8234347: "Turkey" meta time zone does not generate composed localized names
2578b9
  - JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/bug6980209.java fails in linux nightly
2578b9
  - JDK-8234535: Cross compilation fails due to missing CFLAGS for the BUILD_CC
2578b9
  - JDK-8234541: C1 emits an empty message when it inlines successfully
2578b9
  - JDK-8234687: change javap reporting on unknown attributes
2578b9
  - JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK 11
2578b9
  - JDK-8236548: Localized time zone name inconsistency between English and other locales
2578b9
  - JDK-8236617: jtreg test containers/docker/TestMemoryAwareness.java fails after 8226575
2578b9
  - JDK-8237182: Update copyright header for shenandoah and epsilon files
2578b9
  - JDK-8237888: security/infra/java/security/cert/CertPathValidator/certification/LuxTrustCA.java fails when checking validity interval
2578b9
  - JDK-8237977: Further update javax/net/ssl/compatibility/Compatibility.java
2578b9
  - JDK-8238270: java.net HTTP/2 client does not decrease stream count when receives 204 response
2578b9
  - JDK-8238284: [macos] Zero VM build fails due to an obvious typo
2578b9
  - JDK-8238380: java.base/unix/native/libjava/childproc.c "multiple definition" link errors with GCC10
2578b9
  - JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c "multiple definition" link errors with GCC10
2578b9
  - JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link errors with GCC10
2578b9
  - JDK-8238448: RSASSA-PSS signature verification fail when using certain odd key sizes
2578b9
  - JDK-8238710: LingeredApp doesn't log stdout/stderr if exits with non-zero code
2578b9
  - JDK-8239083: C1 assert(known_holder == NULL || (known_holder->is_instance_klass() && (!known_holder->is_interface() || ((ciInstanceKlass*)known_holder)->has_nonstatic_concrete_methods())), "should be non-static concrete method");
2578b9
  - JDK-8239385: KerberosTicket client name refers wrongly to sAMAccountName in AD
2578b9
  - JDK-8240169: javadoc fails to link to non-modular api docs
2578b9
  - JDK-8240295: hs_err elapsed time in seconds is not accurate enough
2578b9
  - JDK-8240360: NativeLibraryEvent has wrong library name on Linux
2578b9
  - JDK-8240676: Meet not symmetric failure when running lucene on jdk8
2578b9
  - JDK-8241007: Shenandoah: remove ShenandoahCriticalControlThreadPriority support
2578b9
  - JDK-8241065: Shenandoah: remove leftover code after JDK-8231086
2578b9
  - JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is failing on 32bit Windows
2578b9
  - JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier: java.lang.NullPointerException
2578b9
  - JDK-8241138: http.nonProxyHosts=* causes StringIndexOutOfBoundsException in DefaultProxySelector
2578b9
  - JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
2578b9
  - JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java fails with OOME
2578b9
  - JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
2578b9
  - JDK-8241750: x86_32 build failure after JDK-8227269
2578b9
  - JDK-8242184: CRL generation error with RSASSA-PSS
2578b9
  - JDK-8242283: Can't start JVM when java home path includes non-ASCII character
2578b9
  - JDK-8242556: Cannot load RSASSA-PSS public key with non-null params from byte array
2578b9
  - JDK-8243029: Rewrite javax/net/ssl/compatibility/Compatibility.java with a flexible interop test framework
2578b9
  - JDK-8243138: Enhance BaseLdapServer to support starttls extended request
2578b9
  - JDK-8243320: Add SSL root certificates to Oracle Root CA program
2578b9
  - JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA program
2578b9
  - JDK-8243389: enhance os::pd_print_cpu_info on linux
2578b9
  - JDK-8243453: java --describe-module failed with non-ASCII module name under non-UTF8 environment
2578b9
  - JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
2578b9
  - JDK-8243489: Thread CPU Load event may contain wrong data for CPU time under certain conditions
2578b9
  - JDK-8243925: Toolkit#getScreenInsets() returns wrong value on HiDPI screens (Windows)
2578b9
  - JDK-8244087: 2020-04-24 public suffix list update
2578b9
  - JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest release 1.8.26
2578b9
  - JDK-8244164: AArch64: jaotc generates incorrect code for compressed OOPs with non-zero heap base
2578b9
  - JDK-8244196: adjust output in os_linux
2578b9
  - JDK-8244225: stringop-overflow warning on strncpy call from compile_the_world_in
2578b9
  - JDK-8244287: JFR: Methods samples have line number 0
2578b9
  - JDK-8244703: "platform encoding not initialized" exceptions with debugger, JNI
2578b9
  - JDK-8244719: CTW: C2 compilation fails with "assert(!VerifyHashTableKeys || _hash_lock == 0) failed: remove node from hash table before modifying it"
2578b9
  - JDK-8244729: Shenandoah: remove resolve paths from SBSA::generate_shenandoah_lrb
2578b9
  - JDK-8244763: Update --release 8 symbol information after JSR 337 MR3
2578b9
  - JDK-8244818: Java2D Queue Flusher crash while moving application window to external monitor
2578b9
  - JDK-8245151: jarsigner should not raise duplicate warnings on verification
2578b9
  - JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
2578b9
  - JDK-8245714: "Bad graph detected in build_loop_late" when loads are pinned on loop limit check uncommon branch
2578b9
  - JDK-8245801: StressRecompilation triggers assert "redundunt OSR recompilation detected. memory leak in CodeCache!"
2578b9
  - JDK-8245832: JDK build make-static-libs should build all JDK libraries
2578b9
  - JDK-8245880: Shenandoah: check class unloading flag early in concurrent code root scan
2578b9
  - JDK-8245981: Upgrade to jQuery 3.5.1
2578b9
  - JDK-8246027: Minimal fastdebug build broken after JDK-8245801
2578b9
  - JDK-8246094: [macos] Sound Recording and playback is not working
2578b9
  - JDK-8246153: TestEliminateArrayCopy fails with -XX:+StressReflectiveCode
2578b9
  - JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
2578b9
  - JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest fails with AssertionError
2578b9
  - JDK-8246203: Segmentation fault in verification due to stack overflow with -XX:+VerifyIterativeGVN
2578b9
  - JDK-8246330: Add TLS Tests for Legacy ECDSA curves
2578b9
  - JDK-8246453: TestClone crashes with "all collected exceptions must come from the same place"
2578b9
  - JDK-8247246: Add explicit ResolvedJavaType.link and expose presence of default methods
2578b9
  - JDK-8247350: [aarch64] assert(false) failed: wrong size of mach node
2578b9
  - JDK-8247502: PhaseStringOpts crashes while optimising effectively dead code
2578b9
  - JDK-8247615: Initialize the bytes left for the heap sampler
2578b9
  - JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV in SBC2Support::pin_and_expand
2578b9
  - JDK-8247874: Replacement in VersionProps.java.template not working when --with-vendor-bug-url contains '&'
2578b9
  - JDK-8247979: aarch64: missing side effect of killing flags for clearArray_reg_reg
2578b9
  - JDK-8248214: Add paddings for TaskQueueSuper to reduce false-sharing cache contention
2578b9
  - JDK-8248219: aarch64: missing memory barrier in fast_storefield and fast_accessfield
2578b9
  - JDK-8248348: Regression caused by the update to BCEL 6.0
2578b9
  - JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to jtreg 5.1
2578b9
  - JDK-8248495: [macos] zerovm is broken due to libffi headers location
2578b9
  - JDK-8248851: CMS: Missing memory fences between free chunk check and klass read
2578b9
  - JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on Windows
2578b9
  - JDK-8249159: Downport test rework for SSLSocketTemplate from 8224650
2578b9
  - JDK-8249215: JFrame::setVisible crashed with -Dfile.encoding=UTF-8 on Japanese Windows.
2578b9
  - JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not highlighted in GTKLookAndFeel
2578b9
  - JDK-8249255: Build fails if source code in cygwin home dir
2578b9
  - JDK-8249277: TestVerifyIterativeGVN.java is failing with timeout in OpenJDK 11
2578b9
  - JDK-8249278: Revert JDK-8226253 which breaks the spec of AccessibleState.SHOWING for JList
2578b9
  - JDK-8249560: Shenandoah: Fix racy GC request handling
2578b9
  - JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
2578b9
  - JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should account for corner cases
2578b9
  - JDK-8250582: Revert Principal Name type to NT-UNKNOWN when requesting TGS Kerberos tickets
2578b9
  - JDK-8250609: C2 crash in IfNode::fold_compares
2578b9
  - JDK-8250627: Use -XX:+/-UseContainerSupport for enabling/disabling Java container metrics
2578b9
  - JDK-8250755: Better cleanup for jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
2578b9
  - JDK-8250787: Provider.put no longer registering aliases in FIPS env
2578b9
  - JDK-8250826: jhsdb does not work with coredump which comes from Substrate VM
2578b9
  - JDK-8250827: Shenandoah: needs to reset/finish StringTable's dead count before/after parallel walk
2578b9
  - JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check the bounds
2578b9
  - JDK-8251117: Cannot check P11Key size in P11Cipher and P11AEADCipher
2578b9
  - JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java test failure
2578b9
  - JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with I-U
2578b9
  - JDK-8251469: Better cleanup for test/jdk/javax/imageio/SetOutput.java
2578b9
  - JDK-8251487: Shenandoah: missing detail timing tracking for final mark cleaning phase
2578b9
  - JDK-8252120: compiler/oracle/TestCompileCommand.java misspells "occured"
2578b9
  - JDK-8252157: JDK-8231209 11u backport breaks jmm binary compatibility
2578b9
  - JDK-8252258: [11u] JDK-8242154 changes the default vendor
2578b9
  - JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after downport of 8234011
2578b9
  - JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10) in JDK 11
2578b9
  - JDK-8253283: [11u] Test build/translations/VerifyTranslations.java failing after JDK-8252258
2578b9
  - JDK-8253813: Backout JDK-8244287 from 11u: it causes several crashes
2578b9
2578b9
Notes on individual issues:
2578b9
===========================
2578b9
2578b9
core-libs/java.nio.charsets:
2578b9
2578b9
JDK-8240196: Modified the MS950 charset Encoder's Conversion Table
2578b9
==================================================================
2578b9
In this release, some of the one-way byte-to-char mappings have been
2578b9
aligned with the preferred mappings provided by the Unicode Consortium
2578b9
(https://unicode.org/Public/MAPPINGS/VENDORS/MICSFT/WindowsBestFit/bestfit950.txt).
2578b9
2578b9
core-libs/java.util:i18n:
2578b9
2578b9
JDK-8238914: Localized Time Zone Name Inconsistency Between English and Other Locales
2578b9
=====================================================================================
2578b9
English time zone names provided by the CLDR locale provider are now
2578b9
correctly synthesized following the CLDR spec, rather than substituted
2578b9
from the COMPAT provider. For example, SHORT style names are no longer
2578b9
synthesized abbreviations of LONG style names, but instead produce GMT
2578b9
offset formats.
2578b9
2578b9
core-svc/java.lang.management:
2578b9
2578b9
JDK-8236876: OperatingSystemMXBean Methods Inside a Container Return Container Specific Data
2578b9
============================================================================================
2578b9
When executing in a container, or other virtualized operating
2578b9
environment, the following `OperatingSystemMXBean` methods in this
2578b9
release return container specific information, if
2578b9
available. Otherwise, they return host specific data:
2578b9
2578b9
* getFreePhysicalMemorySize()
2578b9
* getTotalPhysicalMemorySize()
2578b9
* getFreeSwapSpaceSize()
2578b9
* getTotalSwapSpaceSize()
2578b9
* getSystemCpuLoad()
2578b9
2578b9
security-libs/java.security:
2578b9
2578b9
JDK-8250756: Added Entrust Root Certification Authority - G4 certificate
2578b9
========================================================================
2578b9
The Entrust root certificate has been added to the cacerts truststore:
2578b9
2578b9
Alias Name: entrustrootcag4
2578b9
Distinguished Name: CN=Entrust Root Certification Authority - G4, OU="(c) 2015 Entrust,  Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
2578b9
2578b9
JDK-8250860: Added 3 SSL Corporation Root CA Certificates
2578b9
=========================================================
2578b9
The following root certificates have been added to the cacerts truststore for the SSL Corporation:
2578b9
2578b9
Alias Name: sslrootrsaca
2578b9
Distinguished Name: CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US
2578b9
2578b9
Alias Name: sslrootevrsaca
2578b9
Distinguished Name: CN=SSL.com EV Root Certification Authority RSA R2, O=SSL Corporation, L=Houston, ST=Texas, C=US
2578b9
2578b9
Alias Name: sslrooteccca
2578b9
Distinguished Name: CN=SSL.com Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US
2578b9
2578b9
JDK-8236730: Weak Named Curves in TLS, CertPath, and Signed JAR Disabled by Default
2578b9
===================================================================================
2578b9
Weak named curves are disabled by default by adding them to the
2578b9
following `disabledAlgorithms` security properties:
2578b9
2578b9
* jdk.tls.disabledAlgorithms
2578b9
* jdk.certpath.disabledAlgorithms
2578b9
* jdk.jar.disabledAlgorithms
2578b9
2578b9
Red Hat has always disabled many of the curves provided by upstream,
2578b9
so the only addition in this release is:
2578b9
2578b9
* secp256k1
2578b9
2578b9
The curves that remain enabled are:
2578b9
2578b9
* secp256r1
2578b9
* secp384r1
2578b9
* secp521r1
2578b9
* X25519
2578b9
* X448
2578b9
2578b9
When large numbers of weak named curves need to be disabled, adding
2578b9
individual named curves to each `disabledAlgorithms` property would be
2578b9
overwhelming. To relieve this, a new security property,
2578b9
`jdk.disabled.namedCurves`, is implemented that can list the named
2578b9
curves common to all of the `disabledAlgorithms` properties. To use
2578b9
the new property in the `disabledAlgorithms` properties, precede the
2578b9
full property name with the keyword `include`.  Users can still add
2578b9
individual named curves to `disabledAlgorithms` properties separate
2578b9
from this new property.  No other properties can be included in the
2578b9
`disabledAlgorithms` properties.
2578b9
2578b9
To restore the named curves, remove the `include
2578b9
jdk.disabled.namedCurves` either from specific or from all
2578b9
`disabledAlgorithms` security properties. To restore one or more
2578b9
curves, remove the specific named curve(s) from the
2578b9
`jdk.disabled.namedCurves` property.
2578b9
2578b9
JDK-8244286: Tools Warn If Weak Algorithms Are Used Before Restricting Them
2578b9
===========================================================================
2578b9
The `keytool` and `jarsigner` tools have been updated to warn users
2578b9
about weak cryptographic algorithms being used before they are
2578b9
disabled. In this release, the tools issue warnings for the SHA-1 hash
2578b9
algorithm and 1024-bit RSA/DSA keys.
2578b9
2578b9
security-libs/javax.net.ssl:
2578b9
2578b9
JDK-8242147: New System Properties to Configure the TLS Signature Schemes
2578b9
=========================================================================
2578b9
Two new system properties have been added to customize the TLS
2578b9
signature schemes in JDK. `jdk.tls.client.SignatureSchemes` has been
2578b9
added for the TLS client side, and `jdk.tls.server.SignatureSchemes`
2578b9
has been added for the server side.
2578b9
2578b9
Each system property contains a comma-separated list of supported
2578b9
signature scheme names specifying the signature schemes that could be
2578b9
used for the TLS connections.
2578b9
2578b9
The names are described in the "Signature Schemes" section of the
2578b9
*Java Security Standard Algorithm Names Specification*.
2578b9
2578b9
security-libs/javax.security:
2578b9
2578b9
JDK-8242059: Support for canonicalize in krb5.conf
2578b9
==================================================
2578b9
2578b9
The 'canonicalize' flag in the [krb5.conf file][0] is now supported by
2578b9
the JDK Kerberos implementation. When set to *true*, RFC 6806 [1] name
2578b9
canonicalization is requested by clients in TGT requests to KDC
2578b9
services (AS protocol). Otherwise, and by default, it is not
2578b9
requested.
2578b9
2578b9
The new default behavior is different from previous releases where
2578b9
name canonicalization was always requested by clients in TGT requests
2578b9
to KDC services (provided that support for RFC 6806[1] was not
2578b9
explicitly disabled with the *sun.security.krb5.disableReferrals*
2578b9
system or security properties).
2578b9
2578b9
[0]: https://web.mit.edu/kerberos/krb5-devel/doc/admin/conf_files/krb5_conf.html
2578b9
[1]: https://tools.ietf.org/html/rfc6806
2578b9
2578b9
JDK-8254177: US/Pacific-New Zone name removed as part of tzdata2020b
2578b9
====================================================================
2578b9
Following JDK's update to tzdata2020b, the long-obsolete files
2578b9
pacificnew and systemv have been removed. As a result, the
2578b9
"US/Pacific-New" zone name declared in the pacificnew data file is no
2578b9
longer available for use.
2578b9
2578b9
Information regarding the update can be viewed at
2578b9
https://mm.icann.org/pipermail/tz-announce/2020-October/000059.html
2578b9
2578b9
New in release OpenJDK 11.0.8 (2020-07-14):
2578b9
===========================================
2578b9
Live versions of these release notes can be found at:
2578b9
  * https://bitly.com/oj1108
2578b9
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.8.txt
2578b9
2578b9
* Security fixes
2578b9
  - JDK-8230613: Better ASCII conversions
2578b9
  - JDK-8231800: Better listing of arrays
2578b9
  - JDK-8232014: Expand DTD support
2578b9
  - JDK-8233234: Better Zip Naming
2578b9
  - JDK-8233239, CVE-2020-14562: Enhance TIFF support
2578b9
  - JDK-8233255: Better Swing Buttons
2578b9
  - JDK-8234032: Improve basic calendar services
2578b9
  - JDK-8234042: Better factory production of certificates
2578b9
  - JDK-8234418: Better parsing with CertificateFactory
2578b9
  - JDK-8234836: Improve serialization handling
2578b9
  - JDK-8236191: Enhance OID processing
2578b9
  - JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
2578b9
  - JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
2578b9
  - JDK-8237592, CVE-2020-14577: Enhance certificate verification
2578b9
  - JDK-8238002, CVE-2020-14581: Better matrix operations
2578b9
  - JDK-8238013: Enhance String writing
2578b9
  - JDK-8238804: Enhance key handling process
2578b9
  - JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
2578b9
  - JDK-8238843: Enhanced font handing
2578b9
  - JDK-8238920, CVE-2020-14583: Better Buffer support
2578b9
  - JDK-8238925: Enhance WAV file playback
2578b9
  - JDK-8240119, CVE-2020-14593: Less Affine Transformations
2578b9
  - JDK-8240482: Improved WAV file playback
2578b9
  - JDK-8241379: Update JCEKS support
2578b9
  - JDK-8241522: Manifest improved jar headers redux
2578b9
  - JDK-8242136, CVE-2020-14621: Better XML namespace handling
2578b9
* Other changes
2578b9
  - JDK-6933331: (d3d/ogl) java.lang.IllegalStateException: Buffers have not been created
2578b9
  - JDK-7124307: JSpinner and changing value by mouse
2578b9
  - JDK-8022574: remove HaltNode code after uncommon trap calls
2578b9
  - JDK-8039082: [TEST_BUG] Test java/awt/dnd/BadSerializationTest/BadSerializationTest.java fails
2578b9
  - JDK-8040630: Popup menus and tooltips flicker with previous popup contents when first shown
2578b9
  - JDK-8044365: (dc) MulticastSendReceiveTests.java failing with ENOMEM when joining group (OS X 10.9)
2578b9
  - JDK-8048215: [TESTBUG] java/lang/management/ManagementFactory/ThreadMXBeanProxy.java Expected non-null LockInfo
2578b9
  - JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails in nightly
2578b9
  - JDK-8080353: JShell: Better error message on attempting to add default method
2578b9
  - JDK-8139876: Exclude hanging nsk/stress/stack from execution with deoptimization enabled
2578b9
  - JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails with -XX:+DeoptimizeALot
2578b9
  - JDK-8153430: jdk regression test MletParserLocaleTest, ParserInfiniteLoopTest reduce default timeout
2578b9
  - JDK-8156207: Resource allocated BitMaps are often cleared unnecessarily
2578b9
  - JDK-8159740: JShell: corralled declarations do not have correct source to wrapper mapping
2578b9
  - JDK-8175984: ICC_Profile has un-needed, not-empty finalize method
2578b9
  - JDK-8176359: Frame#setMaximizedbounds not working properly in multi screen environments
2578b9
  - JDK-8183369: RFC unconformity of HttpURLConnection with proxy
2578b9
  - JDK-8187078: -XX:+VerifyOops finds numerous problems when running JPRT
2578b9
  - JDK-8191169: java/net/Authenticator/B4769350.java failed intermittently
2578b9
  - JDK-8191930: [Graal] emits unparseable XML into compile log
2578b9
  - JDK-8193879: Java debugger hangs on method invocation
2578b9
  - JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on Windows
2578b9
  - JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
2578b9
  - JDK-8198000: java/awt/List/EmptyListEventTest/EmptyListEventTest.java debug assert on Windows
2578b9
  - JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/WrongParentAfterRemoveMenu.java debug assert on Windows
2578b9
  - JDK-8198339: Test javax/swing/border/Test6981576.java is unstable
2578b9
  - JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows, after JDK-8198801
2578b9
  - JDK-8203264: JNI exception pending in PlainDatagramSocketImpl.c:740
2578b9
  - JDK-8203672: JNI exception pending in PlainSocketImpl.c
2578b9
  - JDK-8203673: JNI exception pending in DualStackPlainDatagramSocketImpl.c:398
2578b9
  - JDK-8204834: Fix confusing "allocate" naming in OopStorage
2578b9
  - JDK-8205399: Set node color on pinned HashMap.TreeNode deletion
2578b9
  - JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with handshake_failure
2578b9
  - JDK-8206179: com/sun/management/OperatingSystemMXBean/GetCommittedVirtualMemorySize.java fails with Committed virtual memory size illegal value
2578b9
  - JDK-8207334: VM times out in VM_HandshakeAllThreads::doit() with RunThese30M
2578b9
  - JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize) doesn't work with 1GB LargePages
2578b9
  - JDK-8209113: Use WeakReference for lastFontStrike for created Fonts
2578b9
  - JDK-8209333: Socket reset issue for TLS 1.3 socket close
2578b9
  - JDK-8209439: C2 library_call can potentially ignore Math.pow intrinsic or use null pointer
2578b9
  - JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/ArchivedModuleCompareTest.java fails with EnableJVMCI.
2578b9
  - JDK-8210147: adjust some WSAGetLastError usages in windows network coding
2578b9
  - JDK-8210284: "assert((av & 0x00000001) == 0) failed: unsupported V8" on Solaris 11.4
2578b9
  - JDK-8210303: VM_HandshakeAllThreads fails assert with "failed: blocked and not walkable"
2578b9
  - JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to check if EnableJVMCI is set.
2578b9
  - JDK-8210788: Javadoc for Thread.join(long, int) should specify that it waits forever when both arguments are zero
2578b9
  - JDK-8211301: [macos] support full window content options
2578b9
  - JDK-8211332: Space for stub routines (code_size2) is too small on new Skylake CPUs
2578b9
  - JDK-8211339: NPE during SSL handshake caused by HostnameChecker
2578b9
  - JDK-8211392: compiler/profiling/spectrapredefineclass_classloaders/Launcher.java times out in JDK12 CI
2578b9
  - JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when JVMTI walks AOT frames
2578b9
  - JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE when JVMCI is absent
2578b9
  - JDK-8212167: JShell : Stack trace of exception has wrong line number
2578b9
  - JDK-8212933: Thread-SMR: requesting a VM operation whilst holding a ThreadsListHandle can cause deadlocks
2578b9
  - JDK-8212986: Make Visual Studio compiler check less strict
2578b9
  - JDK-8213250: CDS archive creation aborts due to metaspace object allocation failure
2578b9
  - JDK-8213516: jck test api/javax_accessibility/AccessibleState/fields.html fails intermittent
2578b9
  - JDK-8213947: ARM32: failed check_simd should set UsePopCountInstruction to false
2578b9
  - JDK-8214418: half-closed SSLEngine status may cause application dead loop
2578b9
  - JDK-8214440: ldap over a TLS connection negotiate failed with "javax.net.ssl.SSLPeerUnverifiedException: hostname of the server '' does not match the hostname in the server's certificate"
2578b9
  - JDK-8214444: Wrong strncat limits in dfa.cpp
2578b9
  - JDK-8214481: freetype path does not disable TrueType hinting with AA+FM hints
2578b9
  - JDK-8214571: -Xdoclint of array serialField gives "error: array type not allowed here"
2578b9
  - JDK-8214856: Errors with JSZip in web console after upgrade to 3.1.5
2578b9
  - JDK-8214862: assert(proj != __null) at compile.cpp:3251
2578b9
  - JDK-8215369: Jcstress pollute /var/tmp with temporary files.
2578b9
  - JDK-8215551: Missing case label in nmethod::reloc_string_for()
2578b9
  - JDK-8215555: TieredCompilation C2 threads can excessively block handshakes
2578b9
  - JDK-8215711: Missing key_share extension for (EC)DHE key exchange should alert missing_extension
2578b9
  - JDK-8216151: [Graal] Module jdk.internal.vm.compiler.management has not been granted accessClassInPackage.org.graalvm.compiler.debug
2578b9
  - JDK-8216154: C4819 warnings at HotSpot sources on Windows
2578b9
  - JDK-8216541: CompiledICHolders of VM locked unloaded nmethods are released too late
2578b9
  - JDK-8217230: assert(t == t_no_spec) failure in NodeHash::check_no_speculative_types()
2578b9
  - JDK-8217404: --with-jvm-features doesn't work when multiple features are explicitly disabled
2578b9
  - JDK-8217447: Develop flag TraceICs is broken
2578b9
  - JDK-8217606: LdapContext#reconnect always opens a new connection
2578b9
  - JDK-8218807: Compilation database (compile_commands.json) may contain obsolete items
2578b9
  - JDK-8219214: Infinite Loop in CodeSection::dump()
2578b9
  - JDK-8219904: ClassCastException when calling FlightRecorderMXBean#getRecordings()
2578b9
  - JDK-8219991: New fix of the deadlock in sun.security.ssl.SSLSocketImpl
2578b9
  - JDK-8221121: applications/microbenchmarks are encountering crashes in tier5
2578b9
  - JDK-8221445: FastSysexMessage constructor crashes MIDI receiption thread
2578b9
  - JDK-8221482: Initialize VMRegImpl::regName[] earlier to prevent assert during PrintStubCode
2578b9
  - JDK-8221741: ClassCastException can happen when fontconfig.properties is used
2578b9
  - JDK-8221823: Requested JDialog width is ignored
2578b9
  - JDK-8223108: Test java/awt/EventQueue/NonComponentSourcePost.java is unstable
2578b9
  - JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails on windows10
2578b9
  - JDK-8224109: Text spaced incorrectly by drawString under rotation with fractional metric
2578b9
  - JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/RemoveDropTargetCrashTest.java fails on MacOS
2578b9
  - JDK-8224793: os::die() does not honor CreateCoredumpOnCrash option
2578b9
  - JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java fails with reserved greater than expected
2578b9
  - JDK-8224931: disable JAOTC invokedynamic support until 8223533 is fixed
2578b9
  - JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption throws ShortBufferException
2578b9
  - JDK-8225068: Remove DocuSign root certificate that is expiring in May 2020
2578b9
  - JDK-8225069: Remove Comodo root certificate that is expiring in May 2020
2578b9
  - JDK-8225126: Test SetBoundsPaintTest.html faild on Windows when desktop is scaled
2578b9
  - JDK-8225325: Add tests for redefining a class' private method during resolution of the bootstrap specifier
2578b9
  - JDK-8225622: [AOT] runtime/SharedArchiveFile/TestInterpreterMethodEntries.java crashed with AOTed java.base
2578b9
  - JDK-8225653: Provide more information when hitting SIGILL from HaltNode
2578b9
  - JDK-8225783: Incorrect use of binary operators on booleans in type.cpp
2578b9
  - JDK-8225789: Empty method parameter type should generate ClassFormatError
2578b9
  - JDK-8226198: use of & instead of && in LibraryCallKit::arraycopy_restore_alloc_state
2578b9
  - JDK-8226253: JAWS reports wrong number of radio buttons when buttons are hidden.
2578b9
  - JDK-8226653: [accessibility] Can edit text cell correctly, but Accessibility Tool reads nothing about editor
2578b9
  - JDK-8226806: [macOS 10.14] Methods of Java Robot should be called from appropriate thread
2578b9
  - JDK-8226879: Memory leak in Type::hashcons
2578b9
  - JDK-8227632: Incorrect PrintCompilation message: made not compilable on levels 0 1 2 3 4
2578b9
  - JDK-8228407: JVM crashes with shared archive file mismatch
2578b9
  - JDK-8228482: fix xlc16/xlclang comparison of distinct pointer types and string literal conversion warnings
2578b9
  - JDK-8228757: Fail fast if the handshake type is unknown
2578b9
  - JDK-8229158: make UseSwitchProfiling non-experimental or false by-default
2578b9
  - JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is flawed
2578b9
  - JDK-8229855: C2 fails with assert(false) failed: bad AD file
2578b9
  - JDK-8230591: AArch64: Missing intrinsics for Math.ceil, floor, rint
2578b9
  - JDK-8231118: ARM32: Math tests failures
2578b9
  - JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
2578b9
  - JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
2578b9
  - JDK-8231438: [macOS] Dark mode for the desktop is not supported
2578b9
  - JDK-8231550: C2: ShouldNotReachHere() in verify_strip_mined_scheduling
2578b9
  - JDK-8231564: setMaximizedBounds is broken with large display scale and multiple monitors
2578b9
  - JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in libosxsecurity
2578b9
  - JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails intermittently with NPE
2578b9
  - JDK-8231671: Fix copyright headers in hotspot (missing comma after year)
2578b9
  - JDK-8231720: Some perf regressions after 8225653
2578b9
  - JDK-8231779: crash HeapWord*ParallelScavengeHeap::failed_mem_allocate
2578b9
  - JDK-8231863: Crash if classpath is read from @argument file and the main gets option argument
2578b9
  - JDK-8232080: jlink plugins for vendor information and run-time options
2578b9
  - JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3 instructions on processors which don't support it
2578b9
  - JDK-8232134: Change to Visual Studio 2017 15.9.16 for building on Windows at Oracle
2578b9
  - JDK-8232226: [macos 10.15] test/jdk/java/awt/color/EqualityTest/EqualityTest.java may fail
2578b9
  - JDK-8232357: Compare version info of Santuario to legal notice
2578b9
  - JDK-8232572: Add hooks for custom output dir in Bundles.gmk
2578b9
  - JDK-8232634: Problem List ICMColorDataTest.java
2578b9
  - JDK-8232748: Build static versions of certain JDK libraries
2578b9
  - JDK-8232846: ProcessHandle.Info command with non-English shows question marks
2578b9
  - JDK-8233033: C2 produces wrong result while unswitching a loop due to lost control dependencies
2578b9
  - JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java fails after 8232080
2578b9
  - JDK-8233197: Invert JvmtiExport::post_vm_initialized() and Jfr:on_vm_start() start-up order for correct option parsing
2578b9
  - JDK-8233291: [TESTBUG] tools/jlink/plugins/VendorInfoPluginsTest.java fails with debug or non-server VMs
2578b9
  - JDK-8233364: Fix undefined behavior in Canonicalizer::do_ShiftOp
2578b9
  - JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration) may throw ClassCastException
2578b9
  - JDK-8233608: Minimal build broken after JDK-8233494
2578b9
  - JDK-8233621: Mismatch in jsse.enableMFLNExtension property name
2578b9
  - JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is ON
2578b9
  - JDK-8233707: systemScale.cpp could not compile with VS2019
2578b9
  - JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
2578b9
  - JDK-8233880: Support compilers with multi-digit major version numbers
2578b9
  - JDK-8233920: MethodHandles::tryFinally generates illegal bytecode for long/double return type
2578b9
  - JDK-8234137: The "AutoTestOnTop.java" test may run external applications
2578b9
  - JDK-8234146: compiler/jsr292/ContinuousCallSiteTargetChange.java times out on SPARC
2578b9
  - JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/ModalDialogEnterExitEventsTest.java fails in Windows
2578b9
  - JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect numbers for Compiler area
2578b9
  - JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/DisposeDialogNotActivateOwnerTest/DisposeDialogNotActivateOwnerTest.java fails on linux-x64 nightly
2578b9
  - JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with GetDeviceCaps
2578b9
  - JDK-8234522: [macos] Crash with use of native file dialog
2578b9
  - JDK-8234691: Potential double-free in ParallelSPCleanupTask constructor
2578b9
  - JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java times out
2578b9
  - JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests support TLSv1.3
2578b9
  - JDK-8234728: Some security tests should support TLSv1.3
2578b9
  - JDK-8234779: Provide idiom for declaring classes noncopyable
2578b9
  - JDK-8234968: check calloc rv in libinstrument InvocationAdapter
2578b9
  - JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/DrawImageBG/SystemBgColorTest.java fails
2578b9
  - JDK-8235183: Remove the "HACK CODE" in comment
2578b9
  - JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
2578b9
  - JDK-8235311: Tag mismatch may alert bad_record_mac
2578b9
  - JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with -XX:+StressGCM
2578b9
  - JDK-8235452: Strip mined loop verification fails with assert(is_OuterStripMinedLoop()) failed: invalid node class
2578b9
  - JDK-8235584: UseProfiledLoopPredicate fails with assert(_phase->get_loop(c) == loop) failed: have to be in the same loop
2578b9
  - JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
2578b9
  - JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
2578b9
  - JDK-8235686: Add more custom hooks in Bundles.gmk
2578b9
  - JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
2578b9
  - JDK-8235762: JVM crash in SWPointer during C2 compilation
2578b9
  - JDK-8235834: IBM-943 charset encoder needs updating
2578b9
  - JDK-8235874: The ordering of Cipher Suites is not maintained provided through jdk.tls.client.cipherSuites and jdk.tls.server.cipherSuites system property.
2578b9
  - JDK-8235908: omit ThreadPriorityPolicy warning when value is set from image
2578b9
  - JDK-8235984: C2: assert(out->in(PhiNode::Region) == head || out->in(PhiNode::Region) == slow_head) failed: phi must be either part of the slow or the fast loop
2578b9
  - JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is skipped in all testing
2578b9
  - JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash algorithm as AlgorithmId
2578b9
  - JDK-8236545: Compilation error in mach5 java/awt/FileDialog/MacOSGoToFolderCrash.java
2578b9
  - JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
2578b9
  - JDK-8236759: ShouldNotReachHere in PhaseIdealLoop::verify_strip_mined_scheduling
2578b9
  - JDK-8236897: Fix the copyright header for pkcs11gcm2.h
2578b9
  - JDK-8236921: Add build target to produce a JDK image suitable for a Graal/SVM build
2578b9
  - JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
2578b9
  - JDK-8236996: Incorrect Roboto font rendering on Windows with subpixel antialiasing
2578b9
  - JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI -XX:JVMCICounterSize=2147483648
2578b9
  - JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails with release VMs
2578b9
  - JDK-8237086: assert(is_MachReturn()) running CTW with fix for JDK-8231291
2578b9
  - JDK-8237192: Generate stripped/public pdbs on Windows for jdk images
2578b9
  - JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger barriers
2578b9
  - JDK-8237474: Default SSLEngine should create in server role
2578b9
  - JDK-8237859: C2: Crash when loads float above range check
2578b9
  - JDK-8237951: CTW: C2 compilation fails with "malformed control flow"
2578b9
  - JDK-8237962: give better error output for invalid OCSP response intervals in CertPathValidator checks
2578b9
  - JDK-8238190: [JVMCI] Fix single implementor speculation for diamond shapes.
2578b9
  - JDK-8238356: CodeHeap::blob_count() overestimates the number of blobs
2578b9
  - JDK-8238452: Keytool generates wrong expiration date if validity is set to 2050/01/01
2578b9
  - JDK-8238555: Allow Initialization of SunPKCS11 with NSS when there are external FIPS modules in the NSSDB
2578b9
  - JDK-8238575: DragSourceEvent.getLocation() returns wrong value on HiDPI screens (Windows)
2578b9
  - JDK-8238676: jni crashes on accessing it from process exit hook
2578b9
  - JDK-8238721: Add failing client jtreg tests to the Problem List
2578b9
  - JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to report a gone audio device
2578b9
  - JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN || !((n)->is_dead()))) failed: can not use dead node
2578b9
  - JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle precedence edges from unmatched CFG nodes correctly
2578b9
  - JDK-8238898: Missing hash characters for header on license file
2578b9
  - JDK-8238942: Rendering artifacts with LCD text and fractional metrics
2578b9
  - JDK-8238985: [TESTBUG] The arrow image is blue instead of green
2578b9
  - JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
2578b9
  - JDK-8239055: Wrong implementation of VMState.hasListener
2578b9
  - JDK-8239091: Reversed arguments in call to strstr in freetype "debug" code.
2578b9
  - JDK-8239142: C2's UseUniqueSubclasses optimization is broken for array accesses
2578b9
  - JDK-8239224: libproc_impl.c previous_thr may be used uninitialized warning
2578b9
  - JDK-8239351: Give more meaningful InternalError messages in Deflater.c
2578b9
  - JDK-8239365: ProcessBuilder test modifications for AIX execution
2578b9
  - JDK-8239456: vtable stub generation: assert failure (code size estimate)
2578b9
  - JDK-8239457: call ReleaseStringUTFChars before early returns in Java_sun_security_pkcs11_wrapper_PKCS11_connect
2578b9
  - JDK-8239462: jdk.hotspot.agent misses some ReleaseStringUTFChars calls in case of early returns
2578b9
  - JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating "END." marker at lastline is not always true
2578b9
  - JDK-8239787: AArch64: String.indexOf may incorrectly handle empty strings
2578b9
  - JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
2578b9
  - JDK-8239798: SSLSocket closes socket both socket endpoints on a SocketTimeoutException
2578b9
  - JDK-8239819: XToolkit: Misread of screen information memory
2578b9
  - JDK-8239852: java/util/concurrent tests fail with -XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed: verification should have failed
2578b9
  - JDK-8239893: Windows handle Leak when starting processes using ProcessBuilder
2578b9
  - JDK-8239915: Zero VM crashes when handling dynamic constant
2578b9
  - JDK-8239931: [win][x86] vtable stub generation: assert failure (code size estimate) follow-up
2578b9
  - JDK-8239976: Put JDK-8239965 on the ProblemList.txt
2578b9
  - JDK-8240073: Fix 'test-make' build target in 11u
2578b9
  - JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK characters
2578b9
  - JDK-8240202: A few client tests leave mouse buttons pressed
2578b9
  - JDK-8240220: IdealLoopTree::dump_head predicate printing is broken
2578b9
  - JDK-8240223: Use consistent predicate order in and with PhaseIdealLoop::find_predicate
2578b9
  - JDK-8240227: Loop predicates should be copied to unswitched loops
2578b9
  - JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/compiler/loopopts/superword/SumRedAbsNeg_Float.java
2578b9
  - JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in Windows Print
2578b9
  - JDK-8240529: CheckUnhandledOops breaks NULL check in Modules::define_module
2578b9
  - JDK-8240576: JVM crashes after transformation in C2 IdealLoopTree::merge_many_backedges
2578b9
  - JDK-8240603: Windows 32bit compile error after 8238676
2578b9
  - JDK-8240629: argfiles parsing broken for argfiles with comment cross 4096 bytes chunk
2578b9
  - JDK-8240711: TestJstatdPort.java failed due to "ExportException: Port already in use:"
2578b9
  - JDK-8240786: [TESTBUG] The test java/awt/Window/GetScreenLocation/GetScreenLocationTest.java fails on HiDPI screen
2578b9
  - JDK-8240824: enhance print_full_memory_info on Linux by THP related information
2578b9
  - JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use fiber-friendly java.util.concurrent.locks in JSSE"
2578b9
  - JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed: multiple Memories being matched at once?
2578b9
  - JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
2578b9
  - JDK-8241445: Fix copyright in test/jdk/tools/launcher/ArgFileSyntax.java
2578b9
  - JDK-8241458: [JVMCI] add mark value to expose CodeOffsets::Frame_Complete
2578b9
  - JDK-8241464: [11u] Backport: make rehashing be a needed guaranteed safepoint cleanup action
2578b9
  - JDK-8241556: Memory leak if -XX:CompileCommand is set
2578b9
  - JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX failure with IOE "Operation not permitted"
2578b9
  - JDK-8241586: compiler/cpuflags/TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
2578b9
  - JDK-8241638: launcher time metrics always report 1 on Linux when _JAVA_LAUNCHER_DEBUG set
2578b9
  - JDK-8241660: Add virtualization information output to hs_err file on macOS
2578b9
  - JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
2578b9
  - JDK-8241888: Mirror jdk.security.allowNonCaAnchor system property with a security one
2578b9
  - JDK-8241900: Loop unswitching may cause dependence on null check to be lost
2578b9
  - JDK-8241948: enhance list of environment variables printed in hs_err file
2578b9
  - JDK-8241996: on linux set full relro in the linker flags
2578b9
  - JDK-8242108: Performance regression after fix for JDK-8229496
2578b9
  - JDK-8242141: New System Properties to configure the TLS signature schemes
2578b9
  - JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
2578b9
  - JDK-8242174: [macos] The NestedModelessDialogTest test make the macOS unstable
2578b9
  - JDK-8242239: [Graal] javax/management/generified/GenericTest.java fails: FAILED: queryMBeans sets same
2578b9
  - JDK-8242294: JSSE Client does not throw SSLException when an alert occurs during handshaking
2578b9
  - JDK-8242379: [TESTBUG] compiler/loopopts/TestLoopUnswitchingLostCastDependency.java fails with release VMs
2578b9
  - JDK-8242470: Update Xerces to Version 2.12.1
2578b9
  - JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads to JVM crash
2578b9
  - JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open, x-IBM834 and x-IBM949C)
2578b9
  - JDK-8242626: enhance posix print_rlimit_info
2578b9
  - JDK-8243059: Build fails when --with-vendor-name contains a comma
2578b9
  - JDK-8243539: Copyright info (Year) should be updated for fix of 8241638
2578b9
  - JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
2578b9
  - JDK-8244407: JVM crashes after transformation in C2 IdealLoopTree::split_fall_in
2578b9
  - JDK-8244520: problemlist java/awt/font/Rotate/RotatedFontTest.java on linux
2578b9
  - JDK-8244777: ClassLoaderStats VM Op uses constant hash value
2578b9
  - JDK-8244853: The static build of libextnet is missing the JNI_OnLoad_extnet function
2578b9
  - JDK-8244951: Missing entitlements for hardened runtime
2578b9
  - JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to unordered Load (acquire semantics missing)
2578b9
  - JDK-8245649: Revert 8245397 backport of 8230591
2578b9
  - JDK-8246031: SSLSocket.getSession() doesn't close connection for timeout/ interrupts
2578b9
  - JDK-8246613: Choose the default SecureRandom algo based on registration ordering
2578b9
  - JDK-8248505: Unexpected NoSuchAlgorithmException when using secure random impl from BCFIPS provider
2578b9
2578b9
Notes on individual issues:
2578b9
===========================
2578b9
2578b9
security-libs/java.security:
2578b9
2578b9
JDK-8244167: Removal of Comodo Root CA Certificate
2578b9
==================================================
2578b9
The following expired Comodo root CA certificate was removed from the `cacerts` keystore: +
2578b9
alias name "addtrustclass1ca [jdk]"
2578b9
2578b9
Distinguished Name: CN=AddTrust Class 1 CA Root, OU=AddTrust TTP Network, O=AddTrust AB, C=SE
2578b9
2578b9
JDK-8244166: Removal of DocuSign Root CA Certificate
2578b9
====================================================
2578b9
The following expired DocuSign root CA certificate was removed from the `cacerts` keystore: +
2578b9
alias name "keynectisrootca [jdk]"
2578b9
2578b9
Distinguished Name: CN=KEYNECTIS ROOT CA, OU=ROOT, O=KEYNECTIS, C=FR
2578b9
2578b9
security-libs/javax.crypto:pkcs11:
2578b9
2578b9
JDK-8240191: Allow SunPKCS11 initialization with NSS when external FIPS modules are present in the Security Modules Database
2578b9
============================================================================================================================
2578b9
The SunPKCS11 security provider can now be initialized with NSS when
2578b9
FIPS-enabled external modules are configured in the Security Modules
2578b9
Database (NSSDB). Prior to this change, the SunPKCS11 provider would
2578b9
throw a RuntimeException with the message: "FIPS flag set for
2578b9
non-internal module" when such a library was configured for NSS in
2578b9
non-FIPS mode.
2578b9
2578b9
This change allows the JDK to work properly with recent NSS releases
2578b9
in GNU/Linux operating systems when the system-wide FIPS policy is
2578b9
turned on.
2578b9
2578b9
Further information can be found in JDK-8238555.
2578b9
2578b9
security-libs/javax.net.ssl:
2578b9
2578b9
JDK-8245077: Default SSLEngine Should Create in Server Role
2578b9
===========================================================
2578b9
In JDK 11 and later, `javax.net.ssl.SSLEngine` by default used client
2578b9
mode when handshaking.  As a result, the set of default enabled
2578b9
protocols may differ to what is expected. `SSLEngine` would usually be
2578b9
used in server mode. From this JDK release onwards, `SSLEngine` will
2578b9
default to server mode. The
2578b9
`javax.net.ssl.SSLEngine.setUseClientMode(boolean mode)` method may
2578b9
be used to configure the mode.
2578b9
2578b9
JDK-8242147: New System Properties to Configure the TLS Signature Schemes
2578b9
=========================================================================
2578b9
2578b9
Two new System Properties are added to customize the TLS signature
2578b9
schemes in JDK.  `jdk.tls.client.SignatureSchemes` is added for TLS
2578b9
client side, and `jdk.tls.server.SignatureSchemes` is added for server
2578b9
side.
2578b9
2578b9
Each System Property contains a comma-separated list of supported
2578b9
signature scheme names specifying the signature schemes that could be
2578b9
used for the TLS connections.
2578b9
2578b9
The names are described in the "Signature Schemes" section of the
2578b9
*Java Security Standard Algorithm Names Specification*.
2578b9
2578b9
New in release OpenJDK 11.0.7 (2020-04-14):
2578b9
===========================================
2578b9
Live versions of these release notes can be found at:
2578b9
  * https://bitly.com/oj1107
2578b9
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.7.txt
2578b9
2578b9
* Security fixes
2578b9
  - JDK-8223898, CVE-2020-2754: Forward references to Nashorn
2578b9
  - JDK-8223904, CVE-2020-2755: Improve Nashorn matching
2578b9
  - JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
2578b9
  - JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
2578b9
  - JDK-8225603: Enhancement for big integers
2578b9
  - JDK-8226346: Build better binary builders
2578b9
  - JDK-8227467: Better class method invocations
2578b9
  - JDK-8227542: Manifest improved jar headers
2578b9
  - JDK-8229733: TLS message handling improvements
2578b9
  - JDK-8231415, CVE-2020-2773: Better signatures in XML
2578b9
  - JDK-8231785: Improved socket permissions
2578b9
  - JDK-8232424, CVE-2020-2778: More constrained algorithms
2578b9
  - JDK-8232581, CVE-2020-2767: Improve TLS verification
2578b9
  - JDK-8233250: Better X11 rendering
2578b9
  - JDK-8233410: Better Build Scripting
2578b9
  - JDK-8234027: Better JCEKS key support
2578b9
  - JDK-8234408, CVE-2020-2781: Improve TLS session handling
2578b9
  - JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
2578b9
  - JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
2578b9
  - JDK-8235274, CVE-2020-2805: Enhance typing of methods
2578b9
  - JDK-8235691, CVE-2020-2816: Enhance TLS connectivity
2578b9
  - JDK-8236201, CVE-2020-2830: Better Scanner conversions
2578b9
  - JDK-8238960: linux-i586 builds are inconsistent as the newly build jdk is not able to reserve enough space for object heap
2578b9
* Other changes
2578b9
  - JDK-4919790: Errors in alert ssl message does not reflect the actual certificate status
2578b9
  - JDK-4949105: Access Bridge lacks html tags parsing
2578b9
  - JDK-7092821: java.security.Provider.getService() is synchronized and became scalability bottleneck
2578b9
  - JDK-7143743: Potential memory leak with zip provider
2578b9
  - JDK-8005819: Support cross-realm MSSFU
2578b9
  - JDK-8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/4983388/bug4983388.java fails with shortcuts on menus do not work
2578b9
  - JDK-8068184: Fix for JDK-8032832 caused a deadlock
2578b9
  - JDK-8145845: [AOT] NullPointerException in compiler/whitebox/GetCodeHeapEntriesTest.java
2578b9
  - JDK-8152988: [AOT] Update test batch definitions to include aot-ed java.base module mode into hs-comp testing
2578b9
  - JDK-8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle cross-compilation
2578b9
  - JDK-8163083: SocketListeningConnector does not allow invocations with port 0
2578b9
  - JDK-8163251: Hard coded loop limit prevents reading of smart card data greater than 8k
2578b9
  - JDK-8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java fails with -XX:-EliminateAllocations
2578b9
  - JDK-8169718: nsk/jdb/locals/locals002: ERROR: Cannot find boolVar with expected value: false
2578b9
  - JDK-8176556: java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails for JFIF
2578b9
  - JDK-8178798: Two compiler/aot/verification/vmflags tests fail by timeout with UseAVX=3
2578b9
  - JDK-8183107: PKCS11 regression regarding checkKeySize
2578b9
  - JDK-8185005: Improve performance of ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
2578b9
  - JDK-8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
2578b9
  - JDK-8189861: Refactor CacheFind
2578b9
  - JDK-8193042: NativeLookup::lookup_critical_entry() should only load shared library once
2578b9
  - JDK-8193596: java/net/DatagramPacket/ReuseBuf.java failed due to timeout
2578b9
  - JDK-8194944: Regression automated test 'open/test/jdk/javax/swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java' fails
2578b9
  - JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
2578b9
  - JDK-8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java causes NPE
2578b9
  - JDK-8198321: javax/swing/JEditorPane/5076514/bug5076514.java fails
2578b9
  - JDK-8198398: Test javax/swing/JColorChooser/Test6199676.java fails in mach5
2578b9
  - JDK-8199072: Test javax/swing/GroupLayout/6613904/bug6613904.java is unstable
2578b9
  - JDK-8200432: javadoc fails with ClassCastException on {@link byte[]}
2578b9
  - JDK-8201349: build broken when configured with --with-zlib=bundled on gcc 7.3
2578b9
  - JDK-8201355: Avoid native memory allocation in sun.security.mscapi.PRNG.generateSeed
2578b9
  - JDK-8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
2578b9
  - JDK-8203364: Some serviceability/sa/ tests intermittently fail with java.io.IOException: LingeredApp terminated with non-zero exit code 3
2578b9
  - JDK-8203687: javax/net/ssl/compatibility/Compatibility.java supports TLS 1.3
2578b9
  - JDK-8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The divider location is wrong
2578b9
  - JDK-8203911: Test runtime/modules/getModuleJNI/GetModule fails with -Xcheck:jni
2578b9
  - JDK-8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out of java heap
2578b9
  - JDK-8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent 7 timed out
2578b9
  - JDK-8204551: Event descriptions are truncated in logs
2578b9
  - JDK-8206963: [AOT] bug with multiple class loaders
2578b9
  - JDK-8207367: 10 vmTestbase/nsk/jdi tests timed out when running with jtreg
2578b9
  - JDK-8207832: serviceability/sa/ClhsdbCDSCore.java failed with "Couldn't find core file location"
2578b9
  - JDK-8207938: At step6,Click Add button,case failed automatically.
2578b9
  - JDK-8208157: requires.VMProps throws NPE for missing properties in "release" file
2578b9
  - JDK-8208379: compiler/jvmci/events/JvmciNotifyInstallEventTest.java failed with "Got unexpected event count after 2nd install attempt: expected 9 to equal 2"
2578b9
  - JDK-8208658: Make CDS archived heap regions usable even if compressed oop encoding has changed
2578b9
  - JDK-8208715: Conversion of milliseconds to nanoseconds in UNIXProcess contains bug
2578b9
  - JDK-8209361: [AOT] Unexpected number of references for JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111-->111]: 0 (expected at least 1)
2578b9
  - JDK-8209385: CDS runtime classpath checking is too strict when only classes from the system modules are archived
2578b9
  - JDK-8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
2578b9
  - JDK-8209418: Synchronize test/jdk/sanity/client/lib/jemmy with code-tools/jemmy/v2
2578b9
  - JDK-8209494: Create a test for SwingSet InternalFrameDemo
2578b9
  - JDK-8209499: Create test for SwingSet EditorPaneDemo
2578b9
  - JDK-8209574: [AOT] breakpoint events are generated in different threads does not meet expected count
2578b9
  - JDK-8209686: cleanup arguments to PhaseIdealLoop() constructor
2578b9
  - JDK-8209789: Synchronize test/jdk/sanity/client/lib/jemmy with code-tools/jemmy/v2
2578b9
  - JDK-8209802: Garbage collectors should register JFR types themselves to avoid build errors.
2578b9
  - JDK-8209807: improve handling exception in requires.VMProps
2578b9
  - JDK-8209817: stack is executable when building with Clang on Linux
2578b9
  - JDK-8209824: Improve the code coverage for ThreadLocal
2578b9
  - JDK-8209826: Undefined reference to os::write after JDK-8209657 (filemap.hpp cleanup)
2578b9
  - JDK-8209850: Allow NamedThreads to use GlobalCounter critical sections
2578b9
  - JDK-8209976: Improve iteration over non-JavaThreads
2578b9
  - JDK-8209993: Create a test for SwingSet3 ToolTipDemo
2578b9
  - JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
2578b9
  - JDK-8210052: Enable testing for all the available look and feels in SwingSet3 demo tests
2578b9
  - JDK-8210055: Enable different look and feel tests in SwingSet3 demo tests
2578b9
  - JDK-8210057: Enable different look and feels in SwingSet3 demo test InternalFrameDemoTest
2578b9
  - JDK-8210058: Algorithmic Italic font leans opposite angle in Printing
2578b9
  - JDK-8210220: [AOT] jdwp test cases are failing with error # ERROR: TEST FAILED: Cought IOException while receiving event packet
2578b9
  - JDK-8210289: ArchivedKlassSubGraphInfoRecord is incomplete
2578b9
  - JDK-8210459: Add support for generating compile_commands.json
2578b9
  - JDK-8210476: sun/security/mscapi/PrngSlow.java fails with Still too slow
2578b9
  - JDK-8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/referringObjects/referringObjects002/referringObjects002.java fails with unexpected size of ClassLoaderReference.referringObjects
2578b9
  - JDK-8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java crash
2578b9
  - JDK-8210632: Add key exchange algorithm to javax/net/ssl/TLSCommon/CipherSuite.java
2578b9
  - JDK-8210699: Problem list tests which times out in Xcomp mode
2578b9
  - JDK-8210793: [JVMCI] AllocateCompileIdTest.java failed to find DiagnosticCommand.class
2578b9
  - JDK-8210910: Create test for FileChooserDemo
2578b9
  - JDK-8210994: Create test for SwingSet3 FrameDemo
2578b9
  - JDK-8211139: Increase timeout value in all tests under jdk/sanity/client/SwingSet/src
2578b9
  - JDK-8211160: Handle different look and feels in JInternalFrameOperator
2578b9
  - JDK-8211211: vmTestbase/metaspace/stressDictionary/StressDictionary.java timeout
2578b9
  - JDK-8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
2578b9
  - JDK-8211443: Enable different look and feels in SwingSet3 demo test SplitPaneDemoTest
2578b9
  - JDK-8211703: JInternalFrame : java.lang.AssertionError: cannot find the internal frame
2578b9
  - JDK-8211781: re-building fails after changing Graal sources
2578b9
  - JDK-8212897: Some improvements in the EditorPaneDemotest
2578b9
  - JDK-8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04 LTS
2578b9
  - JDK-8213009: Refactoring existing SunMSCAPI classes
2578b9
  - JDK-8213010: Supporting keys created with certmgr.exe
2578b9
  - JDK-8213168: Enable different look and feel tests in SwingSet3 demo test FileChooserDemoTest
2578b9
  - JDK-8213348: jdk.internal.vm.compiler.management service providers missing in module descriptor
2578b9
  - JDK-8213906: Update arm devkits with libXrandr headers
2578b9
  - JDK-8213908: AssertionError in DeferredAttr at setOverloadKind
2578b9
  - JDK-8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
2578b9
  - JDK-8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed: elembt=byte; loadbt=void; unsigned=0
2578b9
  - JDK-8214345: infinite recursion while checking super class
2578b9
  - JDK-8214471: Enable different look and feel tests in SwingSet3 demo test ToolTipDemoTest
2578b9
  - JDK-8214534: Setting of THIS_FILE in the build is broken
2578b9
  - JDK-8214557: Filter out VM flags which don't affect AOT code generation
2578b9
  - JDK-8214578: [macos] Problem with backslashes on macOS/JIS keyboard: Java ignores system settings
2578b9
  - JDK-8214840: runtime/NMT/MallocStressTest.java timed out
2578b9
  - JDK-8214850: Rename vm_operations.?pp files to vmOperations.?pp files
2578b9
  - JDK-8214904: Test8004741.java failed due to "Too few ThreadDeath hits; expected at least 6 but saw only 5"
2578b9
  - JDK-8215322: add @file support to jaotc
2578b9
  - JDK-8215355: Object monitor deadlock with no threads holding the monitor (using jemalloc 5.1)
2578b9
  - JDK-8215396: JTabbedPane preferred size calculation is wrong for SCROLL_TAB_LAYOUT
2578b9
  - JDK-8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java crashed with AOT enabled
2578b9
  - JDK-8216353: Use utility APIs introduced in org/netbeans/jemmy/util/LookAndFeel class in client sanity test cases
2578b9
  - JDK-8216354: Syntax error in toolchain_windows.m4
2578b9
  - JDK-8216472: (se) Stack overflow during selection operation leads to crash (win)
2578b9
  - JDK-8216535: tools/jimage/JImageExtractTest.java timed out
2578b9
  - JDK-8217235: Create automated test for SwingSet ColorChooserDemoTest
2578b9
  - JDK-8217297: Add support for multiple look and feel for SwingSet SliderDemoTest
2578b9
  - JDK-8217338: [Containers] Improve systemd slice memory limit support
2578b9
  - JDK-8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
2578b9
  - JDK-8217634: RunTest documentation and usability update
2578b9
  - JDK-8217717: ZGC: Broken oop map in C1 load barrier stub
2578b9
  - JDK-8217728: Speed up incremental rerun of "make hotspot"
2578b9
  - JDK-8218268: Javac treats Manifest Class-Path entries as Paths instead of URLs
2578b9
  - JDK-8218662: Allow 204 responses with Content-Length:0
2578b9
  - JDK-8218882: NET_Writev is declared, NET_WriteV is defined
2578b9
  - JDK-8218889: Improperly use of the Optional API
2578b9
  - JDK-8219205: JFR file without license header
2578b9
  - JDK-8219597: (bf) Heap buffer state changes could provoke unexpected exceptions
2578b9
  - JDK-8219723: javax/net/ssl/compatibility/Compatibility.java failed on some SNI cases
2578b9
  - JDK-8220348: [ntintel] asserts about copying unaligned array
2578b9
  - JDK-8220451: jdi/EventQueue/remove/remove004 failed due to "ERROR: thread2 is not alive"
2578b9
  - JDK-8220456: jdi/EventQueue/remove_l/remove_l004 failed due to "TIMEOUT while waiting for event"
2578b9
  - JDK-8220479: java/nio/channels/Selector/SelectWithConsumer.java failed at testTwoChannels()
2578b9
  - JDK-8220613: java/util/Arrays/TimSortStackSize2.java times out with fastdebug build
2578b9
  - JDK-8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed out
2578b9
  - JDK-8220786: Create new switch to redirect error reporting output to stdout or stderr
2578b9
  - JDK-8221270: Duplicated synchronized keywords in SSLSocketImpl
2578b9
  - JDK-8221312: test/jdk/sanity/client/SwingSet/src/ColorChooserDemoTest.java failed
2578b9
  - JDK-8221851: Use of THIS_FILE in hotspot invalidates precompiled header on Linux/GCC
2578b9
  - JDK-8221885: Add intermittent test in the JavaSound to the ProblemList
2578b9
  - JDK-8222264: Windows incremental build is broken with JDK-8217728
2578b9
  - JDK-8222391: javax/net/ssl/compatibility/Compatibility.java should be more flexible
2578b9
  - JDK-8222448: java/lang/reflect/PublicMethods/PublicMethodsTest.java times out
2578b9
  - JDK-8222519: ButtonDemoScreenshotTest fails randomly with "still state to be reached"
2578b9
  - JDK-8222741: jdi/EventQueue/remove/remove004 fails due to VMDisconnectedException
2578b9
  - JDK-8223003: SunMSCAPI keys are not cleaned up
2578b9
  - JDK-8223063: Support CNG RSA keys
2578b9
  - JDK-8223158: Docked MacBook cannot start any Java Swing applications
2578b9
  - JDK-8223260: NamingManager should cache InitialContextFactory
2578b9
  - JDK-8223464: Improve version string for Oracle CI builds
2578b9
  - JDK-8223558: Java does not render Myanmar script correctly
2578b9
  - JDK-8223627: jdk-13+20 bundle name contains null instead of ea
2578b9
  - JDK-8223638: Replace wildcard address with loopback or local host in tests - part 6
2578b9
  - JDK-8223678: Add Visual Studio Code workspace generation support (for native code)
2578b9
  - JDK-8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due to hang in LdapRequest.getReplyBer
2578b9
  - JDK-8223769: Assert triggers with -XX:+StressReflectiveCode
2578b9
  - JDK-8224187: Refactor arraycopy_prologue to allow ZGC read barriers on arraycopy
2578b9
  - JDK-8224475: JTextPane does not show images in HTML rendering
2578b9
  - JDK-8224673: Adjust permission for delayed starting of debugging
2578b9
  - JDK-8224705: Tests that need to be problem-listed or have printer resources
2578b9
  - JDK-8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot find J2Ddemo.jar
2578b9
  - JDK-8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/NoAutotransferToDisabledCompTest.java fails linux-x64
2578b9
  - JDK-8224830: test/jdk/java/awt/Focus/ModalExcludedWindowClickTest/ModalExcludedWindowClickTest.java fails on linux-x64
2578b9
  - JDK-8224851: AArch64: fix warnings and errors with Clang and GCC 8.3
2578b9
  - JDK-8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with stream closed
2578b9
  - JDK-8225007: java/awt/print/PrinterJob/LandscapeStackOverflow.java may hang
2578b9
  - JDK-8225105: java/awt/Focus/ShowFrameCheckForegroundTest/ShowFrameCheckForegroundTest.java fails in Windows 10
2578b9
  - JDK-8225117: java/math/BigInteger/SymmetricRangeTests.java fails with ParseException
2578b9
  - JDK-8225128: Add exception for expiring DocuSign root to VerifyCACerts test
2578b9
  - JDK-8225130: Add exception for expiring Comodo roots to VerifyCACerts test
2578b9
  - JDK-8225144: [macos] In Aqua L&F backspace key does not delete when Shift is pressed
2578b9
  - JDK-8225180: SignedObject with invalid Key not throwing the InvalidKeyException in Windows
2578b9
  - JDK-8225182: JNI exception pending in DestroyXIMCallback of awt_InputMethod.c:1327
2578b9
  - JDK-8225199: [Graal] compiler/jvmci/compilerToVM/IsMatureVsReprofileTest.java fails with -XX:CompileThresholdScaling=0.1
2578b9
  - JDK-8225305: ProblemList java/lang/invoke/VarHandles tests
2578b9
  - JDK-8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java timed out
2578b9
  - JDK-8225430: Replace wildcard address with loopback or local host in tests - part 14
2578b9
  - JDK-8225435: Upgrade IANA Language Subtag Registry to the latest for JDK14
2578b9
  - JDK-8225487: giflib legal file is missing attribution for openbsd-reallocarray.c
2578b9
  - JDK-8225567: Wrong file headers with 8202414 fix changeset
2578b9
  - JDK-8225684: [AOT] vmTestbase/vm/oom/production/AlwaysOOMProduction tests fail with AOTed java.base
2578b9
  - JDK-8225766: Curve in certificate should not affect signature scheme when using TLSv1.3
2578b9
  - JDK-8225797: OldObjectSample event creates unexpected amount of checkpoint data
2578b9
  - JDK-8226381: ProblemList java/lang/reflect/PublicMethods/PublicMethodsTest.java
2578b9
  - JDK-8226406: JVM fails to detect mismatched or corrupt CDS archive
2578b9
  - JDK-8226608: Hide the onjcmd option from the help output
2578b9
  - JDK-8226892: ActionListeners on JRadioButtons don't get notified when selection is changed with arrow keys
2578b9
  - JDK-8227112: exclude compiler/intrinsics/sha/sanity tests from AOT runs
2578b9
  - JDK-8227324: Upgrade to freetype 2.10.1
2578b9
  - JDK-8227528: TestAbortVMOnSafepointTimeout.java failed due to "RuntimeException: 'Safepoint sync time longer than' missing from stdout/stderr"
2578b9
  - JDK-8227645: Some tests in serviceability/sa run with fixed -Xmx values and risk running out of memory
2578b9
  - JDK-8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
2578b9
  - JDK-8227662: freetype seeks to index at the end of the font data
2578b9
  - JDK-8228479: Correct the format of ColorChooserDemoTest
2578b9
  - JDK-8228613: java.security.Provider#getServices order is no longer deterministic
2578b9
  - JDK-8228969: 2019-09-28 public suffix list update
2578b9
  - JDK-8229236: CriticalJNINatives: dll handling should be done in native thread state
2578b9
  - JDK-8229345: Memory leak due to vtable stubs not being shared on SPARC
2578b9
  - JDK-8229888: (zipfs) Updating an existing zip file does not preserve original permissions
2578b9
  - JDK-8229994: assert(false) failed: Bad graph detected in get_early_ctrl_for_expensive
2578b9
  - JDK-8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
2578b9
  - JDK-8230235: Rendering HTML with empty img attribute and documentBaseKey cause Exception
2578b9
  - JDK-8230390: Problemlist SA tests with AOT
2578b9
  - JDK-8230400: Missing constant pool entry for a method in stacktrace
2578b9
  - JDK-8230459: Test failed to resume JVMCI CompilerThread
2578b9
  - JDK-8230480: check malloc/calloc results in java.desktop
2578b9
  - JDK-8230597: Update GIFlib library to the 5.2.1
2578b9
  - JDK-8230611: infinite loop in LogOutputList::wait_until_no_readers()
2578b9
  - JDK-8230624: [TESTBUG] Problemlist JFR compiler/TestCodeSweeper.java
2578b9
  - JDK-8230677: Should disable Escape Analysis if JVMTI capability can_get_owned_monitor_info was taken
2578b9
  - JDK-8230926: [macosx] Two apostrophes are entered instead of one with "U.S. International - PC" layout
2578b9
  - JDK-8231025: Incorrect method tag offset for big endian platform
2578b9
  - JDK-8231081: TestMetadataRetention fails due to missing symbol id
2578b9
  - JDK-8231387: java.security.Provider.getService returns random result due to race condition with mutating methods in the same class
2578b9
  - JDK-8231430: C2: Memory stomp in max_array_length() for T_ILLEGAL type
2578b9
  - JDK-8231445: check ZALLOC return values in awt coding
2578b9
  - JDK-8231507: Update Apache Santuario (XML Signature) to version 2.1.4
2578b9
  - JDK-8231584: Deadlock with ClassLoader.findLibrary and System.loadLibrary call
2578b9
  - JDK-8231753: use more Posix functionality in aix os::print_os_info
2578b9
  - JDK-8231810: javax/net/ssl/templates/SSLSocketSSLEngineTemplate.java fails intermittently with "java.lang.Exception: Unexpected EOF"
2578b9
  - JDK-8232003: (fs) Files.write can leak file descriptor in the exception case
2578b9
  - JDK-8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC: Heap too small
2578b9
  - JDK-8232060: add some initializations using sigemptyset in os_aix.cpp
2578b9
  - JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
2578b9
  - JDK-8232167: Visual Studio install found through --with-tools-dir value is discarded
2578b9
  - JDK-8232170: FSInfo#getJarClassPath throws an exception not declared in its throws clause
2578b9
  - JDK-8232200: [macos 10.15] Windows in fullscreen tests jumps around the screen
2578b9
  - JDK-8232207: Linux os::available_memory re-reads cgroup configuration on every invocation
2578b9
  - JDK-8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
2578b9
  - JDK-8232370: Refactor some com.sun.jdi tests to enable IDE integration
2578b9
  - JDK-8232433: [macos 10.15] java/awt/Window/LocationAtScreenCorner/LocationAtScreenCorner.java may fail
2578b9
  - JDK-8232571: Add missing SIGINFO signal
2578b9
  - JDK-8232692: [TESTBUG] compiler/aot/fingerprint/SelfChangedCDS.java fails when cds is disabled
2578b9
  - JDK-8232713: Update BCEL version to 6.3.1 in license file
2578b9
  - JDK-8232806: Introduce a system property to disable eager lambda initialization
2578b9
  - JDK-8232834: RunTest sometimes fails to produce valid exitcode.txt
2578b9
  - JDK-8232880: Update test documentation with additional settings for client UI tooltip tests
2578b9
  - JDK-8232950: SUNPKCS11 Provider incorrectly check key length for PSS Signatures.
2578b9
  - JDK-8233018: Add a new test to verify that DatagramSocket is not interruptible
2578b9
  - JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong result if Klass* is aligned to 32bit
2578b9
  - JDK-8233032: assert(in_bb(n)) failed: must be
2578b9
  - JDK-8233078: fix minimal VM build on Linux ppc64(le)
2578b9
  - JDK-8233328: fix minimal VM build on Linux s390x
2578b9
  - JDK-8233383: Various minor fixes
2578b9
  - JDK-8233466: aarch64: remove unnecessary load of mdo when profiling return and parameters type
2578b9
  - JDK-8233491: Crash in AdapterHandlerLibrary::get_adapter with CDS due to code cache exhaustion
2578b9
  - JDK-8233529: loopTransform.cpp:2984: Error: assert(p_f->Opcode() == Op_IfFalse) failed
2578b9
  - JDK-8233548: Update CUP to v0.11b
2578b9
  - JDK-8233649: Update ProblemList.txt to exclude failing headful tests on macos
2578b9
  - JDK-8233656: assert(d->is_CFG() && n->is_CFG()) failed: must have CFG nodes
2578b9
  - JDK-8233657: Intermittent NPE in Component.validate()
2578b9
  - JDK-8234288: Turkey Time Zone returns incorrect time zone name
2578b9
  - JDK-8234323: NULL-check return value of SurfaceData_InitOps on macosx
2578b9
  - JDK-8234339: replace JLI_StrTok in java_md_solinux.c
2578b9
  - JDK-8234340: Bump update version for OpenJDK: jdk-11.0.7
2578b9
  - JDK-8234350: assert(mode == ControlAroundStripMined && (use == sfpt || !use->is_reachable_from_root())) failed: missed a node
2578b9
  - JDK-8234386: [macos] NPE was thrown at expanding Choice from maximized frame
2578b9
  - JDK-8234397: add OS uptime information to os::print_os_info output
2578b9
  - JDK-8234423: Modifying ArrayList.subList().subList() resets modCount of subList
2578b9
  - JDK-8234466: Class loading deadlock involving X509Factory#commitEvent()
2578b9
  - JDK-8234501: remove obsolete NET_ReadV
2578b9
  - JDK-8234525: enable link-time section-gc for linux s390x to remove unused code
2578b9
  - JDK-8234610: MaxVectorSize set wrongly when UseAVX=3 is specified after JDK-8221092
2578b9
  - JDK-8234617: C1: Incorrect result of field load due to missing narrowing conversion
2578b9
  - JDK-8234723: javax/net/ssl/TLS tests support TLSv1.3
2578b9
  - JDK-8234724: javax/net/ssl/templates/SSLSocketSSLEngineTemplate.java supports TLSv1.3
2578b9
  - JDK-8234741: enhance os::get_core_path on macOS
2578b9
  - JDK-8234769: Duplicate attribution in freetype.md
2578b9
  - JDK-8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
2578b9
  - JDK-8234809: set relro in linker flags when building with gcc
2578b9
  - JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java fails on Windows 10
2578b9
  - JDK-8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
2578b9
  - JDK-8235288: AVX 512 instructions inadvertently used on Xeon for small vector width operations
2578b9
  - JDK-8235325: build failure on Linux after 8235243
2578b9
  - JDK-8235383: C1 compilation fails with -XX:+PrintIRDuringConstruction -XX:+Verbose
2578b9
  - JDK-8235489: handle return values of sscanf calls in hotspot
2578b9
  - JDK-8235509: Backport for JDK-8209657 Refactor filemap.hpp to simplify integration with Serviceability Agent.
2578b9
  - JDK-8235510: java.util.zip.CRC32 performance drop after 8200067
2578b9
  - JDK-8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java does not handle archive mapping failure
2578b9
  - JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if prelink is enabled
2578b9
  - JDK-8235671: enhance print_rlimit_info in os_posix
2578b9
  - JDK-8235744: PIT: test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java times out in linux-x64
2578b9
  - JDK-8235904: Infinite loop when rendering huge lines
2578b9
  - JDK-8235998: [c2] Memory leaks during tracing after '8224193: stringStream should not use Resource Area'.
2578b9
  - JDK-8236039: JSSE Client does not accept status_request extension in CertificateRequest messages for TLS 1.3
2578b9
  - JDK-8236140: assert(!VerifyHashTableKeys || _hash_lock == 0) failed: remove node from hash table before modifying it
2578b9
  - JDK-8236179: C1 register allocation error with T_ADDRESS
2578b9
  - JDK-8236488: Support for configure option --with-native-debug-symbols=internal is impossible on Windows
2578b9
  - JDK-8236500: Windows ucrt.dll should be looked up in versioned WINSDK subdirectory
2578b9
  - JDK-8236709: struct SwitchRange in HS violates C++ One Definition Rule
2578b9
  - JDK-8236848: [JDK 11u] make run-test-tier1 fails after backport of JDK-8232834
2578b9
  - JDK-8236873: Worker has a deadlock bug
2578b9
  - JDK-8237217: Incorrect G1StringDedupEntry type used in StringDedupTable destructor
2578b9
  - JDK-8237368: Problem with NullPointerException in RMI TCPEndpoint.read
2578b9
  - JDK-8237375: SimpleThresholdPolicy misses CounterDecay timestamp initialization
2578b9
  - JDK-8237508: Simplify JarFile.isInitializing
2578b9
  - JDK-8237540: Missing files in backport of JDK-8210910
2578b9
  - JDK-8237541: Missing files in backport of JDK-8236528
2578b9
  - JDK-8237600: Test SunJSSEFIPSInit fails on Ubuntu
2578b9
  - JDK-8237819: s390x - remove unused pd_zero_to_words_large
2578b9
  - JDK-8237869: exclude jtreg test security/infra/java/security/cert/CertPathValidator/certification/LuxTrustCA.java because of instabilities
2578b9
  - JDK-8237879: make 4.3 breaks build
2578b9
  - JDK-8237945: CTW: C2 compilation fails with assert(just_allocated_object(alloc_ctl) == ptr) failed: most recent allo
2578b9
  - JDK-8238225: Issues reported after replacing symlink at Contents/MacOS/libjli.dylib with binary
2578b9
  - JDK-8238247: CTW runner should sweep nmethods more aggressively
2578b9
  - JDK-8238366: CTW runner closes standard output on exit
2578b9
  - JDK-8238438: SuperWord::co_locate_pack picks memory state of first instead of last load
2578b9
  - JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
2578b9
  - JDK-8238534: Deep sign macOS bundles before bundle archive is being created
2578b9
  - JDK-8238591: CTW: Split applications/ctw/modules/jdk_localedata.java
2578b9
  - JDK-8238596: AVX enabled by default for Skylake even when unsupported
2578b9
  - JDK-8238811: C2: assert(i >= req() || i == 0 || is_Region() || is_Phi()) with -XX:+VerifyGraphEdges
2578b9
  - JDK-8239005: [TESTBUG] test/hotspot/jtreg/runtime/StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must initialize static state before calling do_overflow()
2578b9
  - JDK-8239466: Loss of precision in counter decay calculation in 11u backport of JDK-8237375
2578b9
  - JDK-8239856: [ntintel] asserts about copying unaligned array element
2578b9
  - JDK-8240724: [test] jdk11 downport of 8224475 misses binary file test/jdk/javax/swing/JTextPane/arrow.png
2578b9
  - JDK-8241296: Segfault in JNIHandleBlock::oops_do()
2578b9
2578b9
Notes on individual issues:
2578b9
===========================
2578b9
2578b9
security-libs/javax.xml.crypto:
2578b9
2578b9
JDK-8239467: Apache Santuario Library Updated to Version 2.1.4
2578b9
==============================================================
2578b9
The Apache Santuario library has been upgraded to version 2.1.4. As a
2578b9
result, a new system property
2578b9
`com.sun.org.apache.xml.internal.security.parser.pool-size` has been
2578b9
introduced.
2578b9
2578b9
This new system property sets the pool size of the internal
2578b9
`DocumentBuilder` cache used when processing XML Signatures. The
2578b9
function is equivalent to the
2578b9
`org.apache.xml.security.parser.pool-size` system property used in
2578b9
Apache Santuario and has the same default value of 20.