Re: RFR: 8255557: Decouple GCM from CipherCore [v9]

2023-03-08 Thread Ismael Juma
On Fri, 4 Jun 2021 06:51:35 GMT, Anthony Scarpino wrote: >> Hi, >> >> I need a review of this rather large change to GCM. GCM will no longer use >> CipherCore, and AESCrypt to handle it's buffers and other objects. It is >> also a major code redesign limits the amount of data copies and mak

Re: RFR: 8303832: Use enhanced-for cycle instead of Enumeration in JceKeyStore

2023-03-08 Thread Weijun Wang
On Wed, 8 Mar 2023 19:10:11 GMT, Andrey Turbanov wrote: > java.util.Enumeration is a legacy interface from java 1.0. > There is couple of places with cycles which use it to iterate over > collections. We can replace this manual cycle with enchanced-for, which is > shorter and easier to read. `

Re: RFR: 8303809: Dispose context in SPNEGO NegotiatorImpl

2023-03-08 Thread Weijun Wang
On Wed, 8 Mar 2023 09:05:19 GMT, Alexey Bakhtin wrote: > This patch fixes a possible native memory leak in case of a custom native GSS > provider. > The actual leak was reported in production. > > sun/security/jgss, sun/security/krb5, sun/net/www/protocol/http jtreg tests > are passed My 2 ce

Integrated: 8282201: Consider removal of expiry check in VerifyCACerts.java test

2023-03-08 Thread Rajan Halade
On Tue, 7 Mar 2023 21:19:37 GMT, Rajan Halade wrote: > This fix removes the check for 90 days expiry. But the test will continue to > fail if the expired certificate is included in `cacerts` but no exception is > granted. > > Fix also includes minor code cleanup. This pull request has now bee

Re: RFR: 8282201: Consider removal of expiry check in VerifyCACerts.java test [v2]

2023-03-08 Thread Sean Mullan
On Wed, 8 Mar 2023 21:03:59 GMT, Rajan Halade wrote: >> This fix removes the check for 90 days expiry. But the test will continue to >> fail if the expired certificate is included in `cacerts` but no exception is >> granted. >> >> Fix also includes minor code cleanup. > > Rajan Halade has upda

Re: RFR: 8282201: Consider removal of expiry check in VerifyCACerts.java test [v2]

2023-03-08 Thread Rajan Halade
> This fix removes the check for 90 days expiry. But the test will continue to > fail if the expired certificate is included in `cacerts` but no exception is > granted. > > Fix also includes minor code cleanup. Rajan Halade has updated the pull request incrementally with one additional commit

Re: RFR: 8282201: Consider removal of expiry check in VerifyCACerts.java test

2023-03-08 Thread Sean Mullan
On Tue, 7 Mar 2023 21:19:37 GMT, Rajan Halade wrote: > This fix removes the check for 90 days expiry. But the test will continue to > fail if the expired certificate is included in `cacerts` but no exception is > granted. > > Fix also includes minor code cleanup. test/jdk/sun/security/lib/cac

Re: RFR: 8303832: Use enhanced-for cycle instead of Enumeration in JceKeyStore

2023-03-08 Thread Xue-Lei Andrew Fan
On Wed, 8 Mar 2023 19:10:11 GMT, Andrey Turbanov wrote: > java.util.Enumeration is a legacy interface from java 1.0. > There is couple of places with cycles which use it to iterate over > collections. We can replace this manual cycle with enchanced-for, which is > shorter and easier to read. I

Re: RFR: 8303832: Use enhanced-for cycle instead of Enumeration in JceKeyStore

2023-03-08 Thread Michael StJohns
On 3/8/2023 2:19 PM, Andrey Turbanov wrote: java.util.Enumeration is a legacy interface from java 1.0. There is couple of places with cycles which use it to iterate over collections. We can replace this manual cycle with enchanced-for, which is shorter and easier to read. - Commit

Re: RFR: 8303809: Dispose context in SPNEGO NegotiatorImpl

2023-03-08 Thread Weijun Wang
On Wed, 8 Mar 2023 09:05:19 GMT, Alexey Bakhtin wrote: > This patch fixes a possible native memory leak in case of a custom native GSS > provider. > The actual leak was reported in production. > > sun/security/jgss, sun/security/krb5, sun/net/www/protocol/http jtreg tests > are passed Maybe i

RFR: 8303832: Use enhanced-for cycle instead of Enumeration in JceKeyStore

2023-03-08 Thread Andrey Turbanov
java.util.Enumeration is a legacy interface from java 1.0. There is couple of places with cycles which use it to iterate over collections. We can replace this manual cycle with enchanced-for, which is shorter and easier to read. - Commit messages: - [PATCH] Use enhanced-for cycle i

Re: RFR: 8282201: Consider removal of expiry check in VerifyCACerts.java test

2023-03-08 Thread Xue-Lei Andrew Fan
On Tue, 7 Mar 2023 21:19:37 GMT, Rajan Halade wrote: > This fix removes the check for 90 days expiry. But the test will continue to > fail if the expired certificate is included in `cacerts` but no exception is > granted. > > Fix also includes minor code cleanup. Marked as reviewed by xuelei

Re: RFR: 8282201: Consider removal of expiry check in VerifyCACerts.java test

2023-03-08 Thread Rajan Halade
On Tue, 7 Mar 2023 21:19:37 GMT, Rajan Halade wrote: > This fix removes the check for 90 days expiry. But the test will continue to > fail if the expired certificate is included in `cacerts` but no exception is > granted. > > Fix also includes minor code cleanup. > The fix removes the early

Re: RFR: 8303809: Dispose context in SPNEGO NegotiatorImpl

2023-03-08 Thread Daniel Jeliński
On Wed, 8 Mar 2023 09:05:19 GMT, Alexey Bakhtin wrote: > This patch fixes a possible native memory leak in case of a custom native GSS > provider. > The actual leak was reported in production. > > sun/security/jgss, sun/security/krb5, sun/net/www/protocol/http jtreg tests > are passed ah, you

Re: RFR: 8303809: Dispose context in SPNEGO NegotiatorImpl

2023-03-08 Thread Weijun Wang
On Wed, 8 Mar 2023 15:15:52 GMT, Daniel Jeliński wrote: >> This patch fixes a possible native memory leak in case of a custom native >> GSS provider. >> The actual leak was reported in production. >> >> sun/security/jgss, sun/security/krb5, sun/net/www/protocol/http jtreg tests >> are passed >

Re: RFR: 8303764: sunmscapi.dll cannot compile under permissive-

2023-03-08 Thread Julian Waters
On Wed, 8 Mar 2023 14:46:55 GMT, Daniel Jeliński wrote: > Hi @TheShermanTanker What complier are you using? What command line? > > `security.cpp` compiles just fine with `-permissive-` here, both debug and > release. I'm using this compiler: > > ``` > >cl.exe > Microsoft (R) C/C++ Optimizing C

Re: RFR: 8303809: Dispose context in SPNEGO NegotiatorImpl

2023-03-08 Thread Daniel Jeliński
On Wed, 8 Mar 2023 09:05:19 GMT, Alexey Bakhtin wrote: > This patch fixes a possible native memory leak in case of a custom native GSS > provider. > The actual leak was reported in production. > > sun/security/jgss, sun/security/krb5, sun/net/www/protocol/http jtreg tests > are passed I'm not

Re: RFR: 8303764: sunmscapi.dll cannot compile under permissive-

2023-03-08 Thread Daniel Jeliński
On Wed, 8 Mar 2023 14:06:13 GMT, Julian Waters wrote: >> security.cpp contains a few invalid implicit conversions between pointer >> types that will not fly when the permissive- compiler option is active. >> Given that permissive- will become the Visual C++ compiler's default mode of >> operat

Re: RFR: 8303764: sunmscapi.dll cannot compile under permissive-

2023-03-08 Thread Weijun Wang
The message from this sender included one or more files which could not be scanned for virus detection; do not open these files unless you are certain of the sender's intent. -- On Tue, 7 Mar 2023 17:27:56 GMT, Julian Waters wrot

Re: RFR: 8303764: sunmscapi.dll cannot compile under permissive-

2023-03-08 Thread Julian Waters
On Tue, 7 Mar 2023 17:27:56 GMT, Julian Waters wrote: > security.cpp contains a few invalid implicit conversions between pointer > types that will not fly when the permissive- compiler option is active. Given > that permissive- will become the Visual C++ compiler's default mode of > operation

Re: RFR: 8303809: Dispose context in SPNEGO NegotiatorImpl

2023-03-08 Thread Daniel Fuchs
On Wed, 8 Mar 2023 09:05:19 GMT, Alexey Bakhtin wrote: > This patch fixes a possible native memory leak in case of a custom native GSS > provider. > The actual leak was reported in production. > > sun/security/jgss, sun/security/krb5, sun/net/www/protocol/http jtreg tests > are passed @wangwe

Re: RFR: 8303764: sunmscapi.dll cannot compile under permissive-

2023-03-08 Thread Weijun Wang
On Tue, 7 Mar 2023 17:27:56 GMT, Julian Waters wrote: > security.cpp contains a few invalid implicit conversions between pointer > types that will not fly when the permissive- compiler option is active. Given > that permissive- will become the Visual C++ compiler's default mode of > operation

RFR: 8303809: Dispose context in SPNEGO NegotiatorImpl

2023-03-08 Thread Alexey Bakhtin
This patch fixes a possible native memory leak in case of a custom native GSS provider. The actual leak was reported in production. sun/security/jgss, sun/security/krb5, sun/net/www/protocol/http jtreg tests are passed - Commit messages: - 8303809: Dispose context in SPNEGO Negoti

Re: RFR: JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs CFRelease call in early potential CHECK_NULL return [v3]

2023-03-08 Thread Matthias Baesken
> Similar to what had been done in > [JDK-8303354](https://bugs.openjdk.org/browse/JDK-8303354) , we miss > CFRelease on the variable identitySearch in early CHECK_NULL returns > potentially done in the function addIdentitiesToKeystore. Matthias Baesken has updated the pull request incrementall

Re: RFR: 8303764: sunmscapi.dll cannot compile under permissive-

2023-03-08 Thread Julian Waters
On Tue, 7 Mar 2023 17:27:56 GMT, Julian Waters wrote: > security.cpp contains a few invalid implicit conversions between pointer > types that will not fly when the permissive- compiler option is active. Given > that permissive- will become the Visual C++ compiler's default mode of > operation