32 Commits

Author SHA1 Message Date
Simon Frankenberger
26ad967522 community/openjdk7: security upgrade to 7.201.2.6.16
- CVE-2018-3136
- CVE-2018-3139
- CVE-2018-3149
- CVE-2018-3169
- CVE-2018-3180
- CVE-2018-3214
- CVE-2018-13785

This commit upgrades OpenJDK7 to the latest release, 7u201. This
contains many security fixes, additional information can be found at: http://blog.fuseyism.com/index.php/2019/01/03/security-icedtea-2-6-16-for-openjdk-7-released/
2019-01-30 16:38:47 +02:00
Timo Teräs
17b1863302 community/openjdk7: fix hotspot build with gcc8
There is at least one (possibly more) places where signed overflow
needs to work or things break. It is formally UB, but fortunately
there is compiler flag to not break things when possible. Fixes
build on x86_64.
2018-12-20 06:59:49 +00:00
Natanael Copa
e537e93b64 community/openjdk7: modernize
use bash for icedtea-bootstrap
2018-11-30 17:42:27 +00:00
Leonardo Arena
27ad685bf0 community/openjdk7: rebuild against nss-3.38 2018-07-11 10:34:36 +00:00
J0WI
0704a9e5ac community/openjdk7: upgrade to 7.181.2.6.14 2018-06-14 12:19:14 +00:00
Jakub Jirutka
63f5e7d295 [various]: unify names of licenses according to SPDX
This commit updates $license variable in all APKBUILDs to comply with
short names specified by SPDX version 3.0 [1] where possible. It was
done using find-and-replace method on substrings inside $license
variables.

Only license names were updated, not "expressions" specifying relation
between the licenses (e.g. "X and Y", "X or Y", "X and (Y or Z)") or
exceptions (e.g. "X with exceptions").

Many licenses have a version or multiple variants, e.g. MPL-2.0,
BSD-2-Clause, BSD-3-Clause. However, $license in many aports do not
contain license version or variant. Since there's no way how to infer
this information just from abuild, it were left without the variant
suffix or version, i.e. non SPDX compliant.

GNU licenses (AGPL, GFDL, GPL, LGPL) are especially complicated. They
exist in two variants: -only (formerly e.g. GPL-2.0) and -or-later
(formerly e.g. GPL-2.0+). We did not systematically noted distinguish
between these variants, so GPL-2.0, GPL2, GPLv2 etc. may mean
GPL-2.0-only or GPL-2.0-or-later. Thus GNU licenses without "+" (e.g.
GPL2+) were left without the variant suffix, i.e. non SPDX compliant.

Note: This commit just fixes format of the license names, no
verification has been done if the specified license information is
actually correct!

[1]: https://spdx.org/licenses/
2017-12-30 21:05:50 +01:00
Natanael Copa
58b39d2ca4 community/openjdk7: upgrade to 7.151.2.6.11 2017-11-21 10:47:40 +00:00
Francesco Colista
a92f7bcc48 community/openjdk7: bump pkgrel due to krb5 upgrade 2017-09-14 09:02:26 +00:00
Gustavo Romero
8fd426c50a community/openjdk7: fix build on PPC when musl is used instead of glibc
Musl on Power does not define regs member as a pt_regs pointer type,
hence it's necessary to use member gp_regs instead.
2017-03-30 12:07:53 +00:00
Natanael Copa
a07fa9859c community/openjdk7: build fix
cpio moved form /bin/cpio to /usr/bin/cpio. The makefiles has the former
hardcoded.
2017-03-24 10:53:34 +00:00
Natanael Copa
37fb155af3 community/openjdk7: upgrade icedtea to 2.6.9 2017-03-24 11:20:01 +01:00
William Pitcock
e5b20fcf9e community/openjdk7: bring in nss-static like openjdk8 2017-03-23 16:16:57 +00:00
Breno Leitao
fe8377461e community/openjdk7: Add entry for ppc64le
Use proper _jarch for ppc64le platform, otherwise it will fails
since _jarch is NULL.
2017-03-23 14:35:17 +00:00
William Pitcock
9f68638201 Revert "community/openjdk7: fix -lfreebl nonsense"
This reverts commit 4aca47cd73b84dce2c878e3fb057ee1c2db5990f.
2017-03-23 05:49:28 +00:00
William Pitcock
4aca47cd73 community/openjdk7: fix -lfreebl nonsense 2017-03-23 05:20:38 +00:00
William Pitcock
5cf371ba43 community: trigger rebuilds against nss-dev 2017-03-23 04:03:50 +00:00
Tuan M. Hoang
d56d281d51 community/openjdk7: add s390x support 2017-02-23 06:24:49 +00:00
Timo Teräs
71af3ec85b community/openjdk7: security upgrade to icedtea 2.6.8
S8151921: Improved page resolution
S8155968: Update command line options
S8155973, CVE-2016-5542: Tighten jar checks
S8157176: Improved classfile parsing
S8157739, CVE-2016-5554: Classloader Consistency Checking
S8157749: Improve handling of DNS error replies
S8157753: Audio replay enhancement
S8157759: LCMS Transform Sampling Enhancement
S8157764: Better handling of interpolation plugins
S8158302: Handle contextual glyph substitutions
S8158993, CVE-2016-5568: Service Menu services
S8159495: Fix index offsets
S8159503: Amend Annotation Actions
S8159511: Stack map validation
S8159515: Improve indy validation
S8159519, CVE-2016-5573: Reformat JDWP messages
S8160090: Better signature handling in pack200
S8160094: Improve pack200 layout
S8160098: Clean up color profiles
S8160591, CVE-2016-5582: Improve internal array handling
S8160838, CVE-2016-5597: Better HTTP service
PR3207, RH1367357: lcms2: Out-of-bounds read in Type_MLU_Read()
2016-11-17 08:36:08 +00:00
Timo Teräs
a2e061d509 community/[various]: dont set arch in split function 2016-11-02 11:51:56 +02:00
Ed Robinson
170b830d22 community/openjdk7: fix cacerts
This is just a backport of 94969c8a556eedeeafb78a33752ab6b6e6f7f892 from openjdk8.
2016-09-22 23:56:28 +02:00
Jakub Jirutka
88031301dd community/openjdk7: disable arm32-jit
Build on armhf fails:
```
gcc -DLINUX -D_GNU_SOURCE -DCC_INTERP -DZERO -DARM -DZERO_LIBARCH=\"arm\" -DPRODUCT -I. -I/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/share/vm/prims -I/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/share/vm -I/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/share/vm/precompiled -I/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/cpu/zero/vm -I/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/os_cpu/linux_zero/vm -I/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/os/linux/vm -I/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/os/posix/vm -I../generated -DHOTSPOT_RELEASE_VERSION="\"24.111-b01\"" -DHOTSPOT_BUILD_TARGET="\"product\"" -DHOTSPOT_BUILD_USER="\"buildozer\"" -DHOTSPOT_LIB_ARCH=\"arm\" -DHOTSPOT_VM_DISTRO="\"OpenJDK\"" -DDERIVATIVE_ID="\"IcedTea 2.6.7\"" -DDISTRIBUTION_ID="\"Custom build (Fri Sep  2 06:53:44 GMT 2016)\"" -c -Os -fomit-frame-pointer -pipe -fPIC -DTARGET_OS_FAMILY_linux -DTARGET_ARCH_zero -DTARGET_ARCH_MODEL_zero -DTARGET_OS_ARCH_linux_zero -DTARGET_OS_ARCH_MODEL_linux_zero -DTARGET_COMPILER_gcc -I/usr/lib/libffi-3.2.1/include   -std=gnu++98  -fno-rtti -fno-exceptions -D_REENTRANT -fcheck-new -fvisibility=hidden -fno-delete-null-pointer-checks -fno-lifetime-dse -D_LITTLE_ENDIAN -pipe -g -DTARGET_OS_FAMILY_linux -DTARGET_ARCH_zero -DTARGET_ARCH_MODEL_zero -DTARGET_OS_ARCH_linux_zero -DTARGET_OS_ARCH_MODEL_linux_zero -DTARGET_COMPILER_gcc -I/usr/lib/libffi-3.2.1/include   -std=gnu++98 -fpic -fno-rtti -fno-exceptions -D_REENTRANT -fcheck-new -fvisibility=hidden -fno-delete-null-pointer-checks -fno-lifetime-dse -D_LITTLE_ENDIAN -pipe -g -O3 -fno-strict-aliasing -DHOTSPOT_ASM -DVM_LITTLE_ENDIAN -DINCLUDE_TRACE=1  -Wpointer-arith -Wsign-compare   -Os -fomit-frame-pointer -pipe -fPIC -std=gnu++98 -Wno-error -fno-delete-null-pointer-checks -fno-lifetime-dse -o cppInterpreter_arm.o /home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/cpu/zero/vm/cppInterpreter_arm.S
/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/cpu/zero/vm/arm32JIT.cpp: In function 'void Thumb2_codegen(Thumb2_Info*, unsigned int)':
/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/cpu/zero/vm/arm32JIT.cpp:5720:7: error: duplicate case value
       case opc_fast_aldc_w:
       ^~~~
/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/cpu/zero/vm/arm32JIT.cpp:5719:7: error: previously used here
       case opc_return_register_finalizer:
       ^~~~
/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/cpu/zero/vm/arm32JIT.cpp:6985:7: error: duplicate case value
       case opc_return_register_finalizer: {
       ^~~~
/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/cpu/zero/vm/arm32JIT.cpp:6877:5: error: previously used here
     case opc_fast_aldc_w:
     ^~~~
/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/cpu/zero/vm/arm32JIT.cpp: In function 'void Thumb2_Initialize()':
/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/src/cpu/zero/vm/arm32JIT.cpp:8188:34: error: overloaded function with no contextual type information
   mov_imm(&codebuf, ARM_IP, (u32)fmod);
                                  ^~~~
make[7]: *** [/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.7/openjdk-boot/hotspot/make/linux/makefiles/rules.make:150: arm32JIT.o] Error 1
```

http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942
2016-09-02 11:56:42 +02:00
Carlo Landmeter
ec93ed40c0 community/openjdk7: set correct _jarch on aarch64 2016-08-25 11:24:26 +00:00
Carlo Landmeter
c733852c04 community/openjdk7: build fix aarch64 2016-08-25 09:42:42 +00:00
Jakub Jirutka
a364914bfe community/openjdk7: fix swapped CFLAGS and CXXFLAGS 2016-08-24 13:53:54 +02:00
Jakub Jirutka
9040d888ee community/openjdk7: upgrade to 7.111.2.6.7 2016-08-23 18:34:45 +02:00
Jakub Jirutka
9331db021b community/openjdk7: fix build on latest busybox
There's some problem with busybox 1.25.0-r5, the build fails with error:

```
bootstrap/jdk1.6.0/bin/javac -J-XX:ThreadStackSize=1664 -J-XX:-PrintVMOptions -J-XX:+UnlockDiagnosticVMOptions -J-XX:-LogVMOutput -J-Xmx512m -J-Xms512m -J-XX:PermSize=32m -J-XX:MaxPermSize=160m -g -source 7 -target 7 -encoding ascii -Xbootclasspath:/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.3/openjdk.build-boot/classes -sourcepath /home/buildozer/aports/community/openjdk7/src/icedtea-2.6.3/generated.build:../../../src/solaris/classes:../../../src/share/classes -d /home/buildozer/aports/community/openjdk7/src/icedtea-2.6.3/openjdk.build-boot/classes @/home/buildozer/aports/community/openjdk7/src/icedtea-2.6.3/openjdk.build-boot/tmp/sun/sun.awt.X11/xawt/.classes.list.filtered
Annotation processing got disabled, since it requires a 1.6 compliant JVM
----------
1. ERROR in /home/buildozer/aports/community/openjdk7/src/icedtea-2.6.3/openjdk-boot/jdk/src/solaris/classes/sun/awt/X11/XWarningWindow.java (at line 64)
    icons[0][0] = new IconInfo(sun.awt.AWTIcon32_security_icon_bw16_png.security_icon_bw16_png);
                               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
sun.awt.AWTIcon32_security_icon_bw16_png cannot be resolved to a variable
----------
2. ERROR in /home/buildozer/aports/community/openjdk7/src/icedtea-2.6.3/openjdk-boot/jdk/src/solaris/classes/sun/awt/X11/XWarningWindow.java (at line 65)
    icons[0][1] = new IconInfo(sun.awt.AWTIcon32_security_icon_interim16_png.security_icon_interim16_png);
                               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
sun.awt.AWTIcon32_security_icon_interim16_png cannot be resolved to a variable
----------
...
32. ERROR in /home/buildozer/aports/community/openjdk7/src/icedtea-2.6.3/openjdk-boot/jdk/src/solaris/classes/sun/awt/X11/XWindowPeer.java (at line 438)
    defaultIconInfo.add(new IconInfo(sun.awt.AWTIcon64_java_icon48_png.java_icon48_png));
                                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
sun.awt.AWTIcon64_java_icon48_png cannot be resolved to a variable
----------
```

This means that files AWTIcon*.java are missing, they haven't been
generated for some unknown reason.

I verified that the build works on edge with busybox 1.24.2-r11 (from v3.4).

The fix involves installing coreutils, so it's more a workaround, but
IcedTea's build system is very complex, so finding the root cause would be
very difficult and time consuming.

Note: Installing just GNU sed didn't help.
2016-08-23 18:34:27 +02:00
Jakub Jirutka
d35207be0a community/openjdk7: fix build on gcc6 2016-08-22 18:57:32 +02:00
Jakub Jirutka
3890b6f826 community/openjdk7: fix messed indentation, global vars and modernize it 2016-05-02 18:42:44 +00:00
Muh Muhten
1301e6ae13 update all source= lines to use :: instead of saveas- syntax 2016-03-10 10:03:19 +00:00
Natanael Copa
18bef4c525 main/openjdk7: parallel build fix
bootstrapping icedtea seems to have parallel issues.
2015-12-10 15:02:22 +00:00
Natanael Copa
c883ba8117 community/openjdk7: fix duplicate provides
fix duplicate 'provides = so:openjdk7:libjvm.so=0' due to abuild
recently got support for sonameprefix.
2015-12-10 12:33:22 +00:00
Natanael Copa
be89decc67 community/openjdk7: move from main and update icedtea to 2.6.3 2015-12-02 12:09:11 +00:00