United StatesChange Country, Oracle Worldwide Web Sites Communities I am a... I want to...
Bug ID: 7160619 enhance the list of secure jnlp properties to support useLegacyMergeSort
7160619 : enhance the list of secure jnlp properties to support useLegacyMergeSort

Details
Type:
Enhancement
Submit Date:
2012-04-11
Status:
Resolved
Updated Date:
2013-04-04
Project Name:
JDK
Resolved Date:
2012-07-04
Component:
deploy
OS:
windows_vista,windows_xp
Sub-Component:
webstart
CPU:
x86
Priority:
P4
Resolution:
Fixed
Affected Versions:
7,7u3
Fixed Versions:
8

Related Reports
Backport:
JDK-2226471 - enhance the list of secure jnlp properties to support useLegacyMergeSort
Duplicate:
JDK-7171199 - Please, add property sun.locale.formatasdefault to the list of secure properties
Relates:
JDK-7132484 - system property "java.util.Arrays.useLegacyMergeSort" does not work in jnlp
Relates:
JDK-7024585 - enhance the list of secure jnlp properties to support more garbage collectors
Relates:
JDK-8011566 - Some properties in JNLP file cause internet explorer hangs

Sub Tasks

Description
Please add the property java.util.Arrays.useLegacyMergeSort to the list 
of secure properties.
This would allow smoother migration from 6 to 7

http://www.oracle.com/technetwork/java/javase/compatibility-417013.html

Area: API: Utilities
Synopsis: Updated sort behavior for Arrays and Collections may throw an IllegalArgumentException
Description: The sorting algorithm used by java.util.Arrays.sort and (indirectly) by java.util.Collections.sort has been replaced. The new sort implementation may throw an IllegalArgumentException if it detects a Comparable that violates the Comparable contract. The previous implementation silently ignored such a situation.
If the previous behavior is desired, you can use the new system property, java.util.Arrays.useLegacyMergeSort, to restore previous mergesort behavior.
Nature of Incompatibility: behavioral
RFE: 6804124

Comments
EVALUATION

The following property won't be included:
 - sun.security.ssl.allowUnsafeRenegotiation  (security vulnerability)
2012-06-20 
EVALUATION

There are a number of other properties that revert bevavior to match a previous version of Java(6 and 7). Some of these properties have no effect on RIA's since they are not part of the ist of secure properties. Adding all these known properties to this CR so they are all in one place and will be addressed together

This is the complete list:

java.net.preferIPv4Stack	
java.util.Arrays.useLegacyMergeSort	
sun.locale.formatasdefault	
sun.awt.enableExtraMouseButtons	
com.sun.management.jmxremote.local.only	
sun.nio.ch.bugLevel	
sun.nio.ch.disableSystemWideOverlappingFileLockCheck	

removed - sun.security.ssl.allowUnsafeRenegotiation	


Reference http://ccc.us.oracle.com/7160619
2012-06-19


Hardware and Software, Engineered to Work Together