From nobody Mon Feb 17 11:36:30 2025 X-Original-To: java@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4YxLG72ttdz5nVwV for ; Mon, 17 Feb 2025 11:36:31 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4YxLG6680yz3pPZ for ; Mon, 17 Feb 2025 11:36:30 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1739792190; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=SymVK6cDqOwVrzTGjKbN31/37yae2iYHOU9K5O1ou10=; b=TiumXQMlaKjgxKRN0rLrMWliOseXQgEeRLlFzclKzejRJDwvXldhdaM3Eg07bg1AM/169w sPlw7GjitzNhOCavih7Ue4GJvDhp44w6shYbVekU9S07XQuKKI9yQuylruvpCK+KUxHzih 4NQZr8LNEbJA5CpHDX0/78eyLO4BoxdCGWpXJyabkh5uKjz6w40C8aQkiZQQSZ3qbTRMOs 4IlD0z3Ap64HdkuxtvkoxgYTKhTajW0dwHLInnr0q4s5Oa2PSkmzZQoWO0/TtbYBvAAR6R DrIHxDDJFzMhNej+sX4yCSYydkerPTHUoul8QIDgtKTOKvFoFadJRLq5IwbRfA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1739792190; a=rsa-sha256; cv=none; b=kU3CfvWNl09W8fJZE+J6pzDFmVmAr82ze5Ayqwjogh57eptjfviQulhlO8VLYYUfozbO9n xGTj+VjypbEnkw/eWf/43ZBKiiE6ZhRz+OlwgJ6K3DGoGfhgxB8wzLjtiKsBlqd2Sdom/2 /VZ0e5t9zR6lFmH+k5EBDdi9Jg8Jtutd7WtLSkM6UzKes+h/i2Vi4lyxIBUwFsVxKoTaHf Jd1omy696SnGEx3cjYOiZWWfpTf51dxszxz4UprzCqCtwtdAyKWEvZfbID8OBiM9+30UsU X/6u+Myev/Di8ge21uFAcPpfxxiwYtAKCWANreAJ54iSvIjV23clWmYCYAXnXA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1739792190; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=SymVK6cDqOwVrzTGjKbN31/37yae2iYHOU9K5O1ou10=; b=aETLuDsWyUxlA6kbhqIkynHl3X3bdpFH/0mGp9sHRH/opq77de6z4VEICoOlps51F0Km1z D/etDfikpueOk330d3KZf9kfpaxgXxmrouzcU7zxOmdOja1cxotEwf6J2iRNdohXTsFl+c bYEENTNoUBPp5IL/jiXo5MPxIVYDgTOe0Xvvmd3ElPsLMx4WwVzjeZY8KFnt1RKNQHR4ff L7AqOqCzpdTnzKESO2Xmdpbael3rww/vOH+Q5a106jfJsExvEBZ3zgbXWgeVNJcrQZ53gi lL5zzj5a1IOYvB4UTxPXPhpufKF+bh2wrLlNsiMbEr7xvdpjFSAyfT1Gju6BCw== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4YxLG65HYszY1Q for ; Mon, 17 Feb 2025 11:36:30 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 51HBaUGs047257 for ; Mon, 17 Feb 2025 11:36:30 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 51HBaUgs047256 for java@FreeBSD.org; Mon, 17 Feb 2025 11:36:30 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: java@FreeBSD.org Subject: [Bug 284841] java/openjdk11: fix build without CUPS Date: Mon, 17 Feb 2025 11:36:30 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: haraldei-freebsdbugz@anduin.net X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: java@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? X-Bugzilla-Changed-Fields: cc Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Porting Java to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-java List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-java@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D284841 Harald Eilertsen changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |haraldei-freebsdbugz@anduin | |.net --- Comment #2 from Harald Eilertsen --- Thanks for reporting. This has already been fixed here: https://cgit.freebsd.org/ports/commit/?id=3Df3166252f22c393facfc5d9ca736dab= 1cb446c6a --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Mon Feb 17 14:34:07 2025 X-Original-To: java@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4YxQC51WMvz5njPN for ; Mon, 17 Feb 2025 14:34:09 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4YxQC50qwbz42ZC for ; Mon, 17 Feb 2025 14:34:09 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1739802849; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=Cen5J8B9X5LsvXqOwln+kngjnfmggRR7cEG3husCiq8=; b=gzMKiQLAFMNROwlWHaiwhZUWCcV3p61cK4sM7/V1wwwUpua+XklRjcr9OF/aSPLtkBHtoH jBNoJU8x7wyrpJ0rnzZVMqJGp9YUgLTQXGnH5f0IHgShpHiqc79Dind2dnta5zErugZ0sq skQ//E/BjGDK6y7AJBgKEe3FhWxG6MUFeVrIRgUCGhv3plK7so/UcovpPpJnQbMvne8KpO 9Rg8Xspm23pHmSnSv2vCrRKO7+T5zPHJyDKdodNHpr9jr+4OaRMg/BqWaxjjFHRQ8/vUP8 0lwMM7/6Z33EHdbM2RrhVheXCZGrGSW78TMPr3Wax1aZZRrsDY24ZBl6pLmCPQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1739802849; a=rsa-sha256; cv=none; b=ttTnLf+ZKV9aPJQNt0ZeDMRbYVmuLFfXbhlJN8LVq+ceOl80OTU4PXvEoD/gisVeOw3hfp 7Jk2vK7IihplnEyEaa/pI/5Bv9j7x59S0DzSSyMk3h32+d5pLWsfwy1oCpmKdbtaTRsnX1 4Nzfi5k9+ntV7fA9S0/AO8PY9a8am/SKTwj9cNl1EZM3cSB2nD7KFIU43b3XbSdn4vxWgf QzPT5kIdhPtXLSZHlUxhkz+xpStqs+1A5PYQxhNTfHfAsAozqd3x2Y5AciJ8GTajU0csh7 VHg9jIpA0Hx2Gihnul3x9Y1dueoMHgKu3myEKG2vSXGKZW63BrdCr4jVP3wfJg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1739802849; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=Cen5J8B9X5LsvXqOwln+kngjnfmggRR7cEG3husCiq8=; b=mvDXn7rmupAQN21QZxmzbWWAF07pVF6vEQhqfEFxa7jfe8rW99QfDlyLvfxSQGF9X6H+yQ oFixg1ebTanZG45Bdii8unXrefh3zTlyM5NRJEEl5I48+l9O/PlIoMsniJJkQwBPX2WazY SYuJ7tYSbirtU0NzT2h5S4T3za4NfXfqtxPTt2QZrQ1l8M3+RxEqxWPyfgamnDhZVCvewS nPB8YeR9xJgGIkDZddyKUxzNgp8v+UDM0dqj9SICIXTw9tHmCtGcIxgVuSa9736Nomd3C5 lQsXBgHB2mHBdGw6mLzL61F9S+fHA4oSSjAlNGtp8Q/RKDcrDderYYqrsTbUSQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4YxQC50MHlzdtP for ; Mon, 17 Feb 2025 14:34:09 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 51HEY8fQ005471 for ; Mon, 17 Feb 2025 14:34:08 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 51HEY8Wj005469 for java@FreeBSD.org; Mon, 17 Feb 2025 14:34:08 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: java@FreeBSD.org Subject: [Bug 284841] java/openjdk11: fix build without CUPS Date: Mon, 17 Feb 2025 14:34:07 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: zarychtam@plan-b.pwste.edu.pl X-Bugzilla-Status: Closed X-Bugzilla-Resolution: FIXED X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: java@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? X-Bugzilla-Changed-Fields: resolution bug_status Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Porting Java to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-java List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-java@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D284841 Marek Zarychta changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|New |Closed --- Comment #3 from Marek Zarychta --- Fixed in https://cgit.freebsd.org/ports/commit/?id=3Df3166252f22c393facfc5d9ca736dab= 1cb446c6a --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Tue Feb 18 18:01:58 2025 X-Original-To: java@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Yy6mQ5cyfz5nxyK for ; Tue, 18 Feb 2025 18:01:58 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Yy6mQ1BZ5z3nkw for ; Tue, 18 Feb 2025 18:01:58 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1739901718; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=1SXFvvRdvqsfEtGOQY2+Nx2et/916muUC6dPkOmIwDQ=; b=ZrIzLihplu2guq+2Qf9Hhm0mY0q4oVaTGd2ButMF19vBeTL9Jq+X0TMcCiFF8fizx4MEzh n4bvsx9a7aL7QoLo0VvAI2R9qEckkVaZUNSZicbCDU50+n708/rol+T3kIhbCI6gXhyUZd Nlnv04dw2GvJ/NQNpXDpT770HTXs1CsnGn/mQGZF+GZ9VnhDhrEPfVLKJZzXeqkEagD/HJ 281pe2OeBxDDpo4sTS+1pZY2PQnWXnf/Z6nqV3d9/p7P5bt1o5YoptkwDI+LKS9ftR3Gde FwHe2m5twreBiuZAcl3BWxR+Twd9bPtjRAKJF7Gxmut66CIVtjB7dlmm1lOb9Q== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1739901718; a=rsa-sha256; cv=none; b=erSTioc8NR0THhXPvs/2oAGK8akErIJxSHAGWBCesLERiLhX4Wt3xthiVCYkVjFV6khC5g hucn8jtNPdMGD6d2BOiQ/pdL0upYIGGrHFKUA/qkrdfkZqMthsh3+MIc/YkBiTjOv0T3r4 4UrJgCTKtInOYXwkE7SdGGOuJayqsMybk0s0eA5+f9QwW90Yl8k509XEz3Nk9jdsnVojrl LJbEz7c0y3s7XVL+RN38fuW8+/mwdHVzJdc9Z3JHVwNlKSoTHwivysAP/ctg9VLVjle3UN EiKEH34A4NyMJg4mxaooV59X+1OkWFpnkxkaQsyi8Yng4dARjdSI7OCMdvaRFw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1739901718; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=1SXFvvRdvqsfEtGOQY2+Nx2et/916muUC6dPkOmIwDQ=; b=lSNZVhEoimfimSVyKRTy0oIayjJ+AYRDb63NJuxmeDUk0caFsAF2AGe+RX3kmzBiA2qJbF lzDCSTVUanPJoos72hNhxXHryIynh1ZPWjgLqVOVH1avEeFLn7+uoUTbFy+TNlAiLY0/Qd tS46e4yTCG1PnHR9DgA5DUh4H85M+Mgf1WD5rOAPx5tr+h5T8c6bXHoJBJBSQ1x35IoER8 g9W1sWUyVZwjQj9TlyoX2L7ObmU7PDuKuAmdBJ6P3mSKl5sYZO7lIel6m5MCb36qf7SeI1 QV+MAIfIzUmTPrRlhPQlnIpQNjIbTnax7GJXhGqdJX2JIYrrUGDpdJU4frvuww== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4Yy6mQ0Z6bzVfR for ; Tue, 18 Feb 2025 18:01:58 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 51II1vrp054632 for ; Tue, 18 Feb 2025 18:01:57 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 51II1v7T054631 for java@FreeBSD.org; Tue, 18 Feb 2025 18:01:57 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: java@FreeBSD.org Subject: [Bug 281382] java/openjdk21 segfaults with www/tomcat101 on aarch64 Date: Tue, 18 Feb 2025 18:01:58 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: michaelo@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: ports-bugs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: cc Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Porting Java to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-java List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-java@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D281382 Michael Osipov changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |michaelo@FreeBSD.org --- Comment #3 from Michael Osipov --- I don't understand this crash, there is no code in JVSC which calls: Stack: [0x00000000411a4000,0x00000000811a4000], sp=3D0x000000008119f9a0, = free space=3D1048558k Native frames: (J=3Dcompiled Java code, j=3Dinterpreted, Vv=3DVM code, C=3D= native code) J 994 c2 java.lang.StringBuilder.append(Ljava/lang/String;)Ljava/lang/StringBuilder; java.base@21.0.4 (8 bytes) @ 0x000000009b20293c [0x000000009b202900+0x000000000000003c] j sun.net.www.MimeEntry.setImageFileName(Ljava/lang/String;)V+71 java.base@21.0.4 j=20 sun.net.www.MimeTable.fill(Lsun/net/www/MimeEntry;Ljava/lang/String;Ljava/l= ang/String;)V+70 java.base@21.0.4 j sun.net.www.MimeTable.parse(Ljava/lang/String;Lsun/net/www/MimeEntry;)V+= 67 java.base@21.0.4 j sun.net.www.MimeTable.parse(Ljava/lang/String;Ljava/lang/String;)V+40 java.base@21.0.4 j sun.net.www.MimeTable.parse(Ljava/util/Properties;)V+63 java.base@21.0.4 j sun.net.www.MimeTable.load()V+193 java.base@21.0.4 j sun.net.www.MimeTable.()V+27 java.base@21.0.4 j sun.net.www.MimeTable$DefaultInstanceHolder$1.run()Lsun/net/www/MimeTabl= e;+4 java.base@21.0.4 j sun.net.www.MimeTable$DefaultInstanceHolder$1.run()Ljava/lang/Object;+1 java.base@21.0.4 J 1048 c1 java.security.AccessController.doPrivileged(Ljava/security/PrivilegedAction= ;)Ljava/lang/Object; java.base@21.0.4 (9 bytes) @ 0x00000000938a8134 [0x00000000938a7f80+0x00000000000001b4] j=20 sun.net.www.MimeTable$DefaultInstanceHolder.getDefaultInstance()Lsun/net/ww= w/MimeTable;+7 java.base@21.0.4 j sun.net.www.MimeTable$DefaultInstanceHolder.()V+0 java.base@21.0= .4 Can someone load the dump into LLDB and show the backtrace? I can directly commit a fix into commons-daemon if we can work out a patch. I don't have a aarch64 to work on this myself. --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Wed Feb 19 10:40:10 2025 X-Original-To: freebsd-java@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4YyXwV6BQgz5p9ZQ for ; Wed, 19 Feb 2025 10:40:26 +0000 (UTC) (envelope-from haraldei@anduin.net) Received: from mail.anduin.net (mail.anduin.net [185.42.170.45]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4YyXwR42Ytz3klB for ; Wed, 19 Feb 2025 10:40:23 +0000 (UTC) (envelope-from haraldei@anduin.net) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=anduin.net header.s=dkim2021 header.b="Msz/CVwq"; dmarc=pass (policy=reject) header.from=anduin.net; spf=pass (mx1.freebsd.org: domain of haraldei@anduin.net designates 185.42.170.45 as permitted sender) smtp.mailfrom=haraldei@anduin.net DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=anduin.net; s=dkim2021; h=Content-Type:MIME-Version:Message-ID:Subject:To:From:Date: Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=ILJRBvN8SaoopcOUW6NeNq8x/liBNKueyU3ckdsSRhg=; t=1739961623; x=1740825623; b=Msz/CVwqMaaNvK3P+ulsJpUst2+GoCuwUjbd/8L4nU+MQuI/9Sncc6fs4oApGjBUTLOb63WF66J k5KZh1TKMWqMvcqgRCQ/HRxUp7xux2xyafAGnZfQIrf91mp47rKggFl7fouXhU3QdCf5NlwxZfszz vyF9RBtXCc1uBnVdXSOenb/3IKTlsJWwMdW6X8iZnUOJuZS58+IP49h1YMiUBaiGKv9et0ne3P/7t mRaBLyX2gULMywJx9/7kf9OnAytATnjOxatRB0iQzPdE2U26n3To1jXXcH9cWxq+qzCAd6gwpXjsj KJt/DQXSDvzgKyihnX8Q0Z5oeRr5GTZ84JOQ==; Received: by mail.anduin.net with esmtpsa (TLS1.3:TLS_AES_256_GCM_SHA384:256) (Exim 4.97.1 (FreeBSD)) (envelope-from ) id 1tkhV5-00000000PqP-1121 for freebsd-java@freebsd.org; Wed, 19 Feb 2025 10:40:21 +0000 Date: Wed, 19 Feb 2025 11:40:10 +0100 From: Harald Eilertsen To: FreeBSD Java mailing list Subject: IPv6 in Java on FreeBSD Message-ID: Mail-Followup-To: FreeBSD Java mailing list List-Id: Porting Java to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-java List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-java@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-SA-Authenticated: Yes X-Spam-Score: -1.9 X-Spam-Level: - X-Spam-Report: host: mail.modirum.com | contact: hostmaster@modirum.com | scores: BAYES_00=-1.9,NO_RELAYS=-0.001 | autolearn=no autolearn_force=no, score=0 X-Spamd-Result: default: False [-4.50 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; RBL_SENDERSCORE_REPUT_9(-1.00)[185.42.170.45:from]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-1.00)[-0.998]; MID_RHS_NOT_FQDN(0.50)[]; DMARC_POLICY_ALLOW(-0.50)[anduin.net,reject]; R_DKIM_ALLOW(-0.20)[anduin.net:s=dkim2021]; R_SPF_ALLOW(-0.20)[+ip4:185.42.170.45/32]; MIME_GOOD(-0.10)[text/plain]; TO_DN_ALL(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_COUNT_ONE(0.00)[1]; RCPT_COUNT_ONE(0.00)[1]; MISSING_XM_UA(0.00)[]; FREEFALL_USER(0.00)[haraldei]; ASN(0.00)[asn:62248, ipnet:185.42.170.0/24, country:EE]; ARC_NA(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RCVD_TLS_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; MLMMJ_DEST(0.00)[freebsd-java@freebsd.org]; RCVD_VIA_SMTP_AUTH(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; DKIM_TRACE(0.00)[anduin.net:+] X-Rspamd-Queue-Id: 4YyXwR42Ytz3klB X-Spamd-Bar: ---- Hi, IPv6 support in Java on FreeBSD has been an issue for quite a while. I believe I have found the cause of that, and have created PRs both for the OpenJDK 23[1] and 22[2] ports. In addition this change is also included in the work I've done for the next version (24) and in the patchset I'm working on for the OpenJDK main branch for upstreaming. One question I have is, how far back does it make sense to port this change? Is it ok to patch the most recent JDK versions, or do we want to apply it all the way back to JDK 8 or 11? Also, will this consideration change if we move the default JDK installed to a newer version, say 21? Thanks in advance on any feedback you may have on this! Take care! Harald! [1]: https://github.com/battleblow/jdk23u/pull/5 [2]: https://github.com/battleblow/jdk22u/pull/1 From nobody Wed Feb 19 10:46:32 2025 X-Original-To: java@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4YyY3X4z6vz5pBNH for ; Wed, 19 Feb 2025 10:46:32 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4YyY3X46fGz3qyp for ; Wed, 19 Feb 2025 10:46:32 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1739961992; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=axfaWKuY3PN0gai3aQANFVpB1oBwBgOSg5/Vl8uQASg=; b=eOibov9YPmjfcfwjyuKdx0XI3x4BX4mDSmnIcKEs9A1eBMLlSyED/TV/kIFgbi/k/OyqnR 0AtARzXRkM9w9wEmTS+DYUD6Ob5pgCEZaI6aZNkyNKoZxwmRAhay1KYuLn66kmpBbn9wJ0 sAx4rj5AbFuo/Ij4yDkAofQEANRXh7i/JVTC7d1XfNK5VKOPGOTV17uIBCkB8u2LoPVksL 6Jk1BEmieo8whYVfckz4Kj+iHTww8r3LkuYr7kxwu3ql+4ABk3FCM5c0M4Am0AN1VT4UR9 U/P2gUU/nnOwpG+jWJuZ4n3iBjPRtpUHF1fsPyc4w0SQk0gAw+GxdbQqebd5kQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1739961992; a=rsa-sha256; cv=none; b=hw9LwOzTLAFgpYWl+9UVOFtc9bjuJnoTEbTfYJG2sd3vRIim2JYXtHK7AKf1JxDi7WHXrX AAqHSOt+kgRxPEQX39PTgqP8W3TuBReX8wXlyu8gSBIUUvAW92sSVjXsV2C32g3XzbH+LN bV9QXn2b3HIwpstzL1byA97e/GOU0X5D0mzt0yWxcKEGi7RmQ+2tw5JaggvhyxHuE/N6z8 hdeySwcmZDOGodgxdRPpTBj4SHZhf23LTCAzYAorThVRnVF2k+heq4R5smrbc5sYhyxZUZ ogaai6VWBZo0XCS2Pb/Sv9P0WX1gV6cRK9y06aacsdGIqsm01RcW2SxtnqTdJQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1739961992; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=axfaWKuY3PN0gai3aQANFVpB1oBwBgOSg5/Vl8uQASg=; b=Z7iRB/PNpYE/6LV2yiTYGVzH0VNpqvL9lDwUFRMHguNMIGwsfmdINB+g/1VoP0uu3ryWdt qmBmspWUO5UN3fX3IC3I5Jra3sgfKT4wMxrG3q8bCD9YnnIwO7sSl3iMH5/++25yHpHDTt VWOf2iyA+kvDVmC+LylQCyiX9yWz4Sl85O+6R8XY76FLJJ47VaxDFPiVs47gzqfGO1laZ4 NRu0qO21o+ObXHxVVz1D55FN3lRrU0kl2SiOrfSLJv4QQQCidhXHg8K1BoaUd4m9PjFQXD dDrM5o8Gy3tc5IQtTgHWzPvt2Q/W1NClQ5J/fLLh7kiBNl0IkqiUsLfi27kXpQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4YyY3X3Xr1z12nj for ; Wed, 19 Feb 2025 10:46:32 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 51JAkWR0065988 for ; Wed, 19 Feb 2025 10:46:32 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 51JAkWOV065987 for java@FreeBSD.org; Wed, 19 Feb 2025 10:46:32 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: java@FreeBSD.org Subject: [Bug 281382] java/openjdk21 segfaults with www/tomcat101 on aarch64 Date: Wed, 19 Feb 2025 10:46:32 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: haraldei-freebsdbugz@anduin.net X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: ports-bugs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: cc Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Porting Java to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-java List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-java@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D281382 Harald Eilertsen changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |haraldei-freebsdbugz@anduin | |.net --- Comment #4 from Harald Eilertsen --- (In reply to Michael Osipov from comment #3) > Can someone load the dump into LLDB and show the backtrace? (...) I don't= have a aarch64 to work on this myself. I just got one, so can try to have a look. Give me some time though, as I'm just setting it up now. (Unless someone else beats me to it, of course :) One question though, does this crash also happen on OpenJDK 22 or 23? --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Wed Feb 19 12:26:17 2025 X-Original-To: freebsd-java@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4YybH95978z5pJ9h for ; Wed, 19 Feb 2025 12:26:45 +0000 (UTC) (envelope-from rb@gid.co.uk) Received: from gid2.gid.co.uk (ns0.gid.co.uk [IPv6:2001:470:94de::240]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "gid2.gid.co.uk", Issuer "gid2.gid.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4YybH90v4Mz3mfC for ; Wed, 19 Feb 2025 12:26:44 +0000 (UTC) (envelope-from rb@gid.co.uk) Authentication-Results: mx1.freebsd.org; none Received: from mx0.gid.co.uk (mx0.gid.co.uk [194.32.164.250]) by gid2.gid.co.uk (8.15.2/8.15.2) with ESMTP id 51JCQXT6040355; Wed, 19 Feb 2025 12:26:33 GMT (envelope-from rb@gid.co.uk) Received: from smtpclient.apple (moriarty.gid.co.uk [194.32.164.17]) by mx0.gid.co.uk (8.14.2/8.14.2) with ESMTP id 51JCQR6r077942; Wed, 19 Feb 2025 12:26:28 GMT (envelope-from rb@gid.co.uk) Content-Type: text/plain; charset=utf-8 List-Id: Porting Java to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-java List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-java@FreeBSD.org Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3776.700.51.11.1\)) Subject: Re: IPv6 in Java on FreeBSD From: Bob Bishop In-Reply-To: Date: Wed, 19 Feb 2025 12:26:17 +0000 Cc: FreeBSD Java mailing list Content-Transfer-Encoding: quoted-printable Message-Id: References: To: Harald Eilertsen X-Mailer: Apple Mail (2.3776.700.51.11.1) X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:6939, ipnet:2001:470::/32, country:US] X-Rspamd-Queue-Id: 4YybH90v4Mz3mfC X-Spamd-Bar: ---- Hi, I would just point out that back in history Java used to want mapped = IPv4 (net.inet6.ip6.v6only=3D0) if IPv6 was enabled; most people don=E2=80= =99t want that which may be why IPv6 support hasn=E2=80=99t been = enabled. I have no idea if this is still the case. > On 19 Feb 2025, at 10:40, Harald Eilertsen = wrote: >=20 > Hi, >=20 > IPv6 support in Java on FreeBSD has been an issue for quite a while. I > believe I have found the cause of that, and have created PRs both for > the OpenJDK 23[1] and 22[2] ports. In addition this change is also > included in the work I've done for the next version (24) and in the > patchset I'm working on for the OpenJDK main branch for upstreaming. >=20 > One question I have is, how far back does it make sense to port this > change? Is it ok to patch the most recent JDK versions, or do we want = to > apply it all the way back to JDK 8 or 11? >=20 > Also, will this consideration change if we move the default JDK > installed to a newer version, say 21? >=20 > Thanks in advance on any feedback you may have on this! >=20 > Take care! > Harald! >=20 > [1]: https://github.com/battleblow/jdk23u/pull/5 > [2]: https://github.com/battleblow/jdk22u/pull/1 >=20 -- Bob Bishop rb@gid.co.uk From nobody Wed Feb 19 13:25:50 2025 X-Original-To: freebsd-java@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Yycbl0QNFz5pN0l for ; Wed, 19 Feb 2025 13:26:11 +0000 (UTC) (envelope-from haraldei@anduin.net) Received: from mail.anduin.net (mail.anduin.net [185.42.170.45]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4Yycbk5kxJz3MM7 for ; Wed, 19 Feb 2025 13:26:10 +0000 (UTC) (envelope-from haraldei@anduin.net) Authentication-Results: mx1.freebsd.org; none DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=anduin.net; s=dkim2021; h=In-Reply-To:Content-Transfer-Encoding:Content-Type:MIME-Version :References:Message-ID:Subject:Cc:To:From:Date:Sender:Reply-To:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=4ql9oPP7RLL/d6VSyoX4xQjApzaTDTHuFOegU1zftqo=; t=1739971570; x=1740835570; b=jVrbv9gpZrfOAQLjqKg3qmfA3qhSpcX0T2WuWUt0lTfFqZAAN96qwVPJU3fQZ0KqaqCPSqDkCBR 1LBsK7nwFFEkmWTRWgjm6vQAC7zCmWUdi6UAl4sX9qq93ptU8eGSCsYNfdP3ST8U0OAp8YsTA0P9c RTXP8WsN+74JNXZVnFPfPAHzh0gqxLbA5V1gF53Qmgky7eIffe8nJ2V3QSj7/F74SHBCFBlmvsdiS 4pegCp3jwci5gZemxoHt4Oun4yWfiIKbsQn/LuB2nxamwxErtAu84alIOUMQJuNrSQgyukLFWvnE8 ETrCwbhrKwJz3gGa3eulJKOH3PvrXcPwt99A==; Received: by mail.anduin.net with esmtpsa (TLS1.3:TLS_AES_256_GCM_SHA384:256) (Exim 4.97.1 (FreeBSD)) (envelope-from ) id 1tkk5W-000000005oW-199F; Wed, 19 Feb 2025 13:26:07 +0000 Date: Wed, 19 Feb 2025 14:25:50 +0100 From: Harald Eilertsen To: Bob Bishop Cc: FreeBSD Java mailing list Subject: Re: IPv6 in Java on FreeBSD Message-ID: Mail-Followup-To: Bob Bishop , FreeBSD Java mailing list References: List-Id: Porting Java to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-java List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-java@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: X-SA-Authenticated: Yes X-Spam-Score: -1.9 X-Spam-Level: - X-Spam-Report: host: mail.modirum.com | contact: hostmaster@modirum.com | scores: BAYES_00=-1.9,NO_RELAYS=-0.001 | autolearn=no autolearn_force=no, score=0 X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:62248, ipnet:185.42.170.0/24, country:EE] X-Rspamd-Queue-Id: 4Yycbk5kxJz3MM7 X-Spamd-Bar: ---- Hi Bob, On Wed, Feb 19, 2025 at 12:26:17PM +0000, Bob Bishop wrote: > I would just point out that back in history Java used to want mapped > IPv4 (net.inet6.ip6.v6only=0) if IPv6 was enabled; most people don’t > want that which may be why IPv6 support hasn’t been enabled. That's really useful feedback! And the observation is still correct. Java will by default clear the IPV6_V6ONLY flag on sockets when IPv6 is available and requested (the default.) I've made a quick test, where I patch Java to leave the setting alone, but otherwise leave IPv6 enabled. That will allow the sysctl setting to decide whether to use dual-socket or only accept IPv6 connections on the socket. Personally I think that makes sense. I'll update the PR's accordingly. Take care! Harald From nobody Wed Feb 19 13:37:09 2025 X-Original-To: freebsd-java@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Yycrq3BtJz5pNZp for ; Wed, 19 Feb 2025 13:37:31 +0000 (UTC) (envelope-from rb@gid.co.uk) Received: from gid2.gid.co.uk (ns0.gid.co.uk [IPv6:2001:470:94de::240]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "gid2.gid.co.uk", Issuer "gid2.gid.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Yycrp48lpz3SNR for ; Wed, 19 Feb 2025 13:37:30 +0000 (UTC) (envelope-from rb@gid.co.uk) Authentication-Results: mx1.freebsd.org; none Received: from mx0.gid.co.uk (mx0.gid.co.uk [194.32.164.250]) by gid2.gid.co.uk (8.15.2/8.15.2) with ESMTP id 51JDbQWu040549; Wed, 19 Feb 2025 13:37:26 GMT (envelope-from rb@gid.co.uk) Received: from smtpclient.apple (moriarty.gid.co.uk [194.32.164.17]) by mx0.gid.co.uk (8.14.2/8.14.2) with ESMTP id 51JDbKDr083600; Wed, 19 Feb 2025 13:37:21 GMT (envelope-from rb@gid.co.uk) Content-Type: multipart/signed; boundary="Apple-Mail=_B55B3E1C-A945-43D6-B4B8-1411B84C801E"; protocol="application/pgp-signature"; micalg=pgp-sha1 List-Id: Porting Java to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-java List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-java@FreeBSD.org Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3776.700.51.11.1\)) Subject: Re: IPv6 in Java on FreeBSD From: rb@gid.co.uk In-Reply-To: Date: Wed, 19 Feb 2025 13:37:09 +0000 Cc: FreeBSD Java mailing list Message-Id: <79B052D3-8A9F-4658-AD33-EDD26BBB1A34@gid.co.uk> References: To: Harald Eilertsen X-Mailer: Apple Mail (2.3776.700.51.11.1) X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:6939, ipnet:2001:470::/32, country:US] X-Rspamd-Queue-Id: 4Yycrp48lpz3SNR X-Spamd-Bar: ---- --Apple-Mail=_B55B3E1C-A945-43D6-B4B8-1411B84C801E Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi, There are also security implications to this, see inet6(4). > On 19 Feb 2025, at 13:25, Harald Eilertsen = wrote: >=20 > Hi Bob, >=20 > On Wed, Feb 19, 2025 at 12:26:17PM +0000, Bob Bishop wrote: >> I would just point out that back in history Java used to want mapped >> IPv4 (net.inet6.ip6.v6only=3D0) if IPv6 was enabled; most people = don=E2=80=99t >> want that which may be why IPv6 support hasn=E2=80=99t been enabled. >=20 > That's really useful feedback! And the observation is still correct. > Java will by default clear the IPV6_V6ONLY flag on sockets when IPv6 = is > available and requested (the default.) >=20 > I've made a quick test, where I patch Java to leave the setting alone, > but otherwise leave IPv6 enabled. That will allow the sysctl setting = to > decide whether to use dual-socket or only accept IPv6 connections on = the > socket. >=20 > Personally I think that makes sense. I'll update the PR's accordingly. >=20 > Take care! > Harald >=20 -- Bob Bishop rb@gid.co.uk --Apple-Mail=_B55B3E1C-A945-43D6-B4B8-1411B84C801E Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iF0EARECAB0WIQR+a6Wh87I/iYwcbE+8xpPppLfFvwUCZ7XehgAKCRC8xpPppLfF v09CAJ4p0Xu4UOsoxM9rj1tbNVKjaUrfQwCePG2OMlPYcYuHVGlE/NzsD2QxOu8= =5fw9 -----END PGP SIGNATURE----- --Apple-Mail=_B55B3E1C-A945-43D6-B4B8-1411B84C801E-- From nobody Wed Feb 19 17:44:31 2025 X-Original-To: freebsd-java@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4YykKw1wzdz5nQRq for ; Wed, 19 Feb 2025 17:44:36 +0000 (UTC) (envelope-from haraldei@anduin.net) Received: from mail.anduin.net (mail.anduin.net [185.42.170.45]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4YykKv5zN1z3q5L for ; Wed, 19 Feb 2025 17:44:35 +0000 (UTC) (envelope-from haraldei@anduin.net) Authentication-Results: mx1.freebsd.org; none DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=anduin.net; s=dkim2021; h=In-Reply-To:Content-Type:MIME-Version:References:Message-ID: Subject:Cc:To:From:Date:Sender:Reply-To:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=R91aPCjlvyEakHHQdS6oYnMljG3DJsiEApF/Z5JUDgw=; t=1739987075; x=1740851075; b=nw+E1JVCEc/LFg8D2J5/STUNtHi+Gfctguzdvl6A7n0eLeC9hCq3pDq7Q44sX2XxOGJWpm7X74h Zolx68AI3vDzIh6ziptHCEOrugYT67gGWm+/zYDlNEqojwLBCvsaxTvbA9ovILZs8+NAtIyJDHpf+ xHRdTzmRLqfO+VDC0fr5Ljmihz/5tPi6YpHwZQSAxgeupzyO7yqDFn1+KsI+YJBUX+6W08rg2Mvjp NwyPUQFlMnCC2PForAT/EqhEpmkefxwpXs0UpZsKWaHJwySYIvIT3+oFyqboyxQvCWufyo3L68AhA asudWKa22KMwZe7qShbC2gUK6iuQi14737hg==; Received: by mail.anduin.net with esmtpsa (TLS1.3:TLS_AES_256_GCM_SHA384:256) (Exim 4.97.1 (FreeBSD)) (envelope-from ) id 1tko7b-00000000Dvi-3T8K; Wed, 19 Feb 2025 17:44:33 +0000 Date: Wed, 19 Feb 2025 18:44:31 +0100 From: Harald Eilertsen To: rb@gid.co.uk Cc: FreeBSD Java mailing list Subject: Re: IPv6 in Java on FreeBSD Message-ID: Mail-Followup-To: rb@gid.co.uk, FreeBSD Java mailing list References: <79B052D3-8A9F-4658-AD33-EDD26BBB1A34@gid.co.uk> List-Id: Porting Java to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-java List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-java@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <79B052D3-8A9F-4658-AD33-EDD26BBB1A34@gid.co.uk> X-SA-Authenticated: Yes X-Spam-Score: -1.9 X-Spam-Level: - X-Spam-Report: host: mail.modirum.com | contact: hostmaster@modirum.com | scores: BAYES_00=-1.9,NO_RELAYS=-0.001 | autolearn=no autolearn_force=no, score=0 X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:62248, ipnet:185.42.170.0/24, country:EE] X-Rspamd-Queue-Id: 4YykKv5zN1z3q5L X-Spamd-Bar: ---- On Wed, Feb 19, 2025 at 01:37:09PM +0000, rb@gid.co.uk wrote: > Hi, > > There are also security implications to this, What do you mean? We should not follow the net.inet6.ip6.v6only setting? > see inet6(4). I did. It's rather vague on the topic. Do you have any information about any known attacks against dual-protocol sockets? It's a bit besides the point in any case. Java provides certain functionality to applications regarding IPv6, as defined here: https://docs.oracle.com/javase/8/docs/technotes/guides/net/ipv6_guide/#how_ipv6_works Changing this is not within the scope of these patches, and if at all desireable, it will have to be a separate effort outside of any port to a specific OS. Take care! Harald From nobody Wed Feb 19 21:18:03 2025 X-Original-To: freebsd-java@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Yyq4N0RDWz5nhrV for ; Wed, 19 Feb 2025 21:18:12 +0000 (UTC) (envelope-from antonfb@hesiod.org) Received: from thalia.hesiod.org (thalia.hesiod.org [IPv6:2001:19f0:ac00:456e:5400:4ff:fefc:a02a]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "thalia.hesiod.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Yyq4M1Cj1z3LwP for ; Wed, 19 Feb 2025 21:18:11 +0000 (UTC) (envelope-from antonfb@hesiod.org) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=hesiod.org header.s=Feb25 header.b=HiG9RK2a; dmarc=pass (policy=none) header.from=hesiod.org; spf=pass (mx1.freebsd.org: domain of antonfb@hesiod.org designates 2001:19f0:ac00:456e:5400:4ff:fefc:a02a as permitted sender) smtp.mailfrom=antonfb@hesiod.org Received: from [127.0.0.1] (host-185-160.fastfiber.searanchconnect.org [64.38.185.160] (may be forged)) (authenticated bits=0) by rain.hesiod.org (8.18.1/8.18.1) with ESMTPSA id 51JLI4OX047104 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NO) for ; Wed, 19 Feb 2025 13:18:10 -0800 (PST) (envelope-from antonfb@hesiod.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=hesiod.org; s=Feb25; t=1739999890; bh=eHT1aHQG8hXhvuIdu1LKi1EbuLsB3UJ1efWMsYtTaWc=; h=Date:From:To:Subject:In-Reply-To:References; b=HiG9RK2aT0pWRkXG6f28myyPM6UoJA4oaQcFfLlkFm0uTO5vFGuqZ8OWMCZUwvQ7G eDEEcPzl/zzbhyW1bFkpSXgAnJYpP4HsaFflZrYF1o0AyE0zqc0pu9OMdLlwizdbjp Q6Sa0LmZCkU4S+2F/JVc/46jGaXpVQtonBkijyp+qAfLvvWU1m4UZ8ZHvAadkll48h AGtrQLxyoMXtXOw0+beJQdSnYYDHeBnEGSZD6IKXlq4I5wXE1Tc616QXRD3AcxuMDY po6cNWivb3e5zWXZui4xJ/dUFHbeFscpJTraPvPuktCzAiLP48XCRHNi+BNWTnWaof lO1BgeElXGdxw== X-Authentication-Warning: thalia.hesiod.org: Host host-185-160.fastfiber.searanchconnect.org [64.38.185.160] (may be forged) claimed to be [127.0.0.1] Date: Wed, 19 Feb 2025 13:18:03 -0800 From: Jeff Anton To: freebsd-java@freebsd.org Subject: Re: IPv6 in Java on FreeBSD User-Agent: K-9 Mail for Android In-Reply-To: References: <79B052D3-8A9F-4658-AD33-EDD26BBB1A34@gid.co.uk> Message-ID: List-Id: Porting Java to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-java List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-java@FreeBSD.org MIME-Version: 1.0 Content-Type: multipart/alternative; boundary=----HAHQZVKL2VZFCEDH3XVY0Q1GTFBAIE Content-Transfer-Encoding: 7bit X-Spamd-Result: default: False [-3.80 / 15.00]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_SHORT(-1.00)[-1.000]; DMARC_POLICY_ALLOW(-0.50)[hesiod.org,none]; R_SPF_ALLOW(-0.20)[+mx:c]; ONCE_RECEIVED(0.20)[]; R_DKIM_ALLOW(-0.20)[hesiod.org:s=Feb25]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; ARC_NA(0.00)[]; RCVD_COUNT_ONE(0.00)[1]; RCPT_COUNT_ONE(0.00)[1]; ASN(0.00)[asn:20473, ipnet:2001:19f0:ac00::/38, country:US]; RCVD_VIA_SMTP_AUTH(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; RCVD_TLS_ALL(0.00)[]; RECEIVED_HELO_LOCALHOST(0.00)[]; MLMMJ_DEST(0.00)[freebsd-java@freebsd.org]; FROM_HAS_DN(0.00)[]; HAS_XAW(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-java@freebsd.org]; DKIM_TRACE(0.00)[hesiod.org:+] X-Rspamd-Queue-Id: 4Yyq4M1Cj1z3LwP X-Spamd-Bar: --- ------HAHQZVKL2VZFCEDH3XVY0Q1GTFBAIE Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable I have a lot a want to say about this=2E Unfortunately I only have my mobil= e phone for the next couple days so writing a lot is difficult=2E The security issue(s) should be clear and they don't seem to be clear now= =2E Reading the inet6 and ip6 pages and understanding the security issue is= difficult=2E I believe the security issue is that if you have an ipv4 mapped into ipv6 = arrangement, another process may be able to set up an ipv4 only socket to c= apture or intercept ipv4 traffic instead of the ipv4 mapped into ipv6 socke= t already established=2E Because the jvm uses this mapping it's vulnerable=2E Security heighten peo= ple (such as the openBSD) will not like this=2E However, until the jvm is substantially changed, there is not really a cho= ice here=2E IMO, it's a bad idea for the jvm to look at the global ipv6 only syscntl f= or it's configuration=2E I currently have a problem that sendmail does not work correctly with the = global ipv6only set to 0, but I can not run tomcat in a duel stack environm= ent without that global setting=2E I'm currently running a modified sendmai= l to solve this=2E I would very much like the jvm to be configurable to work dual stack witho= ut clearing the ipv6only syscntl=2E Most applications currently assume no ipv4 mapped into ipv6 just because t= hey don't even know it's possible=2E So the JVM is the "odd man" which can use this feature and has this possib= le security issue=2E So this is complicated=2E IMO, because the JVM is the outlier and there are security issues, the rig= ht thing is that a JVM should be individually configured if it's going to u= se ipv4 mapped into ipv6=2E Ie=2E The configured choices are Ipv4 only Ipv6 only Duel stack ipv6 with ipv4 mapped into ipv6 Jeff Anton ------HAHQZVKL2VZFCEDH3XVY0Q1GTFBAIE Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
I have a lot a want to say abo= ut this=2E Unfortunately I only have my mobile phone for the next couple da= ys so writing a lot is difficult=2E

The security issue(s) should be = clear and they don't seem to be clear now=2E Reading the inet6 and ip6 page= s and understanding the security issue is difficult=2E

I believe the= security issue is that if you have an ipv4 mapped into ipv6 arrangement, a= nother process may be able to set up an ipv4 only socket to capture or inte= rcept ipv4 traffic instead of the ipv4 mapped into ipv6 socket already esta= blished=2E

Because the jvm uses this mapping it's vulnerable=2E Secu= rity heighten people (such as the openBSD) will not like this=2E

How= ever, until the jvm is substantially changed, there is not really a choice = here=2E

IMO, it's a bad idea for the jvm to look at the global ipv6 = only syscntl for it's configuration=2E
I currently have a problem that s= endmail does not work correctly with the global ipv6only set to 0, but I ca= n not run tomcat in a duel stack environment without that global setting=2E= I'm currently running a modified sendmail to solve this=2E
I would very= much like the jvm to be configurable to work dual stack without clearing t= he ipv6only syscntl=2E

Most applications currently assume no ipv4 ma= pped into ipv6 just because they don't even know it's possible=2E

So= the JVM is the "odd man" which can use this feature and has this possible = security issue=2E

So this is complicated=2E

IMO, because the = JVM is the outlier and there are security issues, the right thing is that a= JVM should be individually configured if it's going to use ipv4 mapped int= o ipv6=2E
Ie=2E The configured choices are
Ipv4 only
Ipv6 only
= Duel stack ipv6 with ipv4 mapped into ipv6

Jeff Anton
------HAHQZVKL2VZFCEDH3XVY0Q1GTFBAIE-- From nobody Thu Feb 20 13:55:27 2025 X-Original-To: freebsd-java@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4YzFCG1lbHz5nw3l for ; Thu, 20 Feb 2025 13:55:38 +0000 (UTC) (envelope-from haraldei@anduin.net) Received: from mail.anduin.net (mail.anduin.net [185.42.170.45]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4YzFCG01YNz3MlZ for ; Thu, 20 Feb 2025 13:55:37 +0000 (UTC) (envelope-from haraldei@anduin.net) Authentication-Results: mx1.freebsd.org; none DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=anduin.net; s=dkim2021; h=In-Reply-To:Content-Type:MIME-Version:References:Message-ID: Subject:Cc:To:From:Date:Sender:Reply-To:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=jhaO0Jw87MQGXeKbz0q7qFW5sqIWRNBEy5f/W46ODVM=; t=1740059737; x=1740923737; b=N5IZTv7hMqTKGsF1Gyo17GO96ayUo1f9Yb7BkyM0+6POIzuwrUc0+RDlwvsooPkBqwK8KG8P76N 1ihlw25KLyWxLU8jwTcAGGrF9zf2dYe92yWC5jHtvl2Y7U6e3cae+F+qTpiNMOQJL9yqBQ9LzWko4 jiHktnbDMMiYNcM7PvELaICOP7MCM4u1zbu54yMKWXHO+ilVHg/DYuf8ravnaVTLhuxkLEwWqNJu6 F3grCkQ/aIJZdtEZ4BT8rJ79ImWP1TDjxb3OHvv3xW4PU2XodS+V+XF9kK4RYbr8W+GR9YJDztEFX K0x050qmZd2TKK9+ifua7EPffh1I/fH1Wlng==; Received: by mail.anduin.net with esmtpsa (TLS1.3:TLS_AES_256_GCM_SHA384:256) (Exim 4.97.1 (FreeBSD)) (envelope-from ) id 1tl71U-000000005up-1C5A; Thu, 20 Feb 2025 13:55:30 +0000 Date: Thu, 20 Feb 2025 14:55:27 +0100 From: Harald Eilertsen To: Jeff Anton Cc: freebsd-java@freebsd.org Subject: Re: IPv6 in Java on FreeBSD Message-ID: Mail-Followup-To: Jeff Anton , freebsd-java@freebsd.org References: <79B052D3-8A9F-4658-AD33-EDD26BBB1A34@gid.co.uk> List-Id: Porting Java to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-java List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-java@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-SA-Authenticated: Yes X-Spam-Score: -1.9 X-Spam-Level: - X-Spam-Report: host: mail.modirum.com | contact: hostmaster@modirum.com | scores: BAYES_00=-1.9,NO_RELAYS=-0.001 | autolearn=no autolearn_force=no, score=0 X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:62248, ipnet:185.42.170.0/24, country:EE] X-Rspamd-Queue-Id: 4YzFCG01YNz3MlZ X-Spamd-Bar: ---- Hi Jeff, Thanks a lot for your feedback. It's very helpful, and I apreciate the effort to type all of that into a phone! Also, as mentioned, this is a bit academic from my side. I do want to understand the worries and potential security implications for my own part. In the end though, Java is what Java is, and for any upstreaming effor I think I have to relate to that. Wrt this issue, the OpenJDK project seems pretty clear: - https://bugs.openjdk.org/browse/JDK-6882910 - https://github.com/openjdk/jdk/commit/22534d46e9fecc59de8cf18fd3e1bbfcba191e4a On Wed, Feb 19, 2025 at 01:18:03PM -0800, Jeff Anton wrote: > I believe the security issue is that if you have an ipv4 mapped into > ipv6 arrangement, another process may be able to set up an ipv4 only > socket to capture or intercept ipv4 traffic instead of the ipv4 mapped > into ipv6 socket already established. This seems to be a BSD problem, as it allows a bind to a port on a specific addess (localhost or an interface address) even if the port is bound by the wildcard address. I don't know the rationale for that. If you bind a socket to a specific address (ipv6 or ipv4) it will only accept connections over the corresponding protocol. So afaict this is only a problem that affects the wildcard address, and only on BSD. > Because the jvm uses this mapping it's vulnerable. Security heighten > people (such as the openBSD) will not like this. OpenBSD is not part of my scope. I will of course try to not break the port for OpenBSD, but their concerns have to be addressed by them. > IMO, it's a bad idea for the jvm to look at the global ipv6 only syscntl for it's configuration. That's useful feedback. This also means we'll conform to the Java spec, which mandates dual-stack sockets on IPv6 systems regardless of this setting. H! From nobody Fri Feb 21 14:00:06 2025 X-Original-To: freebsd-java@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4YzsGC1wfXz5psd0 for ; Fri, 21 Feb 2025 14:00:19 +0000 (UTC) (envelope-from haraldei@anduin.net) Received: from mail.anduin.net (mail.anduin.net [185.42.170.45]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4YzsG84DNqz3TGp for ; Fri, 21 Feb 2025 14:00:15 +0000 (UTC) (envelope-from haraldei@anduin.net) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=anduin.net header.s=dkim2021 header.b=GydvCt2y; dmarc=pass (policy=reject) header.from=anduin.net; spf=pass (mx1.freebsd.org: domain of haraldei@anduin.net designates 185.42.170.45 as permitted sender) smtp.mailfrom=haraldei@anduin.net DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=anduin.net; s=dkim2021; h=In-Reply-To:Content-Transfer-Encoding:Content-Type:MIME-Version :References:Message-ID:Subject:To:From:Date:Sender:Reply-To:Cc:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=d6JHqiTB9IfKOIWh4TXhL5KgD7h30g7uBSEt2KQ9sqw=; t=1740146415; x=1741010415; b=GydvCt2y5cC6Pi+lzdGQ5O1N15S0Bi6oKyRnQXXHv6MSI8OBq+BWJS5tNu0ePegiodZMdxqMraE y704gLK/2Ipv7qnTRlYUs6EGSdmF2kjCr2XPU4WTtkVsvOqlPMCA4OjweabIe0iFHt3XyWRQjLapK KRCgQl/i3SDSLzzwFrvGSwor1yQcySvdWGJnPNl1I6kTJlJMzu7wMwz2JCtYPNmJzDDM0S+WeL/fA ZwD/ruUNy8KGW4eY4y7uCANfFTT+dJSIz8gFktdY8Ez9NdGjfLmHFUR/+QW/axPel2s7ZlinBZN3H U7i1b0SuXKRMnfltdxRSY2s79cYimzfaI6Rw==; Received: by mail.anduin.net with esmtpsa (TLS1.3:TLS_AES_256_GCM_SHA384:256) (Exim 4.97.1 (FreeBSD)) (envelope-from ) id 1tlTZW-000000004ne-3aEk; Fri, 21 Feb 2025 14:00:08 +0000 Date: Fri, 21 Feb 2025 15:00:06 +0100 From: Harald Eilertsen To: Jeff Anton , freebsd-java@freebsd.org Subject: Re: IPv6 in Java on FreeBSD Message-ID: Mail-Followup-To: Jeff Anton , freebsd-java@freebsd.org References: <79B052D3-8A9F-4658-AD33-EDD26BBB1A34@gid.co.uk> List-Id: Porting Java to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-java List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-java@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: X-SA-Authenticated: Yes X-Spam-Score: -1.9 X-Spam-Level: - X-Spam-Report: host: mail.modirum.com | contact: hostmaster@modirum.com | scores: BAYES_00=-1.9,NO_RELAYS=-0.001 | autolearn=no autolearn_force=no, score=0 X-Spamd-Result: default: False [-3.81 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_LONG(-1.00)[-1.000]; RBL_SENDERSCORE_REPUT_9(-1.00)[185.42.170.45:from]; DMARC_POLICY_ALLOW(-0.50)[anduin.net,reject]; MID_RHS_NOT_FQDN(0.50)[]; NEURAL_HAM_SHORT(-0.31)[-0.307]; R_SPF_ALLOW(-0.20)[+ip4:185.42.170.45/32]; R_DKIM_ALLOW(-0.20)[anduin.net:s=dkim2021]; MIME_GOOD(-0.10)[text/plain]; MISSING_XM_UA(0.00)[]; FREEFALL_USER(0.00)[haraldei]; RCVD_COUNT_ONE(0.00)[1]; ARC_NA(0.00)[]; TO_DN_SOME(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:62248, ipnet:185.42.170.0/24, country:EE]; RCVD_TLS_ALL(0.00)[]; RCPT_COUNT_TWO(0.00)[2]; FROM_HAS_DN(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; MLMMJ_DEST(0.00)[freebsd-java@freebsd.org]; TO_MATCH_ENVRCPT_SOME(0.00)[]; DKIM_TRACE(0.00)[anduin.net:+] X-Rspamd-Queue-Id: 4YzsG84DNqz3TGp X-Spamd-Bar: --- On Thu, Feb 20, 2025 at 02:55:27PM +0100, Harald Eilertsen wrote: > On Wed, Feb 19, 2025 at 01:18:03PM -0800, Jeff Anton wrote: > > I believe the security issue is that if you have an ipv4 mapped into > > ipv6 arrangement, another process may be able to set up an ipv4 only > > socket to capture or intercept ipv4 traffic instead of the ipv4 mapped > > into ipv6 socket already established. > > This seems to be a BSD problem, as it allows a bind to a port on a > specific addess (localhost or an interface address) even if the port is > bound by the wildcard address. I don't know the rationale for that. I did a bit of research, and god a lot of help from Tom Jones to get to the bottom of this yesterday. And I think the culprit is SO_REUSEADDR. For a server socket, Java will set the SO_REUSEADDR socket option by default. But this option behaves quite differently on BSD (at least FreeBSD) than in Linux (and presumably AIX and macOS, which are the other platforms using this code path.) While Linux (and the others?) will refuse to create a socket to the same port as an already active listening socket bound to INADDR_ANY – even with the SO_REUSEADDR set, BSD will allow this. (https://www.man7.org/linux/man-pages/man7/socket.7.html) >From the testing I've done so far, it seems like it would be safe to not set the SO_REUSEADDR option on FreeBSD. This should allow the Java use of dual protocol sockets without opening for port higjacking from other processes. Anything else I've missed regarding this issue then? :) Take care! Harald