Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 7 Feb 2007 15:44:01 +0000 (GMT)
From:      Jan Grant <jan.grant@bristol.ac.uk>
To:        freebsd-java@freebsd.org
Subject:   krb5 bug: Do any of the freebsd java folk (Greg?) have an upstream contact?
Message-ID:  <20070207153528.H25702@tribble.ilrt.bris.ac.uk>

next in thread | raw e-mail | index | archive | help
I'm trying to raise a bug with Sun about the sun.security.krb5 
implementation. Unfortunately this is somewhat hampered by my suffering 
from RSI at the moment.

The problem is a straightforward resource leak, as you can see if you 
look at this:

	http://java.sun.com/j2se/jrl_download.html

in particular, at

	jdk_sec-1_5_0-src-scsl.zip

You'll see that sun.security.krb5.internal.UDPClient has no close() 
method; and the UDPClient-using code path in sun.security.krb5.KrbKdcReq 
(which has a few other close-to-the-coalface errors) consequently leaks 
FDs (unlike the TCP path, which has a try/finally that closes the socket 
properly).

We're seeing a krb5 client application (the Yale CAS SSO) keel over in 
no time due to FD exhaustion. A trivial fix (the non-whitespace part of 
the diff is 8 lines) sorts this out.

Prepping a test case is somewhat difficult when this email represents 
most of the typing I'm going to get done today :-(

Cheers,
jan

-- 
jan grant, ISYS, University of Bristol. http://www.bris.ac.uk/
Tel +44 (0)117 3317661   http://ioctl.org/jan/
Goth is the new black.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070207153528.H25702>