Date: Thu, 8 Feb 2007 10:50:08 -0800 From: Greg Lewis <glewis@eyesbeyond.com> To: Jan Grant <jan.grant@bristol.ac.uk> Cc: freebsd-java@freebsd.org Subject: Re: krb5 bug: Do any of the freebsd java folk (Greg?) have an upstream contact? Message-ID: <20070208185008.GB31177@misty.eyesbeyond.com> In-Reply-To: <20070207153528.H25702@tribble.ilrt.bris.ac.uk> References: <20070207153528.H25702@tribble.ilrt.bris.ac.uk>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi Jan, On Wed, Feb 07, 2007 at 03:44:01PM +0000, Jan Grant wrote: > I'm trying to raise a bug with Sun about the sun.security.krb5 > implementation. Unfortunately this is somewhat hampered by my suffering > from RSI at the moment. > > The problem is a straightforward resource leak, as you can see if you > look at this: > > http://java.sun.com/j2se/jrl_download.html > > in particular, at > > jdk_sec-1_5_0-src-scsl.zip > > You'll see that sun.security.krb5.internal.UDPClient has no close() > method; and the UDPClient-using code path in sun.security.krb5.KrbKdcReq > (which has a few other close-to-the-coalface errors) consequently leaks > FDs (unlike the TCP path, which has a try/finally that closes the socket > properly). > > We're seeing a krb5 client application (the Yale CAS SSO) keel over in > no time due to FD exhaustion. A trivial fix (the non-whitespace part of > the diff is 8 lines) sorts this out. > > Prepping a test case is somewhat difficult when this email represents > most of the typing I'm going to get done today :-( Can you please send me the diff? I can definitely get it into the port and will see what I can do with Sun. -- Greg Lewis Email : glewis@eyesbeyond.com Eyes Beyond Web : http://www.eyesbeyond.com Information Technology FreeBSD : glewis@FreeBSD.org
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070208185008.GB31177>