Date: Sat, 04 Jan 2014 10:28:26 +0000 From: Matthew Seaman <matthew@FreeBSD.org> To: freebsd-java@freebsd.org Subject: Re: open jdk7 marked "FORBIDDEN" Message-ID: <52C7E24A.6010902@FreeBSD.org> In-Reply-To: <1388798626990-5873612.post@n5.nabble.com> References: <21189.33585.949509.38005@jerusalem.litteratus.org> <52C58E85.8030501@freebsd.org> <1388798626990-5873612.post@n5.nabble.com>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --BJvB76U5KeRQX1WRs5pg0OBD8iGVsgSht Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On 04/01/2014 01:23, ari wrote: >> The 'nasty FreeBSD bug' is that running the latest OpenJDK 6 or 7 will= >> cause pretty much all version of FreeBSD back to 8.0 to instantly >> reboot. This is actually a FreeBSD kernel bug. >=20 >> Watch the freebsd-announce@... list -- there will be at least an Errat= a >> notice for all supported releases. >=20 >=20 > I understand the desire to protect people from bad effects, but this lo= ckout > of every Java port (since everything pretty much depends on openjdk) is= > quite extreme. Can we please have some more information about: >=20 > * the nature of the bug > * how far back do we have to revert openjdk7 to avoid the problem >=20 > I've got a huge reliance on Java on production servers and this makes m= e > very nervous. I also had planned an upgrade from FreeBSD 9.0 to 9.2 on = a > server today and this can't go ahead since I cannot install an updated > openjdk. >=20 > If this is an obscure bug which is in all versions of the openjdk again= st > all versions of freebsd, could someone please revert the FORBIDDEN flag= on > these ports, since its only effect is to: >=20 > * make users believe that FreeBSD is not a good platform for Java > * stop users from upgrading from any previous versions of Java, or othe= rwise > update systems >=20 > If this is a serious problem only in the latest version of Java (eg. > 1.7.0_45) then can we revert the port to a known working version? >=20 >=20 > At any rate, more information would be great since I've already got 1.7= =2E0_45 > in production on a couple of machines and I need to know what to look o= ut > for. Yes, certainly. The important point here is that the bug is in certain FreeBSD versions, not in Java. If you've got a java package that runs without causing the system to panic then there's no reason not to carry on using it. The symptoms of the bug are that the OS will panic whenever one of the latest versions of OpenJDK is run on a susceptible version of the OS. If your machine can /build/ the latest OpenJDK without panicing (which involves extensive use of Java to compile itself) then you're OK to deploy that version to run your web applications or whatever (subject to the usual sorts of testing you'ld do around updating any core component of the business that provides your paychecks, of course). OpenJDK 7.45.18 or 7.45.18_1 would trigger the bug in susceptible FreeBSD systems. 7.25.15_2 or earlier should be safe. FreeBSD 11-CURRENT (r259951), 10-STABLE (r260081), 10.0-RELEASE-rc4 (r260122) and 9-STABLE (r260082) have been patched. Neither 8-STABLE nor any of the supported 9.x- or 8.x-RELEASE branches have been patched yet. As I said, the -RELEASE branches would be listed in an errata notice or security advisory when a patch was applied. Disclaimer: this is just based on what I have been able to gather from public mailing lists, my own experiences trying to build package sets including OpenJDK and by spelunking through the SVN repository via http://svnweb.freebsd.org/base/ It does not represent the official position of the FreeBSD project. Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. PGP: http://www.infracaninophile.co.uk/pgpkey --BJvB76U5KeRQX1WRs5pg0OBD8iGVsgSht Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.20 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQJ8BAEBCgBmBQJSx+JRXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2NTNBNjhCOTEzQTRFNkNGM0UxRTEzMjZC QjIzQUY1MThFMUE0MDEzAAoJELsjr1GOGkATprYP/1K7cjubu2JD9ZxLIHfVfKhR onB0bf2JbkyrzqPgBPA6d0n2KJ+nf2q3fLtn5IOg3LioM7qdm8ASu9qaECtGZyNO isrg+fw1fbDgxXXFQ76hFUqLfRpO0sTT2au0FiBGec5iozb9HFhY1/7Ovu8DElYS nvknJNN9jZEGUCIVFEqKC1NoPQmi8D7rt0dPZHPOUOcDfRrkOI27KvggGuWzzjYg 4FLcX1qSkwkS2DcMqSeMpD9qqur9v60gPW5qe2b4VACXiqg2wL81Gr5UI7TLUsso 5so6ajeJbHdIiGdTGXx8UnvLaQmrpuZb8EusYr/L4bf8u7AWEbiYK2sXQqwlcWje awMKjejK/Vr0Y46KBpLIT32vF+V3uNghql6hepJOCI9EEHBLUpvLFo08RWL8r++6 rlDqSTlQbRcPtFkXXAfd0CnJI570UkrDwPXUVFY2BSCNH91Aq/KllxQB3q3qCmua Zpnr7dW7RDZtFzD9gUcMRA1peO4ZOu8R0wOkDtWDQi3mOjZ/d7cE2YI1C7B13I64 Vhq5ApJOYmwqILcZeN/O/JHG7dPlSkUvJUZ1S3BeYRfbep6LIkIHSr9txT2rwAPY tyjq6hgi45mQd+Izocwfvn/cazkGab8M3fh6cmA6kpDm+TGr687cplyqAHuN+CEs sgnvr48JVnODSKfIrE6Y =oOd3 -----END PGP SIGNATURE----- --BJvB76U5KeRQX1WRs5pg0OBD8iGVsgSht--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?52C7E24A.6010902>