Add multiple security patches from IcedTea6 1.12.3.

http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-February/021858.html
http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-February/021998.html

Obtained from:	IcedTea Project

Add a patch to fix MulticastSocket.setInterface().

http://hg.openjdk.java.net/bsd-port/bsd-port/jdk/rev/bfa676f5b5db

Submitted by:	oliver

Make sure to unset 'OS' environment variable.  Some shell sets it and causes
HotSpot build failure.

PR:		ports/173434
Feature safe:	yes

- Remove registervm from build dependency.  This hack is no longer necessary
as javavmwrapper is fixed now (r306536).
- Remove an empty directory, which was missed in the previous commit.

Feature safe:	yes

. Update to build 27.

Feature safe:	yes

Move .endif to a better place.  No functional change.

Feature safe:	yes

Bump PORTREVISION for the new cacerts.

Feature safe:	yes

Update CA list to Oracle Java 7u9.
Added CA:
- geotrustprimarycag2
- thawteprimaryrootcag2
- verisignclass3g4ca

Feature safe:	yes

Remove more environment variables.  These variables are never meant to be
overridden by the user.

Feature safe:	yes

Remove a bogus environment variable, especially for i386.  This fixes build
under certain conditions.

Feature safe:	yes

- Add 2012/10/16 security patches from IcedTea6 1.11.5. [1]

http://icedtea.classpath.org/hg/release/icedtea6-1.11/rev/d9564350faa6
http://blog.fuseyism.com/index.php/2012/10/19/security-icedtea-1-10-10-1-11-15-2-1-3-2-2-3-2-3-3-released/

- Completely turn off parallel build by default and remove parallel build
hack for HotSpot.  There were several reports that it fails to build under
certain environment, ports/162991 for example.  Users can still do parallel
build by setting FORCE_MAKE_JOBS (and MAKE_JOBS_NUMBER if desired).
- Implement os::available_memory().  Now it is consistent with "vm.vmtotal"
sysctl(3) MIB rather than bogus (physical memory / 4).
- Prefer sysconf(_SC_NPROCESSORS_CONF) over HW_NCPU sysctl MIB to get the
number of installed processors.  There is no functional difference except
for CURRENT, which obtains the information from ELF aux vector.
- Prefer sysconf(_SC_PHYS_PAGES) * sysconf(_SC_PAGESIZE) over HW_USERMEM

Add a port to self-bootstrap OpenJDK6.  Note the initial distfiles were
bootstrapped with pre-built openjdk6 packages from FreeBSD build clusters
on clean 7.4-RELEASE installation, and the ports tree was checked out at
r305682.

Feature safe:	yes

- Explicitly set registervm as build dependency.  When BOOTSTRAPJDKDIR is
manually set, this dependency may not be fulfilled.
- Consistently use WRKSRC over WRKDIR where it makes sense.  Although they
are actually the same directory, there is no reason to confuse users.

Feature safe:	yes

Update to build 26.

- Sanitize user, group and permission.  Inspired by openjdk7.
- Add a slave port to create JRE-only package.

Tidy up patches.  No functional change.

Use fdescfs(5) and procfs(5) consistently.

- Override GCC used by HotSpot SA. [1]
- Fix build with GCC 4.5+ on i386. [2]
- Convert to the new header format.

Submitted by:	Claude Buisson (clbuisson at orange dot fr) [1]
Obtained from:	OpenJDK7 [2]
	http://hg.openjdk.java.net/jdk7/hotspot/hotspot/rev/da880ba4edf9

- Honor CC, CXX, and CPP. [1]
- Fix build with clang.

PR:	ports/151042 [1]

- Enlist openjdk6 users as testers of ant 1.8.4 as well.
- Set JAVACMD environment variable to point to bootstrap JDK for ant.  When
it is unset or empty, ant sets it by executing `which java`, which may be
different from bootstrap JDK.

- Update security patch to fix CVE-2012-0547 and CVE-2012-1682.
- Catch up with icedtea.classpath.org server changes for distfiles.

- Fix multiple security vulnerabilities. [1]
- Drop version suffixes from LIB_DEPENDS.
- Use the new options framework.

Obtained from:  IcedTea Project [1]
http://icedtea.classpath.org/hg/icedtea6/rev/9aff0fc60733

. Specifically reference zip/unzip in ${LOCALBASE}/bin, since that is where
  the JDK build looks for them, but FreeBSD 9.x has them available in /usr/bin.
  Adjusting the JDK check is a harder fix, this will get things building
  again on 9.x quickly.

PR:             166996

. Bootstrap with ant 1.8.3.

Update jtreg to 4.1 b04.

. Update to build 25.

. Fix the look up of time zone data when TZUPDATE is turned on and as a
  result turn it on by default again.  This change bears a little more
  explanation.

  In UnixFileSystem.java there is a cache of canonical paths and in
  particular one for paths inside java.home.  The problem with looking
  up time zone data is that if another path within java.home has been
  looked up then the symlink for the time zone data is not resolved
  (since the cache assumes there are no symlinks in java.home) and we fail
  to be able to open the ZoneInfoMapping file.

  One of the other features in UnixFileSystem is that the cache is not
  consulted and full resolution occurs for paths containing "." or "..".
  I've chosen to (ab)use this to force resolution of the time zone data
  directory in ZoneInfoFile.java rather than doing something like IcedTea

. Turn the TZUPDATE option off by default until I can figure out how that
  breaks the Eclipse build.

. Use the new java-zoneinfo port to provide updated time zone info.

Fix multiple security vulnerabilities.

CVE-2011-3563:  Fix issues in java sound
CVE-2011-3571:  Fix in AtomicReferenceArray
CVE-2011-5035:  Add property to limit number of request headers to the HTTP
Server
CVE-2012-0501:  Better input parameter checking in zip file processing
CVE-2012-0502:  Issues with some KeyboardFocusManager method
CVE-2012-0503:  Issues with TimeZone class
CVE-2012-0505:  Enhance exception throwing mechanism in ObjectStreamClass
CVE-2012-0506:  Issues with some method in corba

Obtained from:  IcedTea Project

- Add variable JDK_UPDATE_VERSION for java to 30 (current Oracle release of JDK
6)

This is largely done for java detection for browser compatibility
Please update UPDATE_VERSION for new releases

PR:     ports/163916
Submitted by:   Denny Lin <dennylin93 at hs.ntnu.edu.tw>
Approved by:    glewis, (rene, crees) (mentors,implicit)

- Replace hsearch_r from GNU libc with Berkeley DB from our libc.

http://hg.openjdk.java.net/bsd-port/bsd-port/hotspot/rev/f19d23da7c3e
http://hg.openjdk.java.net/bsd-port/bsd-port/hotspot/rev/cf5c383e1d33
http://hg.openjdk.java.net/bsd-port/bsd-port/hotspot/rev/f1a18ada5853

- Fix POLICY option.  It was silently enabled by default with b19 update.

Installs built jars that were previously not installed.

* javazic.jar to generate Java timezone information files
* compilefontconfig.jar to generate Java font configuration files

PR: ports/161945
Submitted by:   Jilles Tjoelker <jilles at stack.nl>
Reviewed by: glewis
Approved by: glewis, crees (mentor)

- Update to b24. [1]
- Add x11/libXext to build dependencies. [2]
- Make portlint happy. [3]

PR:             ports/162646 [1]
                ports/156319 [2]
                ports/161985 [3]
Feature safe:   yes

- Add an additional patch to support i386 CPUs without CMOV instruction
under ICEDTEA option. [1]
- Chase default Korean font directory change.

PR:             ports/158304 [1]
Obtained from:  IcedTea Project [1]

- Update to build 23.
- Import more complete JPEG class support and turn on ICEDTEA option by
default. [1]
- Remove obsolete WEB option.  Note the functionality is now moved to a new
port java/icedtea-web, which depends on ICEDTEA option of this port.

Obtained from:  IcedTea project [1]

- Update IcedTea-Web to 1.0.3.
- Use fake JDK update version as IcedTea-Web does.

Bump PORTREVISION after open-mofit update

Re-add accidentally removed jtreg to distinfo.

Update IcedTea-Web to 1.0.2.

Force libxul include directory and allow building IcedTea-Web plugin with
an ancient xulrunner (i.e., 1.9.2.9 and earlier).  This commit should fix:

PR:     ports/155381

Rework the previous fix to sync. with upstream:

http://hg.openjdk.java.net/jdk7/jdk7/jdk/diff/441f88d39988/src/solaris/native/java/net/net_util_md.c

Note it has no functional change for FreeBSD because sizeof(socklen_t) is
luckily sizeof(int).  Actually, this commit is just to note that the regression
was acidentally pulled in from upstream because of my ignorance.  Specifically,
the following commit was the culprit:

http://hg.openjdk.java.net/jdk7/jdk7/jdk/diff/b7fce4bac617/src/solaris/native/java/net/net_util_md.c

FYI, it also triggered the following upstream PR:

http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6730740

Obtained from:  OpenJDK project
Pointyhat:      jkim

Fix a severe regression introduced with the "disable IPV6_V6ONLY option".
On amd64 every call to getsocktopt returns a "Bad address" SocketException.

Add an option to apply extra patches originated from IcedTea project (turned
off by default) and sort options.  Add a basic wrapper to resurrect
com.sun.image.codec.jpeg using javax.imageio under the new option.

Obtained from:  icedtea.classpath.org
PR:             java/155288

Backport a long standing bug fix from OpenJDK7, i.e., disable IPV6_V6ONLY
option when IPv6 is enabled and failed to create a socket.

http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6342561
http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6882910

For in-depth analysis of this problem from FreeBSD perspective, please see:

http://diario.beerensalat.info/2008/10/12/java_and_ipv6_on_bsd.html

Fix a test case for default charset.

Update to build 22.

Update apache-ant to 1.8.2 bugfix release.

PR:             ports/154187
Submitted by:   ale
Approved by:    portmgr (pav)

Update IcedTea-Web to 1.0.1 and fix multiple security vulnerabilities.

CVE-2010-4469:  Hotspot backward jsr heap corruption
CVE-2010-4465:  Swing timer-based security manager bypass
CVE-2010-4472:  Untrusted code allowed to replace DSIG/C14N implementation
CVE-2010-4448:  DNS cache poisoning by untrusted applets
CVE-2010-4450:  Launcher incorrect processing of empty library path entries
CVE-2010-4471:  Java2D font-related system property leak
CVE-2010-4470:  JAXP untrusted component state manipulation
CVE-2011-0706:  Multiple signers privilege escalation

Obtained from:  icedtea.classpath.org
Obtained from:  jaxp.java.net

Add experimental support for sound via ALSA pcm-oss plugin.  This feature
is disabled by default because MIDI plugin for OSS does not exist, i.e.,
(hardware) MIDI sequencer is not supported.  However, softsynth (Gervill)
works fine as it uses sampled sound.

Fix a typo in the previous commit.  We have more than one line now.

- Implement some missing FreeBSD-specific methods, i.e., swap info, committed
virtual memory, free physical memory, and number of open file descriptors.
For example, jconsole shows more realistic numbers instead of hardcoded bogus
numbers in VM Summary tab now.  Correct a jtreg test case for the swap info.
- Mention procfs(5) is used for some features in this implementation.

- Update to build 21.
- Improve Serviceability Agent.  For example, the following should work now:

        jdb -connect sun.jvm.hotspot.jdi.SAPIDAttachingConnector:pid=<PID>
        jmap <PID>
        jsadebugd <PID>
        jstack -F <PID>
        jstack -m <PID>

- Replace IcedTea6 1.9.x with IcedTea-Web 1.0 for web support.  Note it is
still tightly coupled with openjdk6 for now because we do not have proper
infrastructure to decouple them yet.
- Add itweb-settings (a Java Control Panel replacement for IcedTea-Web).
- Add desktop integration files for web support (but not installed in default
system-wide locations).

. Fix infinite loop in parsing certain doubles.  See  CVE-2010-4476.

Update IcedTea6 web support to 1.9.4 (CVE-2010-4351).

Feature safe:   yes

Fix a typo in the BSD patchset.

PR:             ports/153421
Submitted by:   Alexander Vasyanin (avasyanin at gmail dot com)

- Use apache-ant 1.8.1 while devel/apache-ant was updated
- Pet portlint: use tab instead of space

PR:             ports/152676
Submitted by:   sunpoet (myself)
Approved by:    glewis (with java hat)

. Make rlen a size_t instead of an int.  Fixes a crash on 64 bit architectures.

Pointed out by: Nikolay Denev <ndenev@gmail.com>

- Update IcedTea6 web support to 1.9.2.
- Add a patch to fix browser plugin crash[1].

Submitted by:   Barbara (barbara dot xxx1975 at libero dot it)[1]

. Set LIBOWN and LIBGRP to the current user's uid and gid to allow building
  of the plugin by non-root users.

Update Web Start and Java plugin to IcedTea6 1.9.1.

Improve pthread cancellation and update comments.

- Rewrite IcedTea6 plugin patch to improve stability of initialization/shutdown
process.  Update comments in the patch accordingly.
- Tidy up makefile for the plugin.  Remove a hack for include path of libxul,
which is correctly patched from libxul 1.9.2.9_1.  Remove mozilla-plugin.pc from
linker options for pkg-config.  Generally speaking, NPAPI plugins do not need
to link with Gecko engine directly.
- Move run-time dependencies for the plugin to build-time dependencies as it is
completely optional any way.

Introducing support for Web Start and Mozilla plugin from IcedTea6 1.9.
Note the feature is turned off by default because it adds experimental and
unofficial patches from icedtea.classpath.org.  You need to select WEB option
from config menu or define WITH_WEB variable to enable the feature.  Also,
note that a symlink for web browser is not created automatically with same
reasoning.  Thus, you need to create a symlink for your browser, e.g.,

ln -s ${LOCALBASE}/openjdk6/jre/lib/IcedTeadPlugin.so ~/.mozilla/plugins

Remove some stale comments in package message while I am here.

. Respect MAKE_JOB_NUMBERS and use that to set up the number of HotSpot
  make jobs.  If not, fall back to the number of CPUs, as per the current
  behaviour.

  Only the HotSpot part of the build is safe to parallelise, so leave the
  port marked MAKE_JOBS_UNSAFE.

. Port over davidxu@'s NIO selector that uses kqueue(2) from jdk16.
. Mark as MAKE_JOBS_UNSAFE.

. Back out the previous revision.  The port is not MAKE_JOBS_SAFE.

. Mark MAKE_JOBS_SAFE.
. Use MAKE_JOBS_NUMBER as HOTSPOT_BUILD_JOBS.

PR:             148753
Submitted by:   David Naylor <naylor.b.david@gmail.com>

. Update to build 20.

PR:             148202

Stop downloading more sources (JAXP, JAX-WS, and JAF) from build phase and
add IcedTea project as an additional master site.  This change should fix
most build failures related to network problems, e.g., bootstrapping with
an IPv6-enabled JDK, unreliable network connections, etc.

Do not add /usr/local/lib three times to DEFAULT_LIBPATH.
Update cacerts file from Sun's JRE 6u20.

- Update to b19 promoted build. [1]

- Merge two additional patches from the OpenJDK BSD porting project:

http://hg.openjdk.java.net/bsd-port/bsd-port/jdk/rev/f974aefae43d
http://hg.openjdk.java.net/bsd-port/bsd-port/jdk/rev/62dc2d00133f

- Add a message to note fdescfs(5) is necessary for this implementation.

PR:             ports/145806 [1]
Discussed with: glewis, lev

Reset maintainer to java@.

Discussed with: glewis, lev

- java/openjdk6: allow to build againist modern xorg (7.5)

PR:             145757
Submitted by:   myself
Approved by:    mainatner timeout ( over 3 weeks)

Add ${LOCALBASE}/lib to java.library.path.

Submitted by:   ale
Approved by:    maintainer

Remove unneeded '\' in COMMENT.

- Fix a bug in 'jar' utility
- Add support for running regression tests
- Respect LOCALBASE
- Bump PORTREVISION

These are the test results on:

FreeBSD 6 i386:  passed: 3113; failed: 29; error: 2
FreeBSD 8 amd64: passed: 3107; failed: 35; error: 2

Note: a couple of tests passed only after a few runs.

Submitted by:   ale
Approved by:    maintainer

Improve korean [1] and chinese font rendering.

Submitted by:   jkim [1]
Approved by:    maintainer

- Update to b17 promoted build [1]
  - Fix font rendering and update cacerts file
  - Add support for fastdebug jdk
- Cleanup/Enhance the port [2]

Submitted by:   maintainer [1], ale [2]
Approved by:    maintainer

- Remove a circular dependency between openjdk6 and ant
  (required to make it the default jdk port)
- Remove manual fetching of unrestricted jce policy file
- Other no-ops

Approved by:    maintainer

. Update to the cacerts file included in Update 17.

Register/unregister OpenJDK6 explicitly via javavmwrapper.

Reviewed by:    Brian Gardner (maintainer)

. Restore Brian Gardner as maintainer with his new email address.
. Remove the runtime dependency on CUPS [2]

PR:             134648 [2]
Submitted by:   dinoex@ [2]

. Add support for the serviceability agent (includes work by glewis@ and
  Brian Gardner).  Core support needs some more work.
. Install the debug build when WITH_DEBUG is set.
. Change WITH_DEBUG to only build the debug build.
. Eliminate the requirements for the binary plugins.
. Fix some compilation errors in the debug build on 7.x.

Submitted by:   Kurt Miller <kurt@intricatesoftware.com>

. Reset maintainer to java@.  I located an earlier mail from Brian that he
  was leaving Expert's Exchange, so I imagine email to him there is just
  bouncing.
. Tweak the license description in COMMENT to a more standard form.
. Remove USE_JAVA.  The JDK bootstrap dependency is handled separately in
  the Makefile itself and once openjdk6 is part of bsd.java.mk USE_JAVA
  could make this port depend on itself (which doesn't play nice with
  portmaster).

. Allow a previously installed version of openjdk6 and jdk16 to also be
  used as a bootstrap.

PR:             134440
Submitted by:   Jonathan Chen <jonc@chen.org.nz>

. Update to Build 16.
. Host the patchset in the ports infrastructure rather than downloading it.
. Make the port build HotSpot rather than using the one of the bootstrapping
  JDK (fixes a license violation).

Submitted by:   Kurt Miller <kurt@intricatesoftware.com>
Approved by:    Fixes a license violation

Remove WEB knob.
OpenJDK (6 or 7) doesn't yet come with a plugin or webstart.

Submitted by:   Kurt Miller <lists@intricatesoftware.com>
            http://docs.FreeBSD.org/cgi/mid.cgi?200902251003.14760.lists
Approved by:     Brian Gardner <brian@experts-exchange.com> (maintainer)

Due to miss commit, backout distinfo.

Fix broken on 6.

Spotted by: pav
Approved by: Brian Gardner <brian@experts-exchange.com> (maintainer)

* reroll openjdk-6-src-b14-10-feb-2009.zip
  http://lists.freebsd.org/pipermail/freebsd-java/2009-February/007917.html
* Serious tests and cleaning.

Take a stab at fixing INDEX by adding USE_ANT.

Fix build.

Spotted by:  cperciva@ and QAT

Fix build.

Spotted by: QAT

Build fix.

Spotted by:     QAT

Fix build.

Submitted by:   QAT

OpenJDK is an open-source implementation of the Java Platform, Standard Edition.

The version has all of Sun's bug fixes up to JDK 6 Release 11 and should be
the runtime equivelent to JDK6 Release 11.

Much of the OpenJDK code is licensed under the GPL version 2 with the
Classpath exception. The Java Hotspot virtual machine source code is
licensed under the GPL version 2 only.

OpenJDK 6 should supercede the java/jdk16 port at some point in time.

WWW: http://openjdk.java.net/

Submitted by:   Brian Gardner <brian@experts-exchange.com>