krb5 bug: Do any of the freebsd java folk (Greg?) have an upstream contact?

[Greg Lewis]

Hi Jan,

On Wed, Feb 07, 2007 at 03:44:01PM +0000, Jan Grant wrote:
> I'm trying to raise a bug with Sun about the sun.security.krb5 
> implementation. Unfortunately this is somewhat hampered by my suffering 
> from RSI at the moment.
> 
> The problem is a straightforward resource leak, as you can see if you 
> look at this:
> 
> 	http://java.sun.com/j2se/jrl_download.html
> 
> in particular, at
> 
> 	jdk_sec-1_5_0-src-scsl.zip
> 
> You'll see that sun.security.krb5.internal.UDPClient has no close() 
> method; and the UDPClient-using code path in sun.security.krb5.KrbKdcReq 
> (which has a few other close-to-the-coalface errors) consequently leaks 
> FDs (unlike the TCP path, which has a try/finally that closes the socket 
> properly).
> 
> We're seeing a krb5 client application (the Yale CAS SSO) keel over in 
> no time due to FD exhaustion. A trivial fix (the non-whitespace part of 
> the diff is 8 lines) sorts this out.
> 
> Prepping a test case is somewhat difficult when this email represents 
> most of the typing I'm going to get done today :-(

Can you please send me the diff?  I can definitely get it into the port
and will see what I can do with Sun. 

-- 
Greg Lewis                          Email   : glewis at eyesbeyond.com
Eyes Beyond                         Web     : http://www.eyesbeyond.com
Information Technology              FreeBSD : glewis at FreeBSD.org