← Back to team overview

openjdk team mailing list archive

[Bug 925218] Re: Crash in java.net.NetworkInterface.getNetworkInterfaces() when ifr_ifindex exceeds 255

 

This bug was fixed in the package openjdk-7 - 7u9-2.3.3-0ubuntu1~11.10.1

---------------
openjdk-7 (7u9-2.3.3-0ubuntu1~11.10.1) oneiric-security; urgency=low

  * Build IcedTea7 2.3.3 for oneiric.

openjdk-7 (7u9-2.3.3-0ubuntu1) quantal-security; urgency=low

  * IcedTea7 2.3.3 release.
  * Security fixes
    - S6631398, CVE-2012-3216: FilePermission improved path checking.
    - S7093490: adjust package access in rmiregistry.
    - S7143535, CVE-2012-5068: ScriptEngine corrected permissions.
    - S7158796, CVE-2012-5070: Tighten properties checking in EnvHelp.
    - S7158807: Revise stack management with volatile call sites.
    - S7163198, CVE-2012-5076: Tightened package accessibility.
    - S7167656, CVE-2012-5077: Multiple Seeders are being created.
    - S7169884, CVE-2012-5073: LogManager checks do not work correctly for
      sub-types.
    - S7169887, CVE-2012-5074: Tightened package accessibility.
    - S7169888, CVE-2012-5075: Narrowing resource definitions in JMX RMI
      connector.
    - S7172522, CVE-2012-5072: Improve DomainCombiner checking.
    - S7186286, CVE-2012-5081: TLS implementation to better adhere to RFC.
    - S7189103, CVE-2012-5069: Executors needs to maintain state.
    - S7189490: More improvements to DomainCombiner checking.
    - S7189567, CVE-2012-5085: java net obselete protocol.
    - S7192975, CVE-2012-5071: Issue with JMX reflection.
    - S7195194, CVE-2012-5084: Better data validation for Swing.
    - S7195549, CVE-2012-5087: Better bean object persistence.
    - S7195917, CVE-2012-5086: XMLDecoder parsing at close-time should be
      improved.
    - S7195919, CVE-2012-5079: (sl) ServiceLoader can throw CCE without
      needing to create instance.
    - S7196190, CVE-2012-5088: Improve method of handling MethodHandles.
    - S7198296, CVE-2012-5089: Refactor classloader usage.
    - S7158800: Improve storage of symbol tables.
    - S7158801: Improve VM CompileOnly option.
    - S7158804: Improve config file parsing.
    - S7198606, CVE-2012-4416: Improve VM optimization.

openjdk-7 (7u7-2.3.2a-1ubuntu1) quantal; urgency=low

  * Build a transitional icedtea-7-jre-cacao package to ease upgrades.

openjdk-7 (7u7-2.3.2a-1) experimental; urgency=low

  * Upload to experimental.

openjdk-7 (7u7-2.3.2a-0ubuntu1) quantal; urgency=low

  * Repackage the source to drop the cacao tarball (and packaging files).
  * Depend again on system provided tzdata-java and restore the zi
    symlink on upgrade. LP: #1050404.
  * libgnome2-0, libgnomevfs2-0, libgconf2-4 are not prepared for multiarch.
    Don't depend on these so that openjdk-7 can be installed as a multiarch
    package.

openjdk-7 (7u7-2.3.2-1ubuntu2) quantal; urgency=low

  * Make the avian VM a known runtime.

openjdk-7 (7u7-2.3.2-1ubuntu1) quantal; urgency=low

  * Fix 32bit hotspot build, don't set maximal heap space lower than
    minimal heap space for the docs build.
  * d/p/sane-library-paths.patch, d/p/ant-diagnostics.diff,
    d/p/fix-race-cond-print.diff, d/p/gcc-hotspot-opt-O[02].diff,
    d/p/gcc-mtune-generic.diff, d/p/openjdk-6986968.diff: Remove, not used.
  * Remove unused shark/llvm-3.0 patches.
  * d/p/zero-only-use-floating-point-if-floating-poi.patch: Remove, applied
    upstream.
  * Don't explicitly build with -march=i586 on i386 architectures.
  * Re-apply zero-missing-headers.diff.
  * Disable cacao builds, needs update for 7u7.
  * For Ubuntu quantal, set priorities for alternatives higher than for
    OpenJDK 6.
  * Call update-alternatives when the existing priority for the alternative
    is lower than the current one.
  * Configure with --disable-downloading.
  * Pass -avoid-version to libtool to create a JamVM libjvm.so without SONAME
    version numbers to match the Hotspot Server/Client libjvm.so. LP: #850433.
  * Revert the following change: Move libgnome2-0, libgnomevfs2-0, libgconf2-4
    from Depends of JRE package to Recommends (#661465).
    The proper fix is to create a -jdk-headless package, or not depending on
    these gnome packages at all (e.g. using XDG libraries).

openjdk-7 (7u7-2.3.2-1) experimental; urgency=low

  * New upstream IcedTea7 2.3.2 release.
  * Security fixes:
    - CVE-2012-4681: Reintroduce PackageAccessible checks removed in 6788531.
    - S7079902, CVE-2012-1711: Refine CORBA data models.
    - S7143606, CVE-2012-1717: File.createTempFile should be improved
      for temporary files created by the platform.
    - S7143614, CVE-2012-1716: SynthLookAndFeel stability improvement.
    - S7143617, CVE-2012-1713: Improve fontmanager layout lookup operations.
    - S7143851, CVE-2012-1719: Improve IIOP stub and tie generation in RMIC.
    - S7143872, CVE-2012-1718: Improve certificate extension processing.
    - S7152811, CVE-2012-1723: Issues in client compiler.
    - S7157609, CVE-2012-1724: Issues with loop.
    - S7160757, CVE-2012-1725: Problem with hotspot/runtime_classfile.
    - S7165628, CVE-2012-1726: Issues with java.lang.invoke.MethodHandles.Lookup.
  * Bump version to 7u7 (OpenJDK), 2.3.2 (IcedTea). Closes: #685276.
  * d/p/icedtea7-forest-jdk_7104625-XEvent_wrap_logging_calls_with_if.patch,
    d/p/hotspot-sparc.diff: Remove, integrated upstream.
  * d/p/{deb-multiarch,fix_extra_flags,hotspot-no-werror}.diff:
    Add variants for hotspot and zero builds.
  * d/p/default-jvm-cfg.diff, d/p/icedtea-4953367.patch,
    d/p/icedtea-patch.diff, d/p/icedtea-pretend-memory.diff,
    d/p/libpcsclite-dlopen.diff, d/p/nonreparenting-wm.diff:
    Update for 2.3.2.
  * Remove build support for Ubuntu releases earlier than hardy.
  * d/update-shasum.sh: Only update the shasums of the -dfsg tarballs.
  * Don't apply shark patches (not built anyway).

openjdk-7 (7~u3-2.1.1-3) unstable; urgency=low

  * d/rules: Ensure we don't remove -02 (default) when -03 is disabled
    (fix jamvm FTBFS on armhf without -02).
  * d/patches/gcc-jdk-opt-O0.diff, d/patches/gcc-jdk-opt-O2.diff,
    d/patches/gcc-no-hardening.diff, d/patches/gcc-opt-O2.diff: removed.

openjdk-7 (7~u3-2.1.1-2) unstable; urgency=low

  * d/rules: On Debian Wheezy/Sid bump Build-Depends on libnss3-dev
    (>= 2:3.13.4) and Depends on libnss3 (>= 2:3.13.4) (ie. with epoch).
    (Closes: #679465).
  * d/control: Suggests icedtea-7-plugin instead of icedtea6-plugin
    (Closes: #680284).
  * d/patches/7130140-MouseEvent-systemout.diff: Remove "MEvent. CASE!" from
    console output. (Closes: #679036).
  * Disable -O3 compile: cause wrong Math.* computations.
    (Closes: #679292 and Closes: #678228). LP: #1044857.
  * debian/patches/FreetypeFontScaler_getFontMetricsNative.diff:
    Fix "OpenJDK returns the text height greater than font size".
    (Closes: #657854)

openjdk-7 (7~u3-2.1.1-1) unstable; urgency=medium

  * New upstream release with security fixes (Closes: #677486):
    - S7079902, CVE-2012-1711: Refine CORBA data models
    - S7110720: Issue with vm config file loadingIssue with
      vm config file loading
    - S7143606, CVE-2012-1717: File.createTempFile should be improved
      for temporary files created by the platform.
    - S7143614, CVE-2012-1716: SynthLookAndFeel stability improvement
    - S7143617, CVE-2012-1713: Improve fontmanager layout lookup operations
    - S7143851, CVE-2012-1719: Improve IIOP stub and tie generation in RMIC
    - S7143872, CVE-2012-1718: Improve certificate extension processing
    - S7145239: Finetune package definition restriction
    - S7152811, CVE-2012-1723: Issues in client compiler
    - S7157609, CVE-2012-1724: Issues with loop
    - S7160677: missing else in fix for 7152811
    - S7160757, CVE-2012-1725: Problem with hotspot/runtime_classfile
    - S7165628, CVE-2012-1726: Issues with
      java.lang.invoke.MethodHandles.Lookup
  * Patches merged upstream:
    - debian/patches/arm-thumb-fix.diff
    - debian/patches/gcc-4.7.diff

  [ James Page ]
  * Cherry picked patch from openjdk-6 to fix handling of
    ICC profiles (LP: #888123, #888129) (Closes: #676351).

  [ Damien Raude-Morvan ]
  * Move libgnome2-0, libgnomevfs2-0, libgconf2-4 from Depends of JRE package
    to Recommends (Closes: #661465).
  * New jni_md_h_JNIEXPORT_visibility.patch to allow JNIEXPORT definition
    to work with -fvisibility=hidden. (Closes: #670896).

openjdk-7 (7~u3-2.1.1~pre1-2) unstable; urgency=low

  * Don't mark the -demo package as Multi-Arch same. Closes: #670038.
  * Build using gcc-4.4 on mips, mipsel.
  * Build again with older gcj version on s390 (4.6).

openjdk-7 (7~u3-2.1.1~pre1-1ubuntu3) precise-proposed; urgency=low

  * Default to the ARM assembler interpreter instead to JamVM on
    ARM. LP: #993380.

openjdk-7 (7~u3-2.1.1~pre1-1ubuntu2) precise; urgency=low

  * Use the /usr/bin path for the policytool desktop file. LP: #980205.
    Closes: #670037.

openjdk-7 (7~u3-2.1.1~pre1-1ubuntu1) precise; urgency=low

  * Regenerate the control file.

openjdk-7 (7~u3-2.1.1~pre1-1) unstable; urgency=low

  * Update from the IcedTea7-2.1 release branch (20110410).
  * Install desktop files again, using the common /usr/bin/java
    interpreter name.
  * Build-depend on libpng-dev for newer releases. Closes: #662452.
  * Let dlopen handle finding the libpcsclite library. LP: #898689.
  * Build-depend on fonts-ipafont-mincho, fixing a build failure in the
    fontconfig compiler (find out why it breaks ...).
  * Build using gcc-4.7/gcj-4.7 for sid/wheezy, fix build failure.
  * Remove `-icedtea' suffix from the release identification.
  * Fix arm thumb build, update taken from IcedTea6.

openjdk-7 (7~u3-2.1-4) unstable; urgency=low

  [ Matthias Klose ]
  * Don't install the binary fontconfig file. LP: #964303.

  [ Damien Raude-Morvan ]
  * Remove libxp-dev check in configure.ac, it's not needed anymore
    (Closes: #657260) and so drop build dependency on libxp-dev.
  * Fix FTBFS with glib 2.32 by adding explicit dependency gthread-2.0.pc
    (Closes: #665666).
  * Use libpng-dev instead of libpng12-dev for wheezy/sid (Closes: #662453).

openjdk-7 (7~u3-2.1-3) unstable; urgency=low

  * d/rules,Makefile.am: Improve handling of dpkg-buildflags: don't overwrite
    CFLAGS of hotspot but use EXTRA_* flags into icedtea and openjdk Makefile.
    (Closes: #661695).
  * d/rules: Build everything with -03 opt level (jamvm, cacao and jdk)
  * d/patches/kfreebsd-support-*.diff: Refresh kfreebsd patches and
    fix FTBFS on k-i386 (ie. at least on a sid VM).
  * Backport S7104625 as d/patches/icedtea7-forest-jdk_7104625*.patch
    to check for logging to prevent wasted CPU (Closes: #651423).

openjdk-7 (7~u3-2.1-2) unstable; urgency=low

  [ Matthias Klose ]
  * Use NanumMyeongjo as the preferred korean font. LP: #792471.
  * Fix crash in java.net.NetworkInterface.getNetworkInterfaces() when
    ifr_ifindex exceeds 255. LP: #925218. S7078386.
  * Use IPAfont as the preferred japanesse font. Closes: #646054.
  * Build using gcj on alpha and armel. Closes: #655750.

  [ Damien Raude-Morvan ]
  * d/patches/sparc-stubgenerator.diff: Fix FTBFS on sparc on
    stubGenerator_sparc.cpp by using explicit class typedef
    (Closes: #660871).
  * d/patches/fix_extra_flags.diff: Improve support for hardened build,
    also send flags to jdk build and send -Wl,-z,relro during hotspot link.
  * Bump Standards-Version to 3.9.3: no changes needed.
  * d/control: Don't use nonexistent dlopenjl:Recommends substvar,
    replaced by dlopenhl:Recommends.
  * d/*.{prerm,postrm}: Use set -e inside script instead of sh -e shebang.
  * Cleanup lintian-overrides.

openjdk-7 (7~u3-2.1-1ubuntu2) precise; urgency=low

  * Make sure that the nss.cfg doesn't mention any library path.
    LP: #939361, #939419.
  * Disable the accessibility wrapper, doesn't work yet. LP: #935296.

openjdk-7 (7~u3-2.1-1ubuntu1) precise; urgency=low

  [ Damien Raude-Morvan ]
  * d/patches/jexec.diff: Dropped, uneeded and not compatible with multi-arch.
  * d/rules: Use dpkg-buildflags to enable hardened build.
    (Closes: #660021).

  [ Matthias Klose ]
  * Merge r522 from openjdk6:
    - Make upgrades from non-multiarch to multiarch builds more silent.
    - Fix order of grant decls in java.policy.
    - Make doc files multi-arch installable.
    - JB-archive.applications.in: Use /usr/bin/java by default. Maybe
      should be moved to the default-jdk package.
  * Explicitly look for the gthread-2.0 pkgconfig module.

openjdk-7 (7~u3-2.1-1) unstable; urgency=low

  * Update icedtea7 2.1 (OpenJDK7 ~u3 release):
    - Check for logging to prevent wasted CPU (Closes: #651423).
  * Fix following security issues:
    - S7082299, CVE-2011-3571: Fix in AtomicReferenceArray
    - S7088367, CVE-2011-3563: Fix issues in java sound
    - S7110683, CVE-2012-0502: Issues with some KeyboardFocusManager method
    - S7110687, CVE-2012-0503: Issues with TimeZone class
    - S7110700, CVE-2012-0505: Enhance exception throwing mechanism in
      ObjectStreamClass
    - S7110704, CVE-2012-0506: Issues with some method in corba
    - S7112642, CVE-2012-0497: Incorrect checking for graphics rendering object
    - S7118283, CVE-2012-0501: Better input parameter checking in zip file
      processing
    - S7126960, CVE-2011-5035: Add property to limit number of request headers
      to the HTTP Server

  [ Matthias Klose ]
  * openjdk-7-jre-lib: Mark as Multi-Arch: foreign.

  [ Damien Raude-Morvan ]
  * Merge r501-521 from openjdk6:
    - Fix plugin name in jinfo file.
    - Fix build flags for cppInterpreter_arm.o.
    - Use java-atk-wrapper instead of java-access-bridge for accessibility.
    - Make the java.policy file multi-arch installable.
    - Don't install desktop and menu files for multiarch builds.
      Needs a better solution.
    - Don't install an alternative for the deprecated apt tool.
    - Make the upgrade from a non-multiarch installation location more
      robust; don't depend on version numbers, but check the path of the
      alternatives.
    - Disable test for armel and powerpc (broken on buildd)
  * d/rules: Make symbolic links to src.zip on /usr/lib/jvm/java-7-openjdk-amd64
    like openjdk-6-jdk (Closes: #649618).
  * d/rules: Pass -n to gzip when compressing manpages to be Multi-Arch: same safe.
  * d/rules: Add build-arch/build-indep target.
  * d/rules: Re-enable Cacao VM!
  * d/{rules,control}: Only rhino 1.7R3 is supported by openjdk7, update B-D.
  * d/patches/hotspot-s390.diff: Update for latest Hotspot.
  * d/patches/icedtea-patch.diff: Move nssLibraryDirectory handling to d/rules.
  * d/rules: Remove --with-*-drop-zip options, as code drops are embedded.
  * d/patches/hsx23-zero.patch, patches/shark-compiler-fixes.patch:
    Fix FTBFS for Zero under Hotspot >= v22.
  * d/patches/kfreebsd-*: Refreshed.
  * d/control: Make openjdk-7-source:all package binNMU-able by using
    Depends ">=" on openjdk-7-jre (ie. src.zip won't change).

openjdk-7 (7~b147-2.0-1) unstable; urgency=low

  * New upstream IcedTea7 release.
    - S7000600, CVE-2011-3547: InputStream skip() information leak.
    - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor.
    - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow.
    - S7032417, CVE-2011-3552: excessive default UDP socket limit under
      SecurityManager.
    - S7046794, CVE-2011-3553: JAX-WS stack-traces information leak.
    - S7046823, CVE-2011-3544: missing SecurityManager checks in scripting
      engine.
    - S7055902, CVE-2011-3521: IIOP deserialization code execution.
    - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error
      checks.
    - S7064341, CVE-2011-3389: HTTPS: block-wise chosen-plaintext attack
      against SSL/TLS (BEAST).
    - S7070134, CVE-2011-3558: HotSpot crashes with sigsegv from PorterStemmer.
    - S7077466, CVE-2011-3556: RMI DGC server remote code execution.
    - S7083012, CVE-2011-3557: RMI registry privileged code execution.
    - S7096936, CVE-2011-3560: missing checkSetFactory calls in
      HttpsURLConnection.

  [ Matthias Klose ]
  * Merge debian packaging r501 from openjdk-6:
    - Tighten inter-package dependencies for Debian builds. Closes: #641240.
  * Build-depend on wdiff.
 -- Matthias Klose <doko@xxxxxxxxxx>   Wed, 17 Oct 2012 16:22:48 +0200

** Changed in: openjdk-7 (Ubuntu Oneiric)
       Status: Confirmed => Fix Released

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-3389

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-3521

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-3544

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-3547

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-3548

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-3551

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-3552

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-3553

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-3554

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-3556

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-3557

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-3558

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-3560

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-3563

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-3571

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-5035

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-0497

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-0501

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-0502

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-0503

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-0505

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-0506

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-1726

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-3216

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-4416

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-4681

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5068

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5069

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5070

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5071

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5072

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5073

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5074

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5075

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5076

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5077

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5079

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5081

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5084

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5085

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5086

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5087

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5088

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5089

-- 
You received this bug notification because you are a member of OpenJDK,
which is subscribed to openjdk-6 in Ubuntu.
https://bugs.launchpad.net/bugs/925218

Title:
  Crash in java.net.NetworkInterface.getNetworkInterfaces() when
  ifr_ifindex exceeds 255

Status in “openjdk-6” package in Ubuntu:
  Fix Released
Status in “openjdk-7” package in Ubuntu:
  Fix Released
Status in “openjdk-6” source package in Oneiric:
  Fix Released
Status in “openjdk-7” source package in Oneiric:
  Fix Released

Bug description:
  If the system contains at least one network interface in state "UP"
  whose interface index (ifr_ifindex) is greater than 255, any calls to
  java.net.NetworkInterface.getNetworkInterfaces() will fail horribly,
  usually with a glibc-detected buffer overflow.  This is on Ubuntu
  11.10 amd64 with openjdk-6-jre-headless version
  6b23~pre11-0ubuntu1.11.10.1 0

  Interface index numbers can get quite large when we're on a system
  where network interfaces are added and removed frequently.  For
  example, miredo (a teredo implementation) seems to create and destroy
  a tuntap interface whenever we need to reestablish the teredo tunnel
  -- which can be quite often on a laptop.  High interface numbers can
  also be induced artificially by repeatedly adding and removing, say, a
  macvlan interface.

  I'm attaching a simple shell script that demonstrates this bug, along
  with the glibc buffer overflow crash output that results. I'm also
  attaching a gdb backtrace.

  The problem seems to be caused by the Linux version of the
  enumIPv6Interfaces function in
  openjdk/jdk/src/solaris/native/java/net/NetworkInterface.c, which
  attempts to parse the contents of /proc/net/if_inet6.  When we have an
  interface with a high index, that file looks something like this:

  > fe800000000000000000ffffffffffff 10b 40 20 80   teredo
  > 20010000<--address-edited-out--> 10b 20 00 80   teredo
  > fe80000000000000021558fffec629b6 02 40 20 80     eth0
  > fe8000000000000002197efffec16a76 03 40 20 80    wlan0
  > 00000000000000000000000000000001 01 80 10 80       lo

  The second column contains the interface index in hex.  Notice that it's normally two characters long, but it becomes longer when the index exceeds 255.  However, enumIPv6Interfaces uses fscanf with the format string
    "%4s%4s%4s%4s%4s%4s%4s%4s %02x %02x %02x %02x %20s\n"
  which insists that the index is only two characters long.  Thus, an index that's 3 chars long causes fscanf to give us lots of garbage, eventually resulting in a crash when we try to do something with the nonsense.

  I'm attaching a patch that contains a simple fix.  However, it might
  be a good idea to find a better way to do this and replace this
  fragile parsing stuff altogether, esp. since the kernel docs don't
  even bother to document the format of /proc/net/if_inet6.  (Netlink,
  maybe?  How does 'ip addr list' do it?)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openjdk-6/+bug/925218/+subscriptions


References