[regression] Java applications leaks shmem chunks

[Alex Crazy]

After last update of openjdk few days ago system is going to be unsable, because any java application (JetBrains, IcedTea) leaks shmem chunks, which can be detected by "ipcs -m -p" command. This issues to unable to start any Qt application - vlc for example:

QNativeImage: Unable to attach to shared memory segment.
(vlc:8541): Gdk-WARNING **: shmget failed: error 28

Steps to reproduce:
- run any java application
- monitor shmem stats: ipcs -m -p | wc -l
- try to run any Qt app

~$ java -version
java version "1.7.0_85"
OpenJDK Runtime Environment (IcedTea 2.6.1) (7u85-2.6.1-5ubuntu0.15.04.1)
OpenJDK 64-Bit Server VM (build 24.85-b03, mixed mode)

~$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 15.04
Release: 15.04
Codename: vivid

[Baiduzhyi-devel (baiduzhyi-devel)]

Created attachment 1396
Patch to fix the bad merge.

Finally found the cause of the issue. Looks like a bad merge from 2 parents.

Revision 7726:4b26f93b23ba is the first to cause the crash.

$ hg log -r 7726:4b26f93b23ba
changeset: 7726:4b26f93b23ba
parent: 7506:6aaf00000bd5
parent: 7696:8dc56d0f3e86
user: goetz
date: Mon Jul 07 12:45:48 2014 +0200
summary: Merge

Both parents, 7506:6aaf00000bd5 and 7696:8dc56d0f3e86, are working fine.

Upstream repo is different than icedtea7-forest, and contains working code.

Please see the patch for the issue in attachment.

[Andrew John Hughes (ahughes)]

The changes from:

changeset: 7162:cd2d8f23e93c
user: alitvinov
date: Thu Dec 19 15:21:08 2013 +0400
summary: 8025775: JNI warnings in TryXShmAttach

have got lost in this merge. Re-applying this should fix it.

[Mercurial (mercurial)]

details: http://icedtea.classpath.org//hg/icedtea7-forest/jdk?cmd=changeset;node=a2334007f1a8
author: andrew
date: Thu Jul 30 17:52:32 2015 +0100

 PR2568: openjdk causes a full desktop crash on RHEL 6 i586
 Summary: Re-apply "8025775: JNI warnings in TryXShmAttach"; some changes lost in bad merge changeset 4b26f93b23ba

[Mercurial (mercurial)]

details: http://icedtea.classpath.org//hg/icedtea7?cmd=changeset;node=761344512703
author: Andrew John Hughes <email address hidden>
date: Tue Sep 08 23:46:03 2015 +0100

 Bump to icedtea-2.7.0pre01.

 Upstream changes:
   - OPENJDK7-01: Allow OpenJDK to build on PaX-enabled kernels
   - OPENJDK7-02: Fix build where PAX_COMMAND is not specified
   - OPENJDK7-03: Only apply PaX-marking when needed by a running PaX kernel
   - OPENJDK7-04: Revert introduction of lambda expression in sun.lwawt.macosx.LWCToolkit
   - OPENJDK7-05: Fix mistake in 8075374 backport
   - PR2487: Make jdk8 mode the default for jdk.tls.ephemeralDHKeySize
   - PR2501: libjavasctp.so doesn't need to link against libdl when linking against libsctp
   - PR2502: Remove -fno-tree-vectorize workaround now http://gcc.gnu.org/PR63341 is fixed
   - PR2503: Add existence check for all optional dependencies in jdk_generic_profile.sh
   - PR2521: Systems with a GLib without libgio segfault when obtaining proxy information
   - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
   - S7105883, PR2560: JDWP: agent crash if there exists a ThreadGroup with null name
   - S7124253: [macosx] Flavor change notification not coming
   - S8007219: [macosx] Frame size reverts meaning of maximized attribute if frame size close to display
   - S8013581: [macosx] Key Bindings break with awt GraphicsEnvironment setFullScreenWindow
   - S8014464: Update jcheck for OpenJDK 7
   - S8016105, PR2560: Add complementary RETURN_NULL allocation macros in allocation.hpp
   - S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
   - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging String.contentEquals()
   - S8022683, PR2560: JNI GetStringUTFChars should return NULL on allocation failure not abort the VM
   - S8025922, PR2560: JNI access to Strings need to check if the value field is non-null
   - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh Failed to initialize connector
   - S8027561: [macosx] Cleanup "may not respond to selector" warnings in native code
   - S8028617: Dvorak keyboard mapping not honored when ctrl key pressed
   - S8029868: Fix KSS issues in sun.lwawt.macosx
   - S8042205: javax/management/monitor/*: some tests didn't get all the notifications
   - S8043201: Deprecate RC4 in SunJSSE provider
   - S8043202: Prohibit RC4 cipher suites
   - S8046817: JDK 8 schemagen tool does not generate xsd files for enum types
   - S8048194: GSSContext.acceptSecContext fails when a supported mech is not initiator preferred
   - S8048214: Linker error when compiling G1SATBCardTableModRefBS after include order changes
   - S8064546: CipherInputStream throws BadPaddingException if stream is not fully read
   - S8065764: javax/management/monitor/CounterMonitorTest.java hangs
   - S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java hangs
   - S8067694: Improved certification checking
   - S8068674: Increment minor version of HSx for 7u85 and initialize the build number
   - S8071668: [macosx] Clipboard does not work with 3rd parties Clipboard Managers
   - S8071715: Tune font layout engine
   - S8071731: Better scaling for C1
   - S8072490:...

[Mike Nerone (mikenerone)]

I am experiencing the glitching reported to KDE for multiple distros (including another Gentoo user) at https://bugs.kde.org/show_bug.cgi?id=350976. Another user there reports that OpenJDK-1.8 resolves the problem, but we don't have dev-java/icedtea:8 in the java overlay at this time.

Portage 2.2.20.1 (python 3.4.1-final-0, default/linux/amd64/13.0/desktop/kde/systemd, gcc-4.8.5, glibc-2.20-r2, 4.0.5-gentoo x86_64)
=================================================================
                         System Settings
=================================================================
System uname: Linux-4.0.5-gentoo-x86_64-Intel-R-_Core-TM-_i7-3840QM_CPU_@_2.80GHz-with-gentoo-2.2
KiB Mem: 32805220 total, 20148380 free
KiB Swap: 0 total, 0 free
Timestamp of repository gentoo: Fri, 25 Sep 2015 06:00:01 +0000
sh bash 4.3_p39
ld GNU ld (Gentoo 2.25.1 p1.1) 2.25.1
app-shells/bash: 4.3_p39::gentoo
dev-java/java-config: 2.2.0::gentoo
dev-lang/perl: 5.20.2::gentoo
dev-lang/python: 2.7.9-r1::gentoo, 3.4.1::gentoo
dev-util/cmake: 3.2.2::gentoo
dev-util/pkgconfig: 0.28-r2::gentoo
sys-apps/baselayout: 2.2::gentoo
sys-apps/openrc: 0.17::gentoo
sys-apps/sandbox: 2.6-r1::gentoo
sys-devel/autoconf: 2.13::gentoo, 2.69::gentoo
sys-devel/automake: 1.11.6-r1::gentoo, 1.14.1::gentoo, 1.15::gentoo
sys-devel/binutils: 2.25.1-r1::gentoo
sys-devel/gcc: 4.8.5::gentoo
sys-devel/gcc-config: 1.7.3::gentoo
sys-devel/libtool: 2.4.6::gentoo
sys-devel/make: 4.1-r1::gentoo
sys-kernel/linux-headers: 3.18::gentoo (virtual/os-headers)
sys-libs/glibc: 2.20-r2::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: rsync
    sync-uri: rsync://rsync.gentoo.org/gentoo-portage
    priority: -1000
    sync-uri: git://github.com/pantera31752/open-overlay.git
    masters: gentoo
    priority: 50

steam-overlay
    location: /var/lib/layman/steam-overlay
    sync-type: laymansync
    sync-uri: git://github.com/anyc/steam-overlay.git
    masters: gentoo
    priority: 50

ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="*"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=native -O2 -pipe -fomit-frame-pointer"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt /usr/share/themes/oxygen-gtk/gtk-2.0 /var/lib/hsqldb"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-march=native -O2 -pipe -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
EMERGE_DEFAULT_OPTS=" --with-bdeps y --binpkg-respect-use=y"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs buildpkg collision-protect config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="http://distfiles.gentoo.org"
LANG="en_US.UTF-8"
LC_ALL="en_US.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed,-z,now,--...

[Chewi-y (chewi-y)]

(In reply to Mike Nerone from comment #0)
> Another user there reports that
> OpenJDK-1.8 resolves the problem, but we don't have dev-java/icedtea:8 in
> the java overlay at this time.

Actually we do but it's called icedtea-3 because upstream wants us to use their versioning. It's a prerelease though and the current ebuild is outdated. It probably won't fetch properly now.

If you hear of any other workarounds, please let us know.

[Gentoo-bugzilla-2012 (gentoo-bugzilla-2012)]

I'm also affected by this problem. Possible workaround is using another JDK (for example oracle-jdk-bin)

[Mike Nerone (mikenerone)]

Yes, that's true. To my knowledge, only OpenJDK/icedtea exhibits this issue (one person in the KDE bug claims Oracle's does, as well, but I suspect that the wrong jre/jdk is actually selected).

[Jeremy-william-murphy (jeremy-william-murphy)]

*** Bug 561710 has been marked as a duplicate of this bug. ***

[Gnu-andrew (gnu-andrew)]

(In reply to James Le Cuirot from comment #1)
> (In reply to Mike Nerone from comment #0)
> > Another user there reports that
> > OpenJDK-1.8 resolves the problem, but we don't have dev-java/icedtea:8 in
> > the java overlay at this time.
>
> Actually we do but it's called icedtea-3 because upstream wants us to use
> their versioning. It's a prerelease though and the current ebuild is
> outdated. It probably won't fetch properly now.
>
> If you hear of any other workarounds, please let us know.

It's slotted as 8 though, so icedtea:8 works. I emerged it as that just today.

The ebuild has been updated to pre06 which uses 8u60-b24. Testing is welcomed so we can make sure the final release is as good as possible.

[Gnu-andrew (gnu-andrew)]

(In reply to Mike Nerone from comment #3)
> Yes, that's true. To my knowledge, only OpenJDK/icedtea exhibits this issue
> (one person in the KDE bug claims Oracle's does, as well, but I suspect that
> the wrong jre/jdk is actually selected).

As far as I can tell from https://bugs.kde.org/show_bug.cgi?id=350976, two completely different versions are being compared; OpenJDK/IcedTea 7 vs. proprietary Oracle binaries for 8. Try emerging icedtea:8 from java-overlay and see if this solves the issue.

It seems likely that a fix needs backporting from 8 to 7 to fix this there, but there's not enough info here to tell what that might be.

[Mike Nerone (mikenerone)]

I've been using dev-java/icedtea-3.0.0_pre06 for about an hour now with no hiccups nor any glitching. I'll continue to use it and report back if it returns.

[E-alexander (e-alexander)]

I launched an IP-KVM java applet and here what I see:

$ sudo ipcs -m -p | awk '{print $3}' | sort | uniq -c | sort -n
      1 1408
      1 1526
      1 cpid
      1 Memory
      2
      3 1778
      3 1898
      3 3856
    780 4339
$ ps www 4339
  PID TTY STAT TIME COMMAND
 4339 tty2 Sl+ 1:17 /etc/java-config-2/current-icedtea-web-vm/bin/java -Xbootclasspath/a:/usr/share/icedtea-web/netx.jar:/usr/share/icedtea-web/plugin.jar:no -classpath /opt/icedtea-bin-7.2.6.1/jre/lib/rt.jar sun.applet.PluginMain /run/user/1000/icedteaplugin-puleglot-1pHWZM/4332-icedteanp-plugin-to-appletviewer /run/user/1000/icedteaplugin-puleglot-1pHWZM/4332-icedteanp-appletviewer-to-plugin /run/user/1000/icedteaplugin-puleglot-1pHWZM/4332-icedteanp-plugin-debug-to-appletviewer

The number of shared memory segments used by this java process constantly grows:

$ sudo ipcs -m -p | awk '{print $3}' | sort | uniq -c | grep 4339
    839 4339
...
$ sudo ipcs -m -p | awk '{print $3}' | sort | uniq -c | grep 4339
    865 4339

The default limit for a number of shared memory segments:

$ sudo sysctl kernel.shmmni
kernel.shmmni = 4096

[E-alexander (e-alexander)]

I applied the patch from [1] to icedtea-7.2.6.1 and java stopped leaking shm segments. ^_^ This should also fix problems with QT, alsa, etc.

[1] http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2568

[E-alexander (e-alexander)]

BTW, the same issue in other bug tracking systems:

https://bugzilla.redhat.com/show_bug.cgi?id=1248530
https://bugs.archlinux.org/task/45824
https://bugzilla.opensuse.org/show_bug.cgi?id=948301
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=799587

[Chewi-y (chewi-y)]

(In reply to Alexander Tsoy from comment #9)
> I applied the patch from [1] to icedtea-7.2.6.1 and java stopped leaking shm
> segments. ^_^ This should also fix problems with QT, alsa, etc.
>
> [1] http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2568

Thanks, I am attempting to build icedtea with a revised ebuild now and will check the result in the morning, though I'm not aware of any simple way to reproduce the problem. I don't use KDE. If everything looks good, I'll commit the result tomorrow but I don't wish to apply it to icedtea-bin. That's a lot of work and it probably won't be too long before the next release.

[E-alexander (e-alexander)]

(In reply to James Le Cuirot from comment #11)
> Thanks, I am attempting to build icedtea with a revised ebuild now and will
> check the result in the morning,

I'll attach patches from my local overlay, just in case.

> though I'm not aware of any simple way to reproduce the problem.

Just start any java application with GUI and see how it's leaking shared memory.

> I don't use KDE.

Me too. :)

[E-alexander (e-alexander)]

Created attachment 414164
files/7-xshm-fix.patch

[E-alexander (e-alexander)]

Created attachment 414166
icedtea-7.2.6.1-r1.ebuild.patch

[Mike Nerone (mikenerone)]

I've tested with alexander's ebuild/patch from #12, #13, and #14, and so far, it does, indeed, appear to resolve the glitching in KDE.

[Alex (hello71)]

*** Bug 561610 has been marked as a duplicate of this bug. ***

[kripton (kripton-r)]

Same here, dup of https://bugs.gentoo.org/show_bug.cgi?id=560268

See also https://bugs.archlinux.org/task/45824

[Chewi-y (chewi-y)]

*** Bug 560268 has been marked as a duplicate of this bug. ***

[Bircoph-4 (bircoph-4)]

*** Bug 561104 has been marked as a duplicate of this bug. ***

[Chewi-y (chewi-y)]

Sorry for the wait. I've just committed the fix to dev-java/icedtea-7.2.6.1-r1. I took the later patch from the icedtea bug report as that seems to be the full fix, though I am admittedly a little confused about what actually happened. It does apply cleanly and the problem seems to go away. I was able to observe it with just policytool, which comes with the JDK.

I'll fix icedtea-bin if I have time but no promises. It takes ages to build on arm so it would only be for amd64 and x86.

[kripton (kripton-r)]

(In reply to James Le Cuirot from comment #20)
> I've just committed the fix to dev-java/icedtea-7.2.6.1-r1.

Fix confirmed working here. Thank you very much!

[Chewi-y (chewi-y)]

gnu_andrew tells me the next icedtea will be out in a week or so. I'll update icedtea-bin shortly after.

[Dimgel (dimgel)]

(In reply to James Le Cuirot from comment #20)
> I've just committed the fix to dev-java/icedtea-7.2.6.1-r1.

Works for me too for a week now. Thank you! :)

[Mercurial (mercurial)]

details: http://icedtea.classpath.org//hg/release/icedtea7-forest-2.6/jdk?cmd=changeset;node=e92ba87e90a2
author: andrew
date: Thu Jul 30 17:52:32 2015 +0100

 PR2568: openjdk causes a full desktop crash on RHEL 6 i586
 Summary: Re-apply "8025775: JNI warnings in TryXShmAttach"; some changes lost in bad merge changeset 4b26f93b23ba

[Mercurial (mercurial)]

details: http://icedtea.classpath.org//hg/release/icedtea7-2.6?cmd=changeset;node=723ef630c332
author: Andrew John Hughes <email address hidden>
date: Tue Oct 20 04:30:23 2015 +0100

 Bump to icedtea-2.6.2pre02.

 Upstream changes:
   - Bump to icedtea-2.6.2pre01
   - Bump to icedtea-2.6.2pre02
   - PR2512: Reset success following calls in LayoutManager.cpp
   - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
   - S6880559, PR2674: Enable PKCS11 64-bit windows builds
   - S6904403, PR2674: assert(f == k-&gt;has_finalizer(),&quot;inconsistent has_finalizer&quot;) with debug VM
   - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid spurious wakeup
   - S7059542, PR2674: JNDI name operations should be locale independent
   - S7105461, PR2571: Large JTables are not rendered correctly with Xrender pipeline
   - S7105883, PR2560: JDWP: agent crash if there exists a ThreadGroup with null name
   - S7107611, PR2674: sun.security.pkcs11.SessionManager is scalability blocker
   - S7127066, PR2674: Class verifier accepts an invalid class file
   - S7150092, PR2674: NTLM authentication fail if user specified a different realm
   - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine fails with OOM for jdk8 with XRender pipeline
   - S7152582, PR2674: PKCS11 tests should use the NSS libraries available in the OS
   - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in UTF8Reader of SAXParser
   - S7177045, PR2674: Rework the TestProviderLeak.java regression test, it is too fragile to low memory errors.
   - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
   - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java fails intermittently
   - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on Ubuntu 12.04
   - S8011709, PR2509: [parfait] False positive: memory leak in jdk/src/share/native/sun/font/layout/CanonShaping.cpp
   - S8012971, PR2674: PKCS11Test hiding exception failures
   - S8016105, PR2560: Add complementary RETURN_NULL allocation macros in allocation.hpp
   - S8020424, PR2674: The NSS version should be detected before running crypto tests
   - S8020443, PR2674: Frame is not created on the specified GraphicsDevice with two monitors
   - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging String.contentEquals()
   - S8022683, PR2560: JNI GetStringUTFChars should return NULL on allocation failure not abort the VM
   - S8023052, PR2509: JVM crash in native layout
   - S8025922, PR2560: JNI access to Strings need to check if the value field is non-null
   - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh Failed to initialize connector
   - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java unstable again
   - S8033069, PR2674: mouse wheel scroll closes combobox popup
   - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
   - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3 and libsoftokn3 version mismatches
   - S8042855, PR2509: [parfait] Potential null pointer dereference in IndicLayoutEngine.cpp
   - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
   - ...

[Chewi-y (chewi-y)]

*** Bug 564740 has been marked as a duplicate of this bug. ***

[Alex Crazy (k0l0b0k)]

- monitor shmem stats: ipcs -m -p | wc -l - the number of lines will increase in time
- try to run any Qt app - when previous command shows you 4100 or above

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Matthias Laumer (matthias-laumer)]

The same here (using JetBrains) and developing QT applications.
Only solution until now is, log off and on again (this solves the issue for 10 -15 minutes, depending on how often I have to start a Qt Application).

java -showversion >>
java version "1.7.0_85"
OpenJDK Runtime Environment (IcedTea 2.6.1) (7u85-2.6.1-5ubuntu0.14.04.1)
OpenJDK 64-Bit Server VM (build 24.85-b03, mixed mode)

[Vreixo Formoso (metalpain2002)]

Same problem here. Starting the QT apps with QT_GRAPHICSSYSTEM=native at least make the applications usable, but there're still some artifacts remaining.

[Alex (alexlsh)]

Same bug in Ubuntu 14.04 trusty.

~$ java -version
java version "1.7.0_85"
OpenJDK Runtime Environment (IcedTea 2.6.1) (7u85-2.6.1-5ubuntu0.14.04.1)
OpenJDK 64-Bit Server VM (build 24.85-b03, mixed mode)

~$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 14.04.3 LTS
Release: 14.04
Codename: trusty

[mirohe (miguelrodriguezhernando)]

I have the same problem if I execute applications java (for example jitsi) the applications such as keepassX , virtualbox that use Qt fails.

My system:

- Ubuntu 14.04.3 LTS
- openjdk-7

java version "1.7.0_85"
OpenJDK Runtime Environment (IcedTea 2.6.1) (7u85-2.6.1-5ubuntu0.14.04.1)
OpenJDK Server VM (build 24.85-b03, mixed mode)

[Andreas M (amuttsch)]

Workaround for some QT applications: "export QT_X11_NO_MITSHM=1". This prevents QT from exchanging data with the X server via shared memory. Broken GUI's will work again.

Won't work for vlc for example, but okular or texstudio will work again.

[Steve Beattie (sbeattie)]

Untested packages to address the issue are currently building in the Ubuntu Security Proposed PPA https://launchpad.net/~ubuntu-security-proposed/+archive/ubuntu/ppa . Feedback to confirm that they do address the issue that people are facing would be appreciated. Thanks for your patience.

[Jan Stourac (xstourac)]

all my problems with VLC (xcb_xv vout display error), virtualbox (shifted content of dialogs) and skype (shifted content or empty dialogs) seems fixed now...good job :)

[Andreas M (amuttsch)]

Seems to work for me. Using "ipcs -m -p | wc -l" I checked the patch. Before patch (freshly rebooted system) launching a java app:

Before launch: 16
After launch: >500 (after working a bit with the app)

After patch:

Before launch: 8
After launch: 15

Thanks for the fix and providing a patch :-)

[David Gander (davidgander)]

We're also seeing this on Ubuntu 12.04 / precise with Netbeans 8.0.1.

/usr/lib/jvm/java-7-openjdk-i386/bin/java -version
java version "1.7.0_85"
OpenJDK Runtime Environment (IcedTea 2.6.1) (7u85-2.6.1-5ubuntu0.12.04.1)
OpenJDK Server VM (build 24.85-b03, mixed mode)

lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 12.04.5 LTS
Release: 12.04
Codename: precise

Looking forward to the patch, cheers!

[Chewi-y (chewi-y)]

Now fixed in icedtea-bin-7.2.6.2. ppc still needs to be stabilised but I'll close this now.

[Flames_in_Paradise (ellisistfroh-deactivatedaccount)]

Hits Qt based software in a bad way:

https://bugs.kde.org/show_bug.cgi?id=350976

[foxyterkel (terkel-d)]

I'm also having this bug on linux mint. After starting java used app, some app like vlc, skype, xkeepass gui failed.

[Matteo (matteonatali)]

Distributor ID: LinuxMint
Description: Linux Mint 17.1 Rebecca
Release: 17.1
Codename: rebecca

After the update java causes the crash of the xsession and of the window manager(WM_TRANSIENT NOT VALID)..I have done the rollback to the previous versione of openjdk

[neko (neka)]

Same here with Mint 17.2

DISTRIB_ID=LinuxMint
DISTRIB_RELEASE=17.2
DISTRIB_CODENAME=rafaela
DISTRIB_DESCRIPTION="Linux Mint 17.2 Rafaela"
NAME="Ubuntu"
VERSION="14.04.3 LTS, Trusty Tahr"

[Launchpad Janitor (janitor)]

This bug was fixed in the package openjdk-7 - 7u91-2.6.3-0ubuntu0.14.04.1

---------------
openjdk-7 (7u91-2.6.3-0ubuntu0.14.04.1) trusty-security; urgency=medium

  * Backport to Ubuntu 14.04.

openjdk-7 (7u91-2.6.3-0ubuntu0.15.10.1) wily-security; urgency=medium

  * Icedtea release 2.6.3 (based on 7u91):
  * Security fixes
    - S8142882, CVE-2015-4871: rebinding of the receiver of a
       DirectMethodHandle may allow a protected method to be accessed
  * Bad merge in IcedTea caused 2.6.1 to leak shmem chunks, affecting
    other applications such as QT and VLC, thanks Andrew Hughes for the
    fix in 2.6.2. (LP: #1512760)

openjdk-7 (7u91-2.6.2-1) unstable; urgency=medium

  [ Tiago Stürmer Daitx ]
  * IcedTea release 2.6.2 (based on 7u91):
  * Security fixes
    - S8048030, CVE-2015-4734: Expectations should be consistent
    - S8068842, CVE-2015-4803: Better JAXP data handling
    - S8076339, CVE-2015-4903: Better handling of remote object invocation
    - S8076383, CVE-2015-4835: Better CORBA exception handling
    - S8076387, CVE-2015-4882: Better CORBA value handling
    - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
    - S8076413, CVE-2015-4883: Better JRMP message handling
    - S8078427, CVE-2015-4842: More supportive home environment
    - S8078440: Safer managed types
    - S8080541: More direct property handling
    - S8080688, CVE-2015-4860: Service for DGC services
    - S8081760: Better group dynamics
    - S8086092, CVE-2015-4840: More palette improvements
    - S8086733, CVE-2015-4893: Improve namespace handling
    - S8087350: Improve array conversions
    - S8103671, CVE-2015-4805: More objective stream classes
    - S8103675: Better Binary searches
    - S8130078, CVE-2015-4911: Document better processing
    - S8130193, CVE-2015-4806: Improve HTTP connections
    - S8130864: Better server identity handling
    - S8130891, CVE-2015-4843: (bf) More direct buffering
    - S8131291, CVE-2015-4872: Perfect parameter patterning
    - S8132042, CVE-2015-4844: Preserve layout presentation
  * d/patches/it-debian-build-flags.diff: refreshed
  * d/patches/it-set-compiler.diff: refreshed
  * d/patches/it-use-quilt.diff: refreshed and updated
  * d/patches/it-jamvm-2.0.diff: refreshed
  * d/patches/xrender: removed as it was applied upstream

openjdk-7 (7u85-2.6.1-6) unstable; urgency=medium

  [ Tiago Stürmer Daitx ]
  * Security fixes
    - S8048030, CVE-2015-4734: Expectations should be consistent
    - S8068842, CVE-2015-4803: Better JAXP data handling
    - S8076339, CVE-2015-4903: Better handling of remote object invocation
    - S8076383, CVE-2015-4835: Better CORBA exception handling
    - S8076387, CVE-2015-4882: Better CORBA value handling
    - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
    - S8076413, CVE-2015-4883: Better JRMP message handling
    - S8078427, CVE-2015-4842: More supportive home environment
    - S8078440: Safer managed types
    - S8080541: More direct property handling
    - S8080688, CVE-2015-4860: Service for DGC services
    - S8081744, CVE-2015-4868: Clear out list corner case
    - S8081760: Better group dynamics
    - S8086092. CVE-2015-4840: More palette imp...

[Launchpad Janitor (janitor)]

This bug was fixed in the package openjdk-7 - 7u91-2.6.3-0ubuntu0.15.10.1

---------------
openjdk-7 (7u91-2.6.3-0ubuntu0.15.10.1) wily-security; urgency=medium

  * Icedtea release 2.6.3 (based on 7u91):
  * Security fixes
    - S8142882, CVE-2015-4871: rebinding of the receiver of a
       DirectMethodHandle may allow a protected method to be accessed
  * Bad merge in IcedTea caused 2.6.1 to leak shmem chunks, affecting
    other applications such as QT and VLC, thanks Andrew Hughes for the
    fix in 2.6.2. (LP: #1512760)

openjdk-7 (7u91-2.6.2-1) unstable; urgency=medium

  [ Tiago Stürmer Daitx ]
  * IcedTea release 2.6.2 (based on 7u91):
  * Security fixes
    - S8048030, CVE-2015-4734: Expectations should be consistent
    - S8068842, CVE-2015-4803: Better JAXP data handling
    - S8076339, CVE-2015-4903: Better handling of remote object invocation
    - S8076383, CVE-2015-4835: Better CORBA exception handling
    - S8076387, CVE-2015-4882: Better CORBA value handling
    - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
    - S8076413, CVE-2015-4883: Better JRMP message handling
    - S8078427, CVE-2015-4842: More supportive home environment
    - S8078440: Safer managed types
    - S8080541: More direct property handling
    - S8080688, CVE-2015-4860: Service for DGC services
    - S8081760: Better group dynamics
    - S8086092, CVE-2015-4840: More palette improvements
    - S8086733, CVE-2015-4893: Improve namespace handling
    - S8087350: Improve array conversions
    - S8103671, CVE-2015-4805: More objective stream classes
    - S8103675: Better Binary searches
    - S8130078, CVE-2015-4911: Document better processing
    - S8130193, CVE-2015-4806: Improve HTTP connections
    - S8130864: Better server identity handling
    - S8130891, CVE-2015-4843: (bf) More direct buffering
    - S8131291, CVE-2015-4872: Perfect parameter patterning
    - S8132042, CVE-2015-4844: Preserve layout presentation
  * d/patches/it-debian-build-flags.diff: refreshed
  * d/patches/it-set-compiler.diff: refreshed
  * d/patches/it-use-quilt.diff: refreshed and updated
  * d/patches/it-jamvm-2.0.diff: refreshed
  * d/patches/xrender: removed as it was applied upstream

openjdk-7 (7u85-2.6.1-6) unstable; urgency=medium

  [ Tiago Stürmer Daitx ]
  * Security fixes
    - S8048030, CVE-2015-4734: Expectations should be consistent
    - S8068842, CVE-2015-4803: Better JAXP data handling
    - S8076339, CVE-2015-4903: Better handling of remote object invocation
    - S8076383, CVE-2015-4835: Better CORBA exception handling
    - S8076387, CVE-2015-4882: Better CORBA value handling
    - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
    - S8076413, CVE-2015-4883: Better JRMP message handling
    - S8078427, CVE-2015-4842: More supportive home environment
    - S8078440: Safer managed types
    - S8080541: More direct property handling
    - S8080688, CVE-2015-4860: Service for DGC services
    - S8081744, CVE-2015-4868: Clear out list corner case
    - S8081760: Better group dynamics
    - S8086092. CVE-2015-4840: More palette improvements
    - S8086733, CVE-2015-4893: Improve namespace handling
    - S8087350: Improve array conver...

[Launchpad Janitor (janitor)]

This bug was fixed in the package openjdk-7 - 7u91-2.6.3-0ubuntu0.15.04.1

---------------
openjdk-7 (7u91-2.6.3-0ubuntu0.15.04.1) vivid-security; urgency=medium

  * Backport to Ubuntu 15.04.

openjdk-7 (7u91-2.6.3-0ubuntu0.15.10.1) wily-security; urgency=medium

  * Icedtea release 2.6.3 (based on 7u91):
  * Security fixes
    - S8142882, CVE-2015-4871: rebinding of the receiver of a
       DirectMethodHandle may allow a protected method to be accessed
  * Bad merge in IcedTea caused 2.6.1 to leak shmem chunks, affecting
    other applications such as QT and VLC, thanks Andrew Hughes for the
    fix in 2.6.2. (LP: #1512760)

openjdk-7 (7u91-2.6.2-1) unstable; urgency=medium

  [ Tiago Stürmer Daitx ]
  * IcedTea release 2.6.2 (based on 7u91):
  * Security fixes
    - S8048030, CVE-2015-4734: Expectations should be consistent
    - S8068842, CVE-2015-4803: Better JAXP data handling
    - S8076339, CVE-2015-4903: Better handling of remote object invocation
    - S8076383, CVE-2015-4835: Better CORBA exception handling
    - S8076387, CVE-2015-4882: Better CORBA value handling
    - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
    - S8076413, CVE-2015-4883: Better JRMP message handling
    - S8078427, CVE-2015-4842: More supportive home environment
    - S8078440: Safer managed types
    - S8080541: More direct property handling
    - S8080688, CVE-2015-4860: Service for DGC services
    - S8081760: Better group dynamics
    - S8086092, CVE-2015-4840: More palette improvements
    - S8086733, CVE-2015-4893: Improve namespace handling
    - S8087350: Improve array conversions
    - S8103671, CVE-2015-4805: More objective stream classes
    - S8103675: Better Binary searches
    - S8130078, CVE-2015-4911: Document better processing
    - S8130193, CVE-2015-4806: Improve HTTP connections
    - S8130864: Better server identity handling
    - S8130891, CVE-2015-4843: (bf) More direct buffering
    - S8131291, CVE-2015-4872: Perfect parameter patterning
    - S8132042, CVE-2015-4844: Preserve layout presentation
  * d/patches/it-debian-build-flags.diff: refreshed
  * d/patches/it-set-compiler.diff: refreshed
  * d/patches/it-use-quilt.diff: refreshed and updated
  * d/patches/it-jamvm-2.0.diff: refreshed
  * d/patches/xrender: removed as it was applied upstream

openjdk-7 (7u85-2.6.1-6) unstable; urgency=medium

  [ Tiago Stürmer Daitx ]
  * Security fixes
    - S8048030, CVE-2015-4734: Expectations should be consistent
    - S8068842, CVE-2015-4803: Better JAXP data handling
    - S8076339, CVE-2015-4903: Better handling of remote object invocation
    - S8076383, CVE-2015-4835: Better CORBA exception handling
    - S8076387, CVE-2015-4882: Better CORBA value handling
    - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
    - S8076413, CVE-2015-4883: Better JRMP message handling
    - S8078427, CVE-2015-4842: More supportive home environment
    - S8078440: Safer managed types
    - S8080541: More direct property handling
    - S8080688, CVE-2015-4860: Service for DGC services
    - S8081744, CVE-2015-4868: Clear out list corner case
    - S8081760: Better group dynamics
    - S8086092. CVE-2015-4840: More palette impr...

[Alex (alexlsh)]

Thanks for fix. Working better now.

[Viktor (vintos-chip)]

In Ubuntu 15.04 after update bug is repeated.

$ java -versio
java version "1.7.0_91"
OpenJDK Runtime Environment (IcedTea 2.6.3) (7u91-2.6.3-0ubuntu0.15.04.1)
OpenJDK 64-Bit Server VM (build 24.91-b01, mixed mode)

$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 15.04
Release: 15.04
Codename: vivid

[Matteo (matteonatali)]

working!yeah

Il 25/11/2015 22:44, Alex ha scritto:
> Thanks for fix. Working better now.
>

--

Matteo Natali

Sistema SRL

[David Gander (davidgander)]

Are there plans to provide this fix for precise too?

[David Gander (davidgander)]

Just seen this come through for precise this morning.

Thanks very much, `ipcs -m -p | wc -l` is showing much better numbers.