Heavyweight popups cause SecurityExceptions in applets

[Agrv]

When a sandboxed applet opens a popup menu, a security exception is thrown for the "setAlwaysonTop" call in the HeavyWeightWindow inner-class of javax.swing.Popup.

This bug was fixed by Sun since 6u10 (see http://bugs.sun.com/view_bug.do?bug_id=6675802) with a try/catch block ignoring the securityexception but is stil present in the openjdk on Ubuntu 10.04, preventing the popup menu to show.

[Matthias Klose (doko)]

please could you check, that this is fixed in the openjdk-7 packages found in
deb http://ppa.launchpad.net/openjdk/ppa/ubuntu lucid main

if yes, identification of the patch and backport is needed.

[Agrv (agrv)]

I am unable to install the openjdk-7 packages from the given repository because of dependency problems between openjdk-7-jre and openjdk-7-jre-headless. Each time I try to install one of them (or both simultaneously) it tells me the other one is not installable. I am using Ubuntu 10.04 64 bits. Is there a bug in the dependencies or am I missing something ? When I try to install icedtea-7-plugin the same problem appears.

[Agrv (agrv)]

However I have just checked the source code and indeed the issue appears to be fixed in openjdk-7 build b100, although I cannot test it. I also checked the openjdk-6 build b20 (as lucid is using the build b18) and it was not fixed yet.

How can I find the identification of the patch and backport ?

[Matthias Klose (doko)]

On 15.07.2010 09:37, Agrv wrote:
> I am unable to install the openjdk-7 packages from the given repository
> because of dependency problems between openjdk-7-jre and openjdk-7-jre-
> headless. Each time I try to install one of them (or both
> simultaneously) it tells me the other one is not installable. I am using
> Ubuntu 10.04 64 bits. Is there a bug in the dependencies or am I missing
> something ? When I try to install icedtea-7-plugin the same problem
> appears.

adding the line to /etc/apt/sources.list, running apt-get update and apt-get
install icedtea-7-plugin should work.

[Agrv (agrv)]

That's exactly what I did, but I get the following error message :
"The following packages have unmet depencies :
  icedtea-7-plugin: Depends: openjdk-7-jre (=7b89~pre1-0lucid1) but is not going to be installed
E: Broken packages"

Is there a mirror I could try ?

[Matthias Klose (doko)]

On 15.07.2010 17:37, Agrv wrote:
> That's exactly what I did, but I get the following error message :
> "The following packages have unmet depencies :
> icedtea-7-plugin: Depends: openjdk-7-jre (=7b89~pre1-0lucid1) but is not going to be installed
> E: Broken packages"

ahh, I see what is wrong. will fix it. for now, just download the packages and
install them with dpkg -i --force-depends *.deb

[Agrv (agrv)]

Thanks, forcing deps did the trick.
So I can confirm that the bug is fixed in the openjdk-7 packages.

[Agrv (agrv)]

What's the next step ? Is it possible to get it fixed for openjdk-6 on lucid or will we have to wait until openjdk-7 ? Thanks for your time.

[Matthias Klose (doko)]

well, identify the fix, backport it for openjdk-6 ...