# HG changeset patch
# User Andrew John Hughes <ahughes@redhat.com>
# Date 1325833340 0
# Node ID 9316ce0e360088ceaadf4d4052ed7e16a9baf1a8
# Parent  f844632b05a01543bcd29e9efb0a0bc4e7311cba
S7103725, RH767129: REGRESSION - 6u29 breaks ssl connectivity using TLS_DH_anon_WITH_AES_128_CBC_SHA

2011-12-22  Andrew John Hughes  <ahughes@redhat.com>

	* Makefile.am: Add new patch.
	* patches/openjdk/7103725-ssl_beast_regression.patch:
	Add OpenJDK backport.
	* NEWS: Updated.

diff -r f844632b05a0 -r 9316ce0e3600 ChangeLog
--- a/ChangeLog	Thu Jan 05 12:05:12 2012 -0500
+++ b/ChangeLog	Fri Jan 06 07:02:20 2012 +0000
@@ -1,3 +1,10 @@
+2011-12-22  Andrew John Hughes  <ahughes@redhat.com>
+
+	* Makefile.am: Add new patch.
+	* patches/openjdk/7103725-ssl_beast_regression.patch:
+	Add OpenJDK backport.
+	* NEWS: Updated.
+
 2012-01-04 Omair Majid  <omajid@redhat.com>
 
 	S7102369, S7094468: remove java.rmi.server.codebase property parsing from
diff -r f844632b05a0 -r 9316ce0e3600 Makefile.am
--- a/Makefile.am	Thu Jan 05 12:05:12 2012 -0500
+++ b/Makefile.am	Fri Jan 06 07:02:20 2012 +0000
@@ -366,7 +366,8 @@
 	patches/openjdk/7034464-hugepage.patch \
 	patches/openjdk/7037939-hugepage.patch \
 	patches/openjdk/7043564-hugepage.patch \
-	patches/openjdk/7102369-7094468-rmiregistry.patch
+	patches/openjdk/7102369-7094468-rmiregistry.patch \
+	patches/openjdk/7103725-ssl_beast_regression.patch
 
 if WITH_ALT_HSBUILD
 ICEDTEA_PATCHES += \
diff -r f844632b05a0 -r 9316ce0e3600 NEWS
--- a/NEWS	Thu Jan 05 12:05:12 2012 -0500
+++ b/NEWS	Fri Jan 06 07:02:20 2012 +0000
@@ -16,6 +16,7 @@
   - S7037939: NUMA: Disable adaptive resizing if SHM large pages are used
   - S7102369: remove java.rmi.server.codebase property parsing from registyimpl
   - S7094468: rmiregistry clean up
+  - S7103725, RH767129: REGRESSION - 6u29 breaks ssl connectivity using TLS_DH_anon_WITH_AES_128_CBC_SHA
 
 New in release 1.10.4 (2011-10-18):
 
diff -r f844632b05a0 -r 9316ce0e3600 patches/openjdk/7103725-ssl_beast_regression.patch
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/patches/openjdk/7103725-ssl_beast_regression.patch	Fri Jan 06 07:02:20 2012 +0000
@@ -0,0 +1,22 @@
+# HG changeset patch
+# User robm
+# Date 1324518632 0
+# Node ID cb20ed4b953add8f2443831a0552640efca53ab7
+# Parent  6b46f3c7c97cb060f88b196171b95d33bff80b7c
+7103725: REGRESSION - 6u29 breaks ssl connectivity using TLS_DH_anon_WITH_AES_128_CBC_SHA
+Summary: resolving an issue with 7064341.
+Reviewed-by: wetmore, coffeys
+
+diff -r 6b46f3c7c97c -r cb20ed4b953a src/share/classes/sun/security/ssl/AppOutputStream.java
+--- openjdk/jdk/src/share/classes/sun/security/ssl/AppOutputStream.java	Wed Nov 16 13:14:57 2011 +0000
++++ openjdk/jdk/src/share/classes/sun/security/ssl/AppOutputStream.java	Thu Dec 22 01:50:32 2011 +0000
+@@ -90,7 +90,8 @@
+             do {
+                 int howmuch;
+                 if (isFirstRecordOfThePayload && c.needToSplitPayload()) {
+-                    howmuch = Math.min(0x01, r.availableDataBytes());
++                    howmuch = (len == 0) ? 0 : Math.min(
++                        0x01, r.availableDataBytes());
+                 } else {
+                     howmuch = Math.min(len, r.availableDataBytes());
+                 }