# HG changeset patch
# User andrew
# Date 1318549859 -3600
# Node ID 63bbe6780dd3f3ffda3d0f57165702ed36d89a62
# Parent  770d063de1480f40cc66b459f415c90db48c78b4
7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager

diff -r 770d063de148 -r 63bbe6780dd3 src/share/classes/sun/net/ResourceManager.java
--- a/src/share/classes/sun/net/ResourceManager.java	Fri Oct 14 00:50:39 2011 +0100
+++ b/src/share/classes/sun/net/ResourceManager.java	Fri Oct 14 00:50:59 2011 +0100
@@ -41,13 +41,14 @@
 
     /* default maximum number of udp sockets per VM
      * when a security manager is enabled.
-     * The default is 1024 which is high enough to be useful
+     * The default is 25 which is high enough to be useful
      * but low enough to be well below the maximum number
-     * of port numbers actually available on all OSes for
-     * such sockets (5000 on some versions of windows)
+     * of port numbers actually available on all OSes
+     * when multiplied by the maximum feasible number of VM processes
+     * that could practically be spawned.
      */
 
-    private static final int DEFAULT_MAX_SOCKETS = 1024;
+    private static final int DEFAULT_MAX_SOCKETS = 25;
     private static final int maxSockets;
     private static final AtomicInteger numSockets;