changeset 4569:63bbe6780dd3

7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager
author andrew
date Fri, 14 Oct 2011 00:50:59 +0100
parents 770d063de148
children fc3acc1b4e55
files src/share/classes/sun/net/ResourceManager.java
diffstat 1 files changed, 5 insertions(+), 4 deletions(-) [+]
line wrap: on
line diff
--- a/src/share/classes/sun/net/ResourceManager.java	Fri Oct 14 00:50:39 2011 +0100
+++ b/src/share/classes/sun/net/ResourceManager.java	Fri Oct 14 00:50:59 2011 +0100
@@ -41,13 +41,14 @@
 
     /* default maximum number of udp sockets per VM
      * when a security manager is enabled.
-     * The default is 1024 which is high enough to be useful
+     * The default is 25 which is high enough to be useful
      * but low enough to be well below the maximum number
-     * of port numbers actually available on all OSes for
-     * such sockets (5000 on some versions of windows)
+     * of port numbers actually available on all OSes
+     * when multiplied by the maximum feasible number of VM processes
+     * that could practically be spawned.
      */
 
-    private static final int DEFAULT_MAX_SOCKETS = 1024;
+    private static final int DEFAULT_MAX_SOCKETS = 25;
     private static final int maxSockets;
     private static final AtomicInteger numSockets;