Bug #913434 “ImageIO crashes (core dumped) while reading many im...” : Bugs : openjdk-7 package : Ubuntu

Revision history for this message

Joshua Rocky Tuahta Purba (jrocky) wrote on 2012-01-08:

#1

BugIIO.java - Java source to reproduce the error. Before compiling, change the path in "dir" variable to a directory that has a lot of image files. Edit (920 bytes, text/x-java)

Revision history for this message

Joshua Rocky Tuahta Purba (jrocky) wrote on 2012-01-08:

#2

hs_err_pid4978.log - Java error report/log file Edit (53.0 KiB, text/plain)

Here is the "error report file" (hs_err_pid4978.log) from this step (as described above):

$ java BugIIO

Revision history for this message

Joshua Rocky Tuahta Purba (jrocky) wrote on 2012-01-08:

#3

core.xz - core dump (xz compressed) Edit (8.6 MiB, application/octet-stream)

Here is the "core dump" (xz compressed, uncompress before use) from this step (as described above):

$ java BugIIO

Joshua Rocky Tuahta Purba (jrocky) on 2012-01-08

description:

updated

Joshua Rocky Tuahta Purba (jrocky) on 2012-01-08

description:	updated
description:	updated

Joshua Rocky Tuahta Purba (jrocky) on 2012-01-08

description:

updated

Revision history for this message

Joshua Rocky Tuahta Purba (jrocky) wrote on 2012-02-12:

#4

NonBugIIO.java - this class will run, and *not* cause crash. Edit (972 bytes, text/x-java)

I have just found out that, using BufferedInputStream - instead of java.io.File - as parameter for ImageIO.read() will not cause core dump. This probably means that there is something wrong with the code in ImageIO.read() that cause crash while reading from java.io.File.

P.S. the difference between NonBugIIO.java and BugIIO.java, is that the BugIIO.java uses File as parameter for ImageIO.read(), while NonBugIIO.java uses BufferedInputStream as parameter for ImageIO.read().

Revision history for this message

Vova Zoubritsky (vogre-z) wrote on 2012-03-24:

#5

Image with sRGB profile which may cause a crash Edit (456.4 KiB, image/jpeg)

I was lucky(?) enough to find a single image which causes the crash for me (running on a 1Gb folder of other images did nothing), however, it must be said that the crash doesn't always happen ib the same way:

1) Running the minimal Java code (BugIIO.java/NoBugIIO.java) causes an exception: java.lang.IllegalArgumentException: Can't load standard profile: sRGB.pf.
2) Running the minimal code with sbt (which loads the class dynamically) loads the image fine and does not have an exception.
3) Using the same image in different points of my program (I can attach it as well) causes either the "Can't load standard profile" exception or a crash at sun.java2d.cmm.lcms.LCMS.getTagData(JI[B)V+0 (same as original report).

Using other images (without sRGB profile - checked with exiftool) or openjdk6 does not cause crashes or exceptions.

Revision history for this message

Launchpad Janitor (janitor) wrote on 2012-03-24:

#6

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in openjdk-7 (Ubuntu):
status:	New → Confirmed

Revision history for this message

Hendy Irawan (ceefour) wrote on 2012-07-29:

#7

Still happens on Ubuntu 12.04, tested i386

java version "1.7.0_03"
OpenJDK Runtime Environment (IcedTea7 2.1.1pre) (7~u3-2.1.1~pre1-1ubuntu3)
OpenJDK Client VM (build 22.0-b10, mixed mode, sharing)

Revision history for this message

Carlo (john23) wrote on 2012-08-30:

#8

Happens on ubuntu 12.04 x64 too.

java version "1.7.0_03"
OpenJDK Runtime Environment (IcedTea7 2.1.1pre) (7~u3-2.1.1~pre1-1ubuntu3)
OpenJDK 64-Bit Server VM (build 22.0-b10, mixed mode)

Revision history for this message

David White (cppege-david-9ei9ny) wrote on 2013-09-25:

#9

Crash log file Edit (88.1 KiB, text/plain)

I've found this issue happens intermitently on my setup:
Ubuntu 13.04 64-bit
OpenJDK Runtime Environment (IcedTea 2.3.10) (7u25-2.3.10-1ubuntu0.13.04.2)
OpenJDK 64-Bit Server VM (build 23.7-b01, mixed mode)

I get an intermitent crash when decoding JPEGs, decoding in several threads.

Thread pool is created thus:
ExecutorService threadpool = Executors.newFixedThreadPool(Runtime.getRuntime().availableProcessors()+1);

Image decode tasks added this:
ImageScaler scaler = new ImageScaler(size);
threadpool.submit(scaler);

ImageScaler class is:
private class ImageScaler extends SwingWorker<ImageIcon, String> {
private int size;

  public ImageScaler(int size) {
   this.size = size;
  }

  @Override
  public ImageIcon doInBackground() {
   LOGGER.log(Level.FINE,
     "Loading image: "+url);

ImageReader ir;

   //create a new instance of imageReader
   synchronized(sync){
    Iterator<ImageReader> it = ImageIO.getImageReadersByMIMEType("image/jpeg");
    ir = it.next();
    if (ir == null) {
     LOGGER.log(Level.SEVERE,
       "No image reader found for JPEGs");
     System.exit(1);
    }
    ImageReaderSpi spi = ir.getOriginatingProvider();
    try {
     ir = spi.createReaderInstance();
    } catch (Exception e) {
     LOGGER.log(Level.SEVERE,
       "Could not create new JPEG reader instance", e);
     return null;
    }
   }

   //Load the image from the URL (could be local or HTTP)
   BufferedImage image;
   try {

[...]
    File cacheDir = new File (strCacheDir);
    cacheDir.mkdirs();
    URL u = new URL(url);
    FileCacheImageInputStream fcis = new FileCacheImageInputStream(
     u.openStream(), cacheDir);
    ir.setInput(fcis);
    image = ir.read(0);
    fcis.close();
   } catch (Exception e) {
    LOGGER.log(Level.WARNING,
      "Could not read image "+url, e);
    return null;
   } catch (OutOfMemoryError e) {
    LOGGER.log(Level.WARNING,
      "Out of memory reading image: "+url, e);
    return null;
   } finally {
    ir.dispose();
   }

return new ImageIcon(resizeImage(image, size));
}

  @Override
  protected void done() {
   if (isCancelled())
    return;
   ImageIcon icon = null;
   try {
    icon = get();
   } catch (Exception ignore) {}
   if (icon == null) {
    LOGGER.log(Level.WARNING,
      "Scaled image is null: "+url);
    return;
   }
   rendered = icon;
   renderedSize = size;
   mPcs.firePropertyChange(PNAME_RENDEREDICON, 0, 1);
  }

}

The crash actually occurs in ICC_Profile code. I get intermitent colour issues with decoded JPEGs where the image is totally mid-green except for areas that are dark which tend to black. Is there an issue in the colour code for multi-threaded decode? I've done my best to create an image reader in a thread-safe way.

I've attached the crash log file.

I've found this issue happens intermitently on my setup:
Ubuntu 13.04 64-bit
OpenJDK Runtime Environment (IcedTea 2.3.10) (7u25-2.3.10-1ubuntu0.13.04.2)
OpenJDK 64-Bit Server VM (build 23.7-b01, mixed mode)

I get an intermitent crash when decoding JPEGs, decoding in several threads.

Thread pool is created thus:
	ExecutorService threadpool = Executors.newFixedThreadPool(Runtime.getRuntime().availableProcessors()+1);

Image decode tasks added this:
	ImageScaler scaler = new ImageScaler(size);
	threadpool.submit(scaler);

ImageScaler class is:
	private class ImageScaler extends SwingWorker<ImageIcon, String> {
		private int size;

public ImageScaler(int size) {
			this.size = size;
		}

@Override
		public ImageIcon doInBackground() {
			LOGGER.log(Level.FINE,
					"Loading image: "+url);
			
			ImageReader ir;
			
			//create a new instance of imageReader
			synchronized(sync){
				Iterator<ImageReader> it = ImageIO.getImageReadersByMIMEType("image/jpeg");
				ir = it.next();
				if (ir == null) {
					LOGGER.log(Level.SEVERE,
							"No image reader found for JPEGs");
					System.exit(1);
				}
				ImageReaderSpi spi = ir.getOriginatingProvider();
				try {
					ir = spi.createReaderInstance();
				} catch (Exception e) {
					LOGGER.log(Level.SEVERE,
							"Could not create new JPEG reader instance", e);
					return null;
				}
			}
			
			//Load the image from the URL (could be local or HTTP)
			BufferedImage image;
			try {

[...]
				File cacheDir = new File (strCacheDir);
				cacheDir.mkdirs();
				URL u = new URL(url);
				FileCacheImageInputStream fcis = new FileCacheImageInputStream(
					u.openStream(), cacheDir);
				ir.setInput(fcis);
				image = ir.read(0);
				fcis.close();
			} catch (Exception e) {
				LOGGER.log(Level.WARNING,
						"Could not read image "+url, e);
				return null;
			} catch (OutOfMemoryError e) {
				LOGGER.log(Level.WARNING,
						"Out of memory reading image: "+url, e);
				return null;
			} finally {
				ir.dispose();
			}
						
			return new ImageIcon(resizeImage(image, size));
		 }

@Override
		protected  void done() {
			if (isCancelled())
				return;
			ImageIcon icon = null;
			try {
				icon = get();
			} catch (Exception ignore) {}
			if (icon == null) {
				LOGGER.log(Level.WARNING,
						"Scaled image is null: "+url);
				return;
			}
			rendered = icon;
			renderedSize = size;
			mPcs.firePropertyChange(PNAME_RENDEREDICON, 0, 1);
		}

}

The crash actually occurs in ICC_Profile code. I get intermitent colour issues with decoded JPEGs where the image is totally mid-green except for areas that are dark which tend to black. Is there an issue in the colour code for multi-threaded decode? I've done my best to create an image reader in a thread-safe way.

I've attached the crash log file.

Revision history for this message

Joshua Rocky Tuahta Purba (jrocky) wrote on 2013-09-25:

#10

I noticed that our crash log file points to the same "problematic frame", that is liblcms2.so.2.

From my log:

# Problematic frame:
# C [liblcms2.so.2+0x121f8] cmsSaveProfileToIOhandler+0x38

From your log:

# Problematic frame:
# C [liblcms2.so.2+0x153c5] cmsSaveProfileToIOhandler+0x35

Likewise, the java frame in our logs also have identical parts:

Java frames: (J=compiled Java code, j=interpreted, Vv=VM code)
j sun.java2d.cmm.lcms.LCMS.getTagData(JI[B)V+0
j java.awt.color.ICC_Profile.getData(JI)[B+26
j java.awt.color.ICC_Profile.getData(I)[B+14
j java.awt.color.ICC_Profile.getNumComponents()I+18
j sun.java2d.cmm.lcms.LCMSTransform.<init>(Ljava/awt/color/ICC_Profile;II)V+83
j sun.java2d.cmm.lcms.LCMS.createTransform(Ljava/awt/color/ICC_Profile;II)Lsun/java2d/cmm/ColorTransform;+7
j java.awt.color.ICC_ColorSpace.fromRGB([F)[F+37
j com.sun.imageio.plugins.jpeg.JPEGImageReader.setImageData(IIIII[B)V+158
v ~StubRoutines::call_stub
j com.sun.imageio.plugins.jpeg.JPEGImageReader.readImageHeader(JZZ)Z+0
j com.sun.imageio.plugins.jpeg.JPEGImageReader.readNativeHeader(Z)Z+12
j com.sun.imageio.plugins.jpeg.JPEGImageReader.checkTablesOnly()V+92
j com.sun.imageio.plugins.jpeg.JPEGImageReader.gotoImage(I)V+41
j com.sun.imageio.plugins.jpeg.JPEGImageReader.readHeader(IZ)V+2
j com.sun.imageio.plugins.jpeg.JPEGImageReader.readInternal(ILjavax/imageio/ImageReadParam;Z)Ljava/awt/image/Raster;+3

Revision history for this message

David White (cppege-david-9ei9ny) wrote on 2013-09-26:

#11

I've just got the same crash in a slightly different bit of code (same project, but server side, not client side). The java frames from the crash log is as for the client code crash and the same as Joshua.

Java frames: (J=compiled Java code, j=interpreted, Vv=VM code)
j sun.java2d.cmm.lcms.LCMS.getTagData(JI[B)V+0
j java.awt.color.ICC_Profile.getData(JI)[B+26
j java.awt.color.ICC_Profile.getData(I)[B+14
j java.awt.color.ICC_Profile.getNumComponents()I+18
j sun.java2d.cmm.lcms.LCMSTransform.<init>(Ljava/awt/color/ICC_Profile;II)V+102
j sun.java2d.cmm.lcms.LCMS.createTransform(Ljava/awt/color/ICC_Profile;II)Lsun/java2d/cmm/ColorTransform;+7
j java.awt.color.ICC_ColorSpace.fromRGB([F)[F+37
j com.sun.imageio.plugins.jpeg.JPEGImageReader.setImageData(IIIII[B)V+158
v ~StubRoutines::call_stub
j com.sun.imageio.plugins.jpeg.JPEGImageReader.readImageHeader(JZZ)Z+0
j com.sun.imageio.plugins.jpeg.JPEGImageReader.readNativeHeader(Z)Z+12
j com.sun.imageio.plugins.jpeg.JPEGImageReader.checkTablesOnly()V+92
j com.sun.imageio.plugins.jpeg.JPEGImageReader.gotoImage(I)V+41
j com.sun.imageio.plugins.jpeg.JPEGImageReader.getImageMetadata(I)Ljavax/imageio/metadata/IIOMetadata;+39
j uk.co.netriver.kedarserver.CatwalkingImageProcessorTask.extractMetadata([BLjavax/imageio/ImageReader;)Ljava/util/LinkedList;+16
j uk.co.netriver.kedarserver.CatwalkingImageProcessorTask.doTask()V+623
j uk.co.netriver.kedarserver.TaskProcessor.run()V+44
j java.lang.Thread.run()V+11
v ~StubRoutines::call_stub

Revision history for this message

David White (cppege-david-9ei9ny) wrote on 2013-09-26:

#12

My server code is now throwing null pointer exceptions due to an issue in the same area (ICC colour profiles). I've been running test successfully with the same photos all morning and now they won't load at all. There has been no code change to the server. I'm guessing there's an underlying library problem.

Exception in thread "TaskProcessor" java.lang.NullPointerException
at java.awt.color.ICC_Profile.intFromBigEndian(ICC_Profile.java:1770)
at java.awt.color.ICC_Profile.getNumComponents(ICC_Profile.java:1462)
at sun.java2d.cmm.lcms.LCMSTransform.<init>(LCMSTransform.java:96)
at sun.java2d.cmm.lcms.LCMS.createTransform(LCMS.java:66)
at java.awt.color.ICC_ColorSpace.fromRGB(ICC_ColorSpace.java:218)
at com.sun.imageio.plugins.jpeg.JPEGImageReader.setImageData(JPEGImageReader.java:689)
at com.sun.imageio.plugins.jpeg.JPEGImageReader.readImageHeader(Native Method)
at com.sun.imageio.plugins.jpeg.JPEGImageReader.readNativeHeader(JPEGImageReader.java:604)
at com.sun.imageio.plugins.jpeg.JPEGImageReader.checkTablesOnly(JPEGImageReader.java:342)
at com.sun.imageio.plugins.jpeg.JPEGImageReader.gotoImage(JPEGImageReader.java:476)
at com.sun.imageio.plugins.jpeg.JPEGImageReader.readHeader(JPEGImageReader.java:597)
at com.sun.imageio.plugins.jpeg.JPEGImageReader.readInternal(JPEGImageReader.java:1054)
at com.sun.imageio.plugins.jpeg.JPEGImageReader.read(JPEGImageReader.java:1034)
at javax.imageio.ImageReader.read(ImageReader.java:940)

Revision history for this message

David White (cppege-david-9ei9ny) wrote on 2013-09-26:

#13

Another similar but slightly different error. Image decoded decided to stop working (no changes to code) with this exception being thrown. Was working a second ago.

WARNING: Could not read image file:/home/[...]/VALI_RTW_AW13_3026.jpg
java.awt.color.CMMException: Cannot get color transform
at sun.java2d.cmm.lcms.LCMS.createNativeTransform(Native Method)
at sun.java2d.cmm.lcms.LCMSTransform.doTransform(LCMSTransform.java:149)
at sun.java2d.cmm.lcms.LCMSTransform.colorConvert(LCMSTransform.java:526)
at java.awt.image.ColorConvertOp.filter(ColorConvertOp.java:571)
at com.sun.imageio.plugins.jpeg.JPEGImageReader.acceptPixels(JPEGImageReader.java:1258)
at com.sun.imageio.plugins.jpeg.JPEGImageReader.readImage(Native Method)
at com.sun.imageio.plugins.jpeg.JPEGImageReader.readInternal(JPEGImageReader.java:1226)
at com.sun.imageio.plugins.jpeg.JPEGImageReader.read(JPEGImageReader.java:1034)
at javax.imageio.ImageReader.read(ImageReader.java:940)
at uk.co.netriver.kedarclient.data.Photo$ImageScaler.doInBackground(Photo.java:510)
at uk.co.netriver.kedarclient.data.Photo$ImageScaler.doInBackground(Photo.java:1)
at javax.swing.SwingWorker$1.call(SwingWorker.java:296)
at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
at java.util.concurrent.FutureTask.run(FutureTask.java:166)
at javax.swing.SwingWorker.run(SwingWorker.java:335)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
at java.util.concurrent.FutureTask.run(FutureTask.java:166)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:724)

Revision history for this message

Katerina (katerina-andreadou) wrote on 2014-04-11:

#14

I am getting the same error when reading many images from different URLs
BufferedImage image = ImageIO.read(myUrl);
Is there any available fix for this issue?

Java frames: (J=compiled Java code, j=interpreted, Vv=VM code)
j sun.java2d.cmm.lcms.LCMS.getTagData(JI[B)V+0
j java.awt.color.ICC_Profile.getData(JI)[B+26
j java.awt.color.ICC_Profile.getData(I)[B+14
j java.awt.color.ICC_Profile.getNumComponents()I+18
j sun.java2d.cmm.lcms.LCMSTransform.<init>(Ljava/awt/color/ICC_Profile;II)V+83
j sun.java2d.cmm.lcms.LCMS.createTransform(Ljava/awt/color/ICC_Profile;II)Lsun/java2d/cmm/ColorTransform;+7
j java.awt.color.ICC_ColorSpace.fromRGB([F)[F+37
j com.sun.imageio.plugins.jpeg.JPEGImageReader.setImageData(IIIII[B)V+158
v ~StubRoutines::call_stub
j com.sun.imageio.plugins.jpeg.JPEGImageReader.readImageHeader(JZZ)Z+0
j com.sun.imageio.plugins.jpeg.JPEGImageReader.readNativeHeader(Z)Z+12
j com.sun.imageio.plugins.jpeg.JPEGImageReader.checkTablesOnly()V+92
j com.sun.imageio.plugins.jpeg.JPEGImageReader.gotoImage(I)V+41
j com.sun.imageio.plugins.jpeg.JPEGImageReader.readHeader(IZ)V+2
j com.sun.imageio.plugins.jpeg.JPEGImageReader.readInternal(ILjavax/imageio/ImageReadParam;Z)Ljava/awt/image/Raster;+3
j com.sun.imageio.plugins.jpeg.JPEGImageReader.read(ILjavax/imageio/ImageReadParam;)Ljava/awt/image/BufferedImage;+15
j javax.imageio.ImageIO.read(Ljavax/imageio/stream/ImageInputStream;)Ljava/awt/image/BufferedImage;+55
j javax.imageio.ImageIO.read(Ljava/net/URL;)Ljava/awt/image/BufferedImage;+42

Revision history for this message

Joshua Rocky Tuahta Purba (jrocky) wrote on 2014-04-12:

#15

I don't think there is any fix yet.

Revision history for this message

In Iced Tea Bugzilla #1896, Florian Bantner (f-bantner) wrote on 2014-08-08:

#17

Created attachment 1142
crash dump

It seems liblcms2-2 (at least under Ubuntu14.04 / 64bit) is not threadsafe at all.

If use multithreaded IMAGEIO.read( File ) shows all kind of strange bugs including a complete vm crash. The crashdump is attached.

This can be reproduces by starting (about?) 64 Threads and using IMAGEIO.read( File ) in an endless loop for random *but different* files. This programm must be run a few times since the crashes happen to appear shortly after starting it or not at all.

Crashes happens in
C [liblcms2.so.2+0x15480] cmsGetColorSpace+0x0
C [liblcms2.so.2+0x159b5] cmsSaveProfileToIOhandler+0x25

Code to reproduce:

public static void main( String[] args ) throws Exception {

for( int i=0; i<64; i++ ){

Thread t = new Thread( new ImageReader() );

t.start();

}

private static class ImageReader implements Runnable {

@Override
public void run() {

int i=0;
while( true ){

    System.out.print( "." );
    try {
     File f = findJpg();
     ImageIO.read( f );
    } catch( IOException e ) {
     throw new RuntimeException( e );
    }

    i++;
   }
  }

}

private static File findJpg( File base ){
// Return a randomly chosen JPG from a larger pool
}

Revision history for this message

In Iced Tea Bugzilla #1896, Sgehwolf (sgehwolf) wrote on 2014-08-08:

#18

*** Bug 1897 has been marked as a duplicate of this bug. ***

Revision history for this message

In Iced Tea Bugzilla #1896, Florian Bantner (f-bantner) wrote on 2014-08-10:

#19

Seems this is a problem of liblcms2-2.5. As Marti told me 2.6 is tested for multithreading.

Revision history for this message

In Iced Tea Bugzilla #1896, Andrew John Hughes (ahughes) wrote on 2014-08-13:

#20

CLosing this then, if it's an issue with the native library.

Revision history for this message

In Iced Tea Bugzilla #1896, Claudio-a-delgado (claudio-a-delgado) wrote on 2014-09-08:

#21

Using: Linux 3.11.0-12-generic #19-Ubuntu SMP Wed Oct 9 16:20:46 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux

#
# A fatal error has been detected by the Java Runtime Environment:
#
# SIGSEGV (0xb) at pc=0x00007fc008813965, pid=1482, tid=140462821066496
#
# JRE version: 7.0_25-b30
# Java VM: OpenJDK 64-Bit Server VM (23.7-b01 mixed mode linux-amd64 compressed oops)
# Problematic frame:
# C [liblcms2.so.2+0x15965] cmsSaveProfileToIOhandler+0x25

Revision history for this message

Josef Pacula (josef-pacula) wrote on 2014-09-12:

#16

We are getting the same problem, happening on https://d1oc2d5bw2auvq.cloudfront.net/static-assets-prod/9f99a5cf-2f54-49e0-8aff-7a14c78775d1 (jpeg), but with:

$ java -version
java version "1.6.0_32"
OpenJDK Runtime Environment (IcedTea6 1.13.4) (6b32-1.13.4-4ubuntu0.12.04.2)
OpenJDK 64-Bit Server VM (build 23.25-b01, mixed mode)

The stack trace follows:

java.awt.color.CMMException: Cannot get color transform
     at sun.java2d.cmm.lcms.LCMS.createNativeTransform(Native Method)
     at sun.java2d.cmm.lcms.LCMSTransform.<init>(LCMSTransform.java:103)
     at sun.java2d.cmm.lcms.LCMS.createTransform(LCMS.java:75)
     at java.awt.image.ColorConvertOp.filter(ColorConvertOp.java:552)
     at com.sun.imageio.plugins.jpeg.JPEGImageReader.acceptPixels(JPEGImageReader.java:1281)
     at com.sun.imageio.plugins.jpeg.JPEGImageReader.readImage(Native Method)
     at com.sun.imageio.plugins.jpeg.JPEGImageReader.readInternal(JPEGImageReader.java:1249)
     at com.sun.imageio.plugins.jpeg.JPEGImageReader.read(JPEGImageReader.java:1052)
     at javax.imageio.ImageIO.read(ImageIO.java:1438)
     at javax.imageio.ImageIO.read(ImageIO.java:1390)

no longer affects:

openjdk-6 (Ubuntu)

Bug Watch Updater (bug-watch-updater) on 2014-11-14

Changed in openjdk:
importance:	Unknown → Medium
status:	Unknown → Invalid

Revision history for this message

In Iced Tea Bugzilla #1896, Andrew John Hughes (ahughes) wrote on 2014-12-01:

#22

*** Bug 2115 has been marked as a duplicate of this bug. ***

Revision history for this message

Jamie Maher (jmaher-guser) wrote on 2015-06-25:

#23

There's a new version 2.7 of the native library LittleCMS released on 2015-03-18, which is supposed to improve multithreading.

On the homepage the news posted for version 2.7 is:

"Little CM2 2.7 released! which improves multi threading, adds contexts and a new locking plug-in type, among bugfixes and other minor features. If you run lcms in multiple threads, upgrading to this version is highly recommended."

I sent an email to the Author (Marti) and was mentiong a similar issue:

"I use the libcms2-2 version 2.6-3ubuntu1 library via Java IcedTea on Ubuntu, and was just researching if there was a new version to fix ICC embedded jpgs being resized with a purple tinge. (it seems to sometimes be a problem upon startup on a 6-core multiprocessor server) "

Marti replied: "BTW, 2.7 fixes the issue on multiple threads."

Revision history for this message

In Iced Tea Bugzilla #1896, Andrew John Hughes (ahughes) wrote on 2015-09-14:

#24

Re-opening this because this version of LCMS (2.5) is used in-tree when --disable-system-lcms is passed. We should upgrade using:

changeset: 10176:aa400be54fec
user: prr
date: Thu Sep 04 13:00:55 2014 -0700
summary: 8056122: Upgrade JDK to use LittleCMS 2.6

Bug Watch Updater (bug-watch-updater) on 2015-09-17

Changed in openjdk:
status:	Invalid → In Progress

Revision history for this message

In Iced Tea Bugzilla #1896, Mercurial (mercurial) wrote on 2015-10-03:

#25

details: http://icedtea.classpath.org//hg/icedtea7-forest/jdk?cmd=changeset;node=2f4ec76e886c
author: prr
date: Thu Sep 04 13:00:55 2014 -0700

8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
Reviewed-by: bae, jgodinez

Revision history for this message

In Iced Tea Bugzilla #1896, Mercurial (mercurial) wrote on 2015-10-03:

#26

details: http://icedtea.classpath.org//hg/icedtea7-forest/jdk?cmd=changeset;node=a5d72541512e
author: simonis
date: Wed Sep 10 11:01:59 2014 +0200

8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
Reviewed-by: prr, serb

Revision history for this message

In Iced Tea Bugzilla #1896, Mercurial (mercurial) wrote on 2015-10-03:

#27

details: http://icedtea.classpath.org//hg/icedtea7-forest/jdk?cmd=changeset;node=ad4f5afc21dc
author: prr
date: Mon May 11 09:14:03 2015 -0700

8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
Reviewed-by: serb, bae

Revision history for this message

In Iced Tea Bugzilla #1896, Mercurial (mercurial) wrote on 2015-10-03:

#28

details: http://icedtea.classpath.org//hg/icedtea7-forest/jdk?cmd=changeset;node=96f40a21d715
author: prr
date: Thu Jun 11 12:23:47 2015 -0700

8081756, PR1896: Mastering Matrix Manipulations
Reviewed-by: serb, bae, mschoene

Revision history for this message

In Iced Tea Bugzilla #1896, Mercurial (mercurial) wrote on 2015-10-04:

#29

details: http://icedtea.classpath.org//hg/icedtea7?cmd=changeset;node=55e6b27c9e62
author: Andrew John Hughes <email address hidden>
date: Sun Oct 04 01:34:28 2015 +0100

Bump to icedtea-2.7.0pre02.

2015-10-03 Andrew John Hughes <email address hidden>

  * Makefile.am:
  (CORBA_CHANGESET): Update to icedtea-2.7.0pre02.
  (JAXP_CHANGESET): Likewise.
  (JAXWS_CHANGESET): Likewise.
  (JDK_CHANGESET): Likewise.
  (LANGTOOLS_CHANGESET): Likewise.
  (OPENJDK_CHANGESET): Likewise.
  (CORBA_SHA256SUM): Likewise.
  (JAXP_SHA256SUM): Likewise.
  (JAXWS_SHA256SUM): Likewise.
  (JDK_SHA256SUM): Likewise.
  (LANGTOOLS_SHA256SUM): Likewise.
  (OPENJDK_SHA256SUM): Likewise.
  * NEWS: Updated.
  * configure.ac: Bump to 2.7.0pre02.
  * hotspot.map.in: Update to icedtea-2.7.0pre02.

Upstream changes:
   - Bump to icedtea-2.7.0pre02
   - PR2512: Reset success following calls in LayoutManager.cpp
   - S7105461, PR2571: Large JTables are not rendered correctly with Xrender pipeline
   - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine fails with OOM for jdk8 with XRender pipeline
   - S8011709, PR2509: [parfait] False positive: memory leak in jdk/src/share/native/sun/font/layout/CanonShaping.cpp
   - S8023052, PR2509: JVM crash in native layout
   - S8042855, PR2509: [parfait] Potential null pointer dereference in IndicLayoutEngine.cpp
   - S8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
   - S8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
   - S8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
   - S8081756, PR1896: Mastering Matrix Manipulations
   - S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError on Zero JVM initialization on non x86 platforms.

Revision history for this message

In Iced Tea Bugzilla #1896, Mercurial (mercurial) wrote on 2015-10-19:

#30

details: http://icedtea.classpath.org//hg/release/icedtea7-forest-2.6/jdk?cmd=changeset;node=8228c96258df
author: prr
date: Thu Sep 04 13:00:55 2014 -0700

8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
Reviewed-by: bae, jgodinez

Revision history for this message

In Iced Tea Bugzilla #1896, Mercurial (mercurial) wrote on 2015-10-19:

#31

details: http://icedtea.classpath.org//hg/release/icedtea7-forest-2.6/jdk?cmd=changeset;node=d33d77131673
author: simonis
date: Wed Sep 10 11:01:59 2014 +0200

8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
Reviewed-by: prr, serb

Revision history for this message

In Iced Tea Bugzilla #1896, Mercurial (mercurial) wrote on 2015-10-19:

#32

details: http://icedtea.classpath.org//hg/release/icedtea7-forest-2.6/jdk?cmd=changeset;node=8199f031c28c
author: prr
date: Mon May 11 09:14:03 2015 -0700

8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
Reviewed-by: serb, bae

Revision history for this message

In Iced Tea Bugzilla #1896, Mercurial (mercurial) wrote on 2015-10-19:

#33

details: http://icedtea.classpath.org//hg/release/icedtea7-forest-2.6/jdk?cmd=changeset;node=2ee1950a8d08
author: prr
date: Thu Jun 11 12:23:47 2015 -0700

8081756, PR1896: Mastering Matrix Manipulations
Reviewed-by: serb, bae, mschoene

Revision history for this message

In Iced Tea Bugzilla #1896, Mercurial (mercurial) wrote on 2015-10-20:

#34

Download full text (8.9 KiB)

details: http://icedtea.classpath.org//hg/release/icedtea7-2.6?cmd=changeset;node=723ef630c332
author: Andrew John Hughes <email address hidden>
date: Tue Oct 20 04:30:23 2015 +0100

Bump to icedtea-2.6.2pre02.

Upstream changes:
   - Bump to icedtea-2.6.2pre01
   - Bump to icedtea-2.6.2pre02
   - PR2512: Reset success following calls in LayoutManager.cpp
   - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
   - S6880559, PR2674: Enable PKCS11 64-bit windows builds
   - S6904403, PR2674: assert(f == k->has_finalizer(),"inconsistent has_finalizer") with debug VM
   - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid spurious wakeup
   - S7059542, PR2674: JNDI name operations should be locale independent
   - S7105461, PR2571: Large JTables are not rendered correctly with Xrender pipeline
   - S7105883, PR2560: JDWP: agent crash if there exists a ThreadGroup with null name
   - S7107611, PR2674: sun.security.pkcs11.SessionManager is scalability blocker
   - S7127066, PR2674: Class verifier accepts an invalid class file
   - S7150092, PR2674: NTLM authentication fail if user specified a different realm
   - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine fails with OOM for jdk8 with XRender pipeline
   - S7152582, PR2674: PKCS11 tests should use the NSS libraries available in the OS
   - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in UTF8Reader of SAXParser
   - S7177045, PR2674: Rework the TestProviderLeak.java regression test, it is too fragile to low memory errors.
   - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
   - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java fails intermittently
   - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on Ubuntu 12.04
   - S8011709, PR2509: [parfait] False positive: memory leak in jdk/src/share/native/sun/font/layout/CanonShaping.cpp
   - S8012971, PR2674: PKCS11Test hiding exception failures
   - S8016105, PR2560: Add complementary RETURN_NULL allocation macros in allocation.hpp
   - S8020424, PR2674: The NSS version should be detected before running crypto tests
   - S8020443, PR2674: Frame is not created on the specified GraphicsDevice with two monitors
   - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging String.contentEquals()
   - S8022683, PR2560: JNI GetStringUTFChars should return NULL on allocation failure not abort the VM
   - S8023052, PR2509: JVM crash in native layout
   - S8025922, PR2560: JNI access to Strings need to check if the value field is non-null
   - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh Failed to initialize connector
   - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java unstable again
   - S8033069, PR2674: mouse wheel scroll closes combobox popup
   - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
   - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3 and libsoftokn3 version mismatches
   - S8042855, PR2509: [parfait] Potential null pointer dereference in IndicLayoutEngine.cpp
   - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
   - ...

details: http://icedtea.classpath.org//hg/release/icedtea7-2.6?cmd=changeset;node=723ef630c332
author: Andrew John Hughes <gnu_andrew@member.fsf.org>
date: Tue Oct 20 04:30:23 2015 +0100

Bump to icedtea-2.6.2pre02.

Upstream changes:
	  - Bump to icedtea-2.6.2pre01
	  - Bump to icedtea-2.6.2pre02
	  - PR2512: Reset success following calls in LayoutManager.cpp
	  - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
	  - S6880559, PR2674: Enable PKCS11 64-bit windows builds
	  - S6904403, PR2674: assert(f == k-&gt;has_finalizer(),&quot;inconsistent has_finalizer&quot;) with debug VM
	  - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid spurious wakeup
	  - S7059542, PR2674: JNDI name operations should be locale independent
	  - S7105461, PR2571: Large JTables are not rendered correctly with Xrender pipeline
	  - S7105883, PR2560: JDWP: agent crash if there exists a ThreadGroup with null name
	  - S7107611, PR2674: sun.security.pkcs11.SessionManager is scalability blocker
	  - S7127066, PR2674: Class verifier accepts an invalid class file
	  - S7150092, PR2674: NTLM authentication fail if user specified a different realm
	  - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine fails with OOM for jdk8 with XRender pipeline
	  - S7152582, PR2674: PKCS11 tests should use the NSS libraries available in the OS
	  - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in UTF8Reader of SAXParser
	  - S7177045, PR2674: Rework the TestProviderLeak.java regression test, it is too fragile to low memory errors.
	  - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
	  - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java fails intermittently
	  - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on Ubuntu 12.04
	  - S8011709, PR2509: [parfait] False positive: memory leak in jdk/src/share/native/sun/font/layout/CanonShaping.cpp
	  - S8012971, PR2674: PKCS11Test hiding exception failures
	  - S8016105, PR2560: Add complementary RETURN_NULL allocation macros in allocation.hpp
	  - S8020424, PR2674: The NSS version should be detected before running crypto tests
	  - S8020443, PR2674: Frame is not created on the specified GraphicsDevice with two monitors
	  - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging String.contentEquals()
	  - S8022683, PR2560: JNI GetStringUTFChars should return NULL on allocation failure not abort the VM
	  - S8023052, PR2509: JVM crash in native layout
	  - S8025922, PR2560: JNI access to Strings need to check if the value field is non-null
	  - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh Failed to initialize connector
	  - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java unstable again
	  - S8033069, PR2674: mouse wheel scroll closes combobox popup
	  - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
	  - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3 and libsoftokn3 version mismatches
	  - S8042855, PR2509: [parfait] Potential null pointer dereference in IndicLayoutEngine.cpp
	  - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
	  - S8048194: GSSContext.acceptSecContext fails when a supported mech is not initiator preferred
	  - S8048353: jstack -l crashes VM when a Java mirror for a primitive type is locked
	  - S8050123, PR2674: Incorrect property name documented in CORBA InputStream API
	  - S8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
	  - S8056124, PR2674: Hotspot should use PICL interface to get cacheline size on SPARC
	  - S8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
	  - S8059200, PR2674: Promoted JDK9 b31 for Solaris-amd64 fails (Error: dl failure on line 744, no picl library) on Solaris 11.1
	  - S8059588, PR2674: deadlock in java/io/PrintStream when verbose java.security.debug flags are set
	  - S8062518, PR2674: AIOBE occurs when accessing to document function in extended function in JAXP
	  - S8062591, PR2674: SPARC PICL causes significantly longer startup times
	  - S8072863, PR2674: Replace fatal() with vm_exit_during_initialization() when an incorrect class is found on the bootclasspath
	  - S8073453, PR2674: Focus doesn't move when pressing Shift + Tab keys
	  - S8073773: Presume path preparedness
	  - S8073894: Getting to the root of certificate chains
	  - S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on Solaris Sparc
	  - S8074297: substring in XSLT returns wrong character if string contains supplementary chars
	  - S8074330: Set font anchors more solidly
	  - S8074335: Substitute for substitution formats
	  - S8074350, PR2674: Support ISO 4217 "Current funds codes" table (A.2)
	  - S8074865: General crypto resilience changes
	  - S8074869, PR2674: C2 code generator can replace -0.0f with +0.0f on Linux
	  - S8074871: Adjust device table handling
	  - S8075374: Responding to OCSP responses
	  - S8075378: JNDI DnsClient Exception Handling
	  - S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java failed in certain env.
	  - S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java failed in certain env.
	  - S8075609, PR2674: java.lang.IllegalArgumentException: aContainer is not a focus cycle root of aComponent
	  - S8075667: (tz) Support tzdata2015b
	  - S8075738: Better multi-JVM sharing
	  - S8075773, PR2674: jps running as root fails after the fix of JDK-8050807
	  - S8075833: Straighter Elliptic Curves
	  - S8075838: Method for typing MethodTypes
	  - S8075853: Proxy for MBean proxies
	  - S8076040, PR2674: Test com/sun/crypto/provider/KeyFactory/TestProviderLeak.java fails with -XX:+UseG1GC
	  - S8076290: JCK test api/xsl/conf/string/string17 starts failing after JDK-8074297
	  - S8076328: Enforce key exchange constraints
	  - S8076397: Better MBean connections
	  - S8076409: Reinforce RMI framework
	  - S8076455, PR2674: IME Composition Window is displayed on incorrect position
	  - S8076968, PR2674: PICL based initialization of L2 cache line size on some SPARC systems is incorrect
	  - S8077102, PR2674: dns_lookup_realm should be false by default
	  - S8077409, PR2674: Drawing deviates when validate() is invoked on java.awt.ScrollPane
	  - S8077520: Morph tables into improved form
	  - S8077685: (tz) Support tzdata2015d
	  - S8078113, PR2674: 8011102 changes may cause incorrect results
	  - S8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
	  - S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java fails with BindException
	  - S8078439: SPNEGO auth fails if client proposes MS krb5 OID
	  - S8078529: Increment the build value to b02 for hs24.85 in 7u85
	  - S8078562: Add modified dates
	  - S8080012, PR2674: JVM times out with vdbench on SPARC M7-16
	  - S8080318: jdk7u85 l10n resource file translation update
	  - S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh test has RC4 dependencies
	  - S8081392, PR2674: getNodeValue should return 'null' value for Element nodes
	  - S8081470, PR2674: com/sun/jdi tests are failing with "Error. failed to clean up files after test" with jtreg 4.1 b12
	  - S8081622: Increment the build value to b03 for hs24.85 in 7u85
	  - S8081756, PR1896: Mastering Matrix Manipulations
	  - S8081775: two lib/testlibrary tests are failing with "Error. failed to clean up files after test" with jtreg 4.1 b12
	  - S8130297, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java still failing after JDK-8076040
	  - S8133636, PR2674: [TEST_BUG] Import/add tests for the problem seen in 8076110
	  - S8133966: Allow OpenJDK to build on PaX-enabled kernels
	  - S8133967: Fix build where PAX_COMMAND is not specified
	  - S8133968: Revert 8014464 on OpenJDK 7
	  - S8133970: Only apply PaX-marking when needed by a running PaX kernel
	  - S8133990: Revert introduction of lambda expression in sun.lwawt.macosx.LWCToolkit
	  - S8133991: Fix mistake in 8075374 backport
	  - S8133993: [TEST_BUG] Make CipherInputStreamExceptions compile on OpenJDK 7
	  - S8134248: Fix recently backported tests to work with OpenJDK 7u
	  - S8134610: Mac OS X build fails after July 2015 CPU
	  - S8134618: test/javax/xml/jaxp/transform/8062923/XslSubstringTest.java has bad license header

2015-10-19  Andrew John Hughes  <gnu.andrew@member.fsf.org>

* Makefile.am:
		(CORBA_CHANGESET): Update to icedtea-2.6.2pre02.
		(JAXP_CHANGESET): Likewise.
		(JAXWS_CHANGESET): Likewise.
		(JDK_CHANGESET): Likewise.
		(LANGTOOLS_CHANGESET): Likewise.
		(OPENJDK_CHANGESET): Likewise.
		(CORBA_SHA256SUM): Likewise.
		(JAXP_SHA256SUM): Likewise.
		(JAXWS_SHA256SUM): Likewise.
		(JDK_SHA256SUM): Likewise.
		(LANGTOOLS_SHA256SUM): Likewise.
		(OPENJDK_SHA256SUM): Likewise.
		* NEWS: Updated.
		* configure.ac: Bump to 2.6.2pre02.
		* hotspot.map.in: Update to icedtea-2.6.2pre02.
		* patches/boot/ecj-stringswitch.patch:
		Add new case in sun.security.krb.Config.
		* patches/boot/ecj-trywithresources.patch:
		Regenerated due to changes in java.util.Currency.
		* patches/boot/ecj-underscored_literals.patch:
		Add new case in com.sun.jndi.ldap.Connection.

Bug Watch Updater (bug-watch-updater) on 2015-10-23

Changed in openjdk:
status:	In Progress → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2016-05-17:

#35

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in lcms2 (Ubuntu):
status:	New → Confirmed

Revision history for this message

Mauro (mauromol) wrote on 2016-05-17:

#36

This bug is marked as fixed in OpenJDK (version 2.6.2 of IcedTea should depend on LittleCMS 2.6), however in Trusty we have openjdk-7-jre-headless version 7u101-2.6.6-0ubuntu0.14.04.1 with IcedTea 2.6.6 but liblcms2-2 is still at version 2.5 (precisely 2.5-0ubuntu4.1). Does this mean that IcedTea in Trusty is using an "unsupported" version of LittleCMS?

Today I faced this problem (the JVM crashed).

Revision history for this message

Tiago Stürmer Daitx (tdaitx) wrote on 2016-05-17:

#37

Mauro,

Thank you for taking the time to report this bug and helping to make Ubuntu better. Please answer these questions:

* Is this reproducible?
* If so, what specific steps should we take to recreate this bug?
* Does it affect OpenJDK 6 as well?

Please post or attach the error output so we can verify it is actually the same bug.

This will help us to find and resolve the problem.

Changed in lcms2 (Ubuntu):
status:	Confirmed → Incomplete
Changed in openjdk-7 (Ubuntu):
status:	Confirmed → Incomplete

Revision history for this message

Mauro (mauromol) wrote on 2016-05-17:

#38

Dump created by the JVM Edit (161.4 KiB, text/plain)

Hi Tiago!
I don't know if it's reproducible, today our web application suddenly was offline because the OpenJDK JVM process running Tomcat had died with a crash. I'm attaching the dump.
It's the first time this happens. If it's a concurrency issue, it's really hard to say whether it will happen again and when.

I don't know if it affects OpenJDK 6 as well, because this web application needs Java 7 to run, so I can't run it with OpenJDK 6.

I determined it was the same bug because the topmost frames of the dump seems exactly those reported here.

Revision history for this message

Mauro (mauromol) wrote on 2016-05-17:

#39

Just an additional note: this happened with openjdk-7-7u95-2.6.4 (with IcedTea 2.6.4), I installed 7u101 only today, but I saw there's no version change in liblcms2-2 (still 2.5), which seems to be the root cause of this problem.

Revision history for this message

Tiago Stürmer Daitx (tdaitx) wrote on 2016-05-17:

#40

Mauro,

Thanks for the additional information. Your and IcedTea's reports seem to indicate that LCMS 2.5 is the culprit for not being thread safe.

I will try to reproduce it later on so I can test if a newer version does indeed fix this issue.

Revision history for this message

Tiago Stürmer Daitx (tdaitx) wrote on 2016-05-19:

#41

I was unable to reproduce it yesterday, but it was due to the jpeg files I was using. I repeated it today with different jpeg files and reproduced it.

Got a crash on OpenJDK 7u101 with both LCMS 2.5 (Trusty) and 2.6 (Wily), also reproduced when using the LCMS lib that comes with OpenJDK (by default Ubuntu uses the lib from lcms2-2 package). OpenJDK 8 on Wily uses the same LCMS and does not crash.

I will report this upstream.

Revision history for this message

In Iced Tea Bugzilla #1896, Tiago Stürmer Daitx (tdaitx) wrote on 2016-05-19:

#43

I was able to reproduce this issue on Ubuntu's IcedTea 2.6.6 running:
- the integrated lcms library (disable-system-lcms)
- lcms 2.5 and 2.6 system library (enable-system-lcms)

For some reason that I haven't been able to track down yet it does depend on the JPEG file under test - a initial sample I grabbed from the internet ran just fine, only when I tested it against bunch grabbed from `locate .jpg` was I able to reproduce it.

I haven't tested it against 3.x, but OpenJDK 8u91 runs just fine when using the same lcms 2.6 so I would expect similar results.

Let me know if hs_err and/or core files would be of any help, as well as running it against an upstream IcedTea build (Ubuntu does not patch anything related to lcms).

Started a few testes after an Ubuntu user reported running into this issue (https://bugs.launchpad.net/ubuntu/+source/openjdk-7/+bug/913434).

Revision history for this message

In Iced Tea Bugzilla #1896, Andrew John Hughes (ahughes) wrote on 2016-05-19:

#44

Well, we at least need a reproducer to begin with. Can you supply the code and JPEG file you're able to reproduce this with?

Revision history for this message

In Iced Tea Bugzilla #1896, Tiago Stürmer Daitx (tdaitx) wrote on 2016-05-19:

#45

Created attachment 1529
testcase to reproduce it

Provide jpeg files (at least 128 of them) in a ./jpg directory
Run using something like:

$ while ! timeout --preserve-status 10 java Lp9133434Imageio; do echo " done."; done

as the bug doesn't happen on every run (seem to depend on the jpeg files under test, I can get it once about every 5 runs).

Revision history for this message

In Iced Tea Bugzilla #1896, Tiago Stürmer Daitx (tdaitx) wrote on 2016-05-19:

#46

Got together a bunch of images from the various hs_err I had at hand.

I was unable to keep the file under 1 MB for upload, thus I uploaded it here: https://drive.google.com/open?id=0Bw-FF32TRkU3MFdFOXF4dlZ0c2s

Revision history for this message

Mauro (mauromol) wrote on 2016-05-19:

#42

Thank you Tjago, I will monitor upstream too!

Bug Watch Updater (bug-watch-updater) on 2016-05-20

Changed in openjdk:
status:	Fix Released → Confirmed

Revision history for this message

In Iced Tea Bugzilla #1896, Peterwcostello (peterwcostello) wrote on 2016-05-25:

#47

This is a multi-threading problem with LCMS version 2.5. It was claimed to have been fixed with LCMS v2.6, but many OS are still running the older packages. I have code that parses PDF files. It is running in a production environment on random PDF files and with lots of threads. I was able to stop the error (~2 years ago) by adding "syncronized" keyword around the following block of java code:
   ICC_Profile profile = ICC_Profile.getInstance(byte[]);
   ICC_ColorSpace colorSpace = new ICC_ColorSpace(profile);
   int numComponents = 3; // From PDF dictionary, typically '3' (RGB).
   float[] components = new float[numComponents];

   // Test that ICC_Profile can be parsed
   // Generates an exception on malformed byte[]
   // Crashes JVM sporadically if not forced inline by 'syncronized'
   new java.awt.Color(colorSpace,components,1f);

If it helps, here's my java method (won't compile as it is missing methods):
public static synchronized PDFColorSpace getICCColorSpace(PDFToken dict) throws IOException {
  PDFColorSpace cs=null;
  PDFToken nToken = dict.getDictionaryItem(N);
  int numComponents = (nToken==null) ? 1 : nToken.getInteger();

try {

ICC_Profile profile = ICC_Profile.getInstance(dict.getStream().toString8().getBytes());

// This does not prevent JVM Crash with BELL.SW
// if (profile.getNumComponents() == numComponents) ...

ICC_ColorSpace colorSpace = new ICC_ColorSpace(profile);
cs = new NativeColorSpace(TypeICC,colorSpace);

   // Test if ICC_Profile is OK. Will throw Exception (or even crash the JVM)
   // eg: Cik#99001898, http://www.siemens.com/investor/pool/de/investor_relations/events/hauptversammlung/2012/dividendenbekanntmachung.pdf, pg0
   // eg: JVM Crash, Cik#99002137, BELL.SW
   float[] components = new float[numComponents];
   new java.awt.Color(colorSpace,components,1f);

  } catch (Exception e) {
   cs=null;
  }
        return cs;
      }

Revision history for this message

In Iced Tea Bugzilla #3020, Andrew John Hughes (ahughes) wrote on 2016-06-15:

#54

I was able to reproduce the issue in bug 1896 on Ubuntu's IcedTea 2.6.6 running:
- the integrated lcms library (disable-system-lcms)
- lcms 2.5 and 2.6 system library (enable-system-lcms)

For some reason that I haven't been able to track down yet it does depend on the JPEG file under test - a initial sample I grabbed from the internet ran just fine, only when I tested it against bunch grabbed from `locate .jpg` was I able to reproduce it.

I haven't tested it against 3.x, but OpenJDK 8u91 runs just fine when using the same lcms 2.6 so I would expect similar results.

Let me know if hs_err and/or core files would be of any help, as well as running it against an upstream IcedTea build (Ubuntu does not patch anything related to lcms).

Started a few testes after an Ubuntu user reported running into this issue (https://bugs.launchpad.net/ubuntu/+source/openjdk-7/+bug/913434).

Revision history for this message

In Iced Tea Bugzilla #1896, Andrew John Hughes (ahughes) wrote on 2016-06-15:

#48

The in-tree version of LCMS 2 has been updated to 2.7. There's nothing we can do about distros using an old system version. They need to either update it or use the in-tree version.

As this bug was used to ship the update to 2.7 in IcedTea 2.6.2, I'm re-closing it and handling Tiago's issue under a new bug, bug 3020.

Revision history for this message

In Iced Tea Bugzilla #3020, Andrew John Hughes (ahughes) wrote on 2016-06-15:

#55

Crash from Tiago's reproducer looks like this:

Stack: [0x00007f69b2aeb000,0x00007f69b2bec000], sp=0x00007f69b2be9a80, free space=1018k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
C [libjavalcms.so+0x14d11]
j sun.java2d.cmm.lcms.LCMS.createNativeTransform([JIIILjava/lang/Object;)J+0
j sun.java2d.cmm.lcms.LCMSTransform.doTransform(Lsun/java2d/cmm/lcms/LCMSImageLayout;Lsun/java2d/cmm/lcms/LCMSImageLayout;)V+\
88
j sun.java2d.cmm.lcms.LCMSTransform.colorConvert([S[S)[S+92
j java.awt.color.ICC_ColorSpace.fromRGB([F)[F+119
j com.sun.imageio.plugins.jpeg.JPEGImageReader.setImageData(IIIII[B)V+158
v ~StubRoutines::call_stub

or

Stack: [0x00007f22a0c2e000,0x00007f22a0d2f000], sp=0x00007f22a0d2bb10, free space=1014k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
C [libjavalcms.so+0x1524c]
C [libjavalcms.so+0x1564a]
C [libjavalcms.so+0x38062] Java_sun_java2d_cmm_lcms_LCMS_getTagData+0x112
j sun.java2d.cmm.lcms.LCMS.getTagData(JI[B)V+0
j java.awt.color.ICC_Profile.getData(JI)[B+26
j java.awt.color.ICC_Profile.getData(I)[B+14
j java.awt.color.ICC_Profile.getNumComponents()I+18
j sun.java2d.cmm.lcms.LCMSTransform.<init>(Ljava/awt/color/ICC_Profile;II)V+83
j sun.java2d.cmm.lcms.LCMS.createTransform(Ljava/awt/color/ICC_Profile;II)Lsun/java2d/cmm/ColorTransform;+7
j java.awt.color.ICC_ColorSpace.fromRGB([F)[F+37
j com.sun.imageio.plugins.jpeg.JPEGImageReader.setImageData(IIIII[B)V+158
v ~StubRoutines::call_stub

https://bugs.openjdk.java.net/browse/JDK-8026780 looks like it might be relevant, so will backport.

Bug Watch Updater (bug-watch-updater) on 2016-06-18

Changed in openjdk:
status:	Confirmed → Fix Released

Revision history for this message

Jamie Maher (jmaher-guser) wrote on 2016-07-06:

#49

Just yesterday using openjdk-7-jre-headless on Ubuntu Trusty I experienced Tomcat7's jre crashing on a webapp trying to resize multiple images. (It's happened multiple times in the past as well)

It usually happens after a restart of Tomcat and on first access of a webapp that resizes multiple jpgs (some containing ICC profiles).

This happened with an apt pinned version of liblcms2-2:
version 2.6-3ubuntu2 from Ubuntu Wily.

# JRE version: OpenJDK Runtime Environment (7.0_101) (build 1.7.0_101-b00)
# Java VM: OpenJDK 64-Bit Server VM (24.95-b01 mixed mode linux-amd64 compressed oops)
# Derivative: IcedTea 2.6.6
# Distribution: Ubuntu 14.04 LTS, package 7u101-2.6.6-0ubuntu0.14.04.1

R11=0x00007f7f2483c200: cmsCreateMultiprofileTransformTHR+0x50 in /usr/lib/x86_64-linux-gnu/liblcms2.so.2 at 0x00007f7f24816000
R12=0x00007f7f64002e60 is an unknown value
R13=0x00007f7f683f98c0 is an unknown value
R14=0x0000000000000014 is an unknown value
R15=0x00007f7f24a69a28: <offset 0x253a28> in /usr/lib/x86_64-linux-gnu/liblcms2.so.2 at 0x00007f7f24816000

Stack: [0x00007f7f277f8000,0x00007f7f278f9000], sp=0x00007f7f278f3b48, free space=1006k
Java frames: (J=compiled Java code, j=interpreted, Vv=VM code)
j sun.java2d.cmm.lcms.LCMS.createNativeTransform([JIIILjava/lang/Object;)J+0
j sun.java2d.cmm.lcms.LCMSTransform.doTransform(Lsun/java2d/cmm/lcms/LCMSImageLayout;Lsun/java2d/cmm/lcms/LCMSImageLayout;)V+88
j sun.java2d.cmm.lcms.LCMSTransform.colorConvert([S[S)[S+92
j java.awt.color.ICC_ColorSpace.fromRGB([F)[F+119
j com.sun.imageio.plugins.jpeg.JPEGImageReader.setImageData(IIIII[B)V+158
v ~StubRoutines::call_stub
j com.sun.imageio.plugins.jpeg.JPEGImageReader.readImageHeader(JZZ)Z+0
j com.sun.imageio.plugins.jpeg.JPEGImageReader.readNativeHeader(Z)Z+12
j com.sun.imageio.plugins.jpeg.JPEGImageReader.checkTablesOnly()V+92
j com.sun.imageio.plugins.jpeg.JPEGImageReader.gotoImage(I)V+41
j com.sun.imageio.plugins.jpeg.JPEGImageReader.readHeader(IZ)V+2
j com.sun.imageio.plugins.jpeg.JPEGImageReader.readInternal(ILjavax/imageio/ImageReadParam;Z)Ljava/awt/image/Raster;+3
j com.sun.imageio.plugins.jpeg.JPEGImageReader.read(ILjavax/imageio/ImageReadParam;)Ljava/awt/image/BufferedImage;+15
j javax.imageio.ImageIO.read(Ljavax/imageio/stream/ImageInputStream;)Ljava/awt/image/BufferedImage;+55
j javax.imageio.ImageIO.read(Ljava/io/InputStream;)Ljava/awt/image/BufferedImage;+20

Just yesterday using openjdk-7-jre-headless on Ubuntu Trusty I experienced Tomcat7's jre crashing on a webapp trying to resize multiple images. (It's happened multiple times in the past as well)

It usually happens after a restart of Tomcat and on first access of a webapp that resizes multiple jpgs (some containing ICC profiles).

This happened with an apt pinned version of liblcms2-2:
 version 2.6-3ubuntu2 from Ubuntu Wily.

# JRE version: OpenJDK Runtime Environment (7.0_101) (build 1.7.0_101-b00)
# Java VM: OpenJDK 64-Bit Server VM (24.95-b01 mixed mode linux-amd64 compressed oops)
# Derivative: IcedTea 2.6.6
# Distribution: Ubuntu 14.04 LTS, package 7u101-2.6.6-0ubuntu0.14.04.1

R11=0x00007f7f2483c200: cmsCreateMultiprofileTransformTHR+0x50 in /usr/lib/x86_64-linux-gnu/liblcms2.so.2 at 0x00007f7f24816000
R12=0x00007f7f64002e60 is an unknown value
R13=0x00007f7f683f98c0 is an unknown value
R14=0x0000000000000014 is an unknown value
R15=0x00007f7f24a69a28: <offset 0x253a28> in /usr/lib/x86_64-linux-gnu/liblcms2.so.2 at 0x00007f7f24816000

Stack: [0x00007f7f277f8000,0x00007f7f278f9000],  sp=0x00007f7f278f3b48,  free space=1006k
Java frames: (J=compiled Java code, j=interpreted, Vv=VM code)
j  sun.java2d.cmm.lcms.LCMS.createNativeTransform([JIIILjava/lang/Object;)J+0
j  sun.java2d.cmm.lcms.LCMSTransform.doTransform(Lsun/java2d/cmm/lcms/LCMSImageLayout;Lsun/java2d/cmm/lcms/LCMSImageLayout;)V+88
j  sun.java2d.cmm.lcms.LCMSTransform.colorConvert([S[S)[S+92
j  java.awt.color.ICC_ColorSpace.fromRGB([F)[F+119
j  com.sun.imageio.plugins.jpeg.JPEGImageReader.setImageData(IIIII[B)V+158
v  ~StubRoutines::call_stub
j  com.sun.imageio.plugins.jpeg.JPEGImageReader.readImageHeader(JZZ)Z+0
j  com.sun.imageio.plugins.jpeg.JPEGImageReader.readNativeHeader(Z)Z+12
j  com.sun.imageio.plugins.jpeg.JPEGImageReader.checkTablesOnly()V+92
j  com.sun.imageio.plugins.jpeg.JPEGImageReader.gotoImage(I)V+41
j  com.sun.imageio.plugins.jpeg.JPEGImageReader.readHeader(IZ)V+2
j  com.sun.imageio.plugins.jpeg.JPEGImageReader.readInternal(ILjavax/imageio/ImageReadParam;Z)Ljava/awt/image/Raster;+3
j  com.sun.imageio.plugins.jpeg.JPEGImageReader.read(ILjavax/imageio/ImageReadParam;)Ljava/awt/image/BufferedImage;+15
j  javax.imageio.ImageIO.read(Ljavax/imageio/stream/ImageInputStream;)Ljava/awt/image/BufferedImage;+55
j  javax.imageio.ImageIO.read(Ljava/io/InputStream;)Ljava/awt/image/BufferedImage;+20

Revision history for this message

In Iced Tea Bugzilla #3020, Jamie-maher+bugz (jamie-maher+bugz) wrote on 2016-07-06:

#56

With libcms2-2 version 2.7-1ubuntu1 pinned from Ubuntu yakkety (running on Trusty 14.04 LTS):

Can produce crash reading jpgs in multiple threads fairly consistently.
(once out of 14 runs of simplified java test class on directory of 31 jpgs).

Running on java package openjdk-7-jre-headless 7u101-2.6.6-0ubuntu0.14.04.1

JRE version: OpenJDK Runtime Environment (7.0_101) (build 1.7.0_101-b00)
# Java VM: OpenJDK 64-Bit Server VM (24.95-b01 mixed mode linux-amd64 compressed oops)
# Derivative: IcedTea 2.6.6
# Distribution: Ubuntu 14.04 LTS, package 7u101-2.6.6-0ubuntu0.14.04.1
# Problematic frame:
# C [liblcms2.so.2+0x14940] cmsGetColorSpace+0x0

Stack: [0x00007f7227bfc000,0x00007f7227cfd000], sp=0x00007f7227cfaac8, free space=1018k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
C [liblcms2.so.2+0x14940] cmsGetColorSpace+0x0
j sun.java2d.cmm.lcms.LCMS.createNativeTransform([JIIILjava/lang/Object;)J+0
j sun.java2d.cmm.lcms.LCMSTransform.doTransform(Lsun/java2d/cmm/lcms/LCMSImageLayout;Lsun/java2d/cmm/lcms/LCMSImageLayout;)V+88
j sun.java2d.cmm.lcms.LCMSTransform.colorConvert([S[S)[S+92
j java.awt.color.ICC_ColorSpace.fromRGB([F)[F+119
j com.sun.imageio.plugins.jpeg.JPEGImageReader.setImageData(IIIII[B)V+158
v ~StubRoutines::call_stub
V [libjvm.so+0x5ef089]
V [libjvm.so+0x5eeb28]
V [libjvm.so+0x5feb5f]
V [libjvm.so+0x60c419]
C [libjavajpeg.so+0x496f] Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_readImageHeader+0x22f
j com.sun.imageio.plugins.jpeg.JPEGImageReader.readImageHeader(JZZ)Z+0
j com.sun.imageio.plugins.jpeg.JPEGImageReader.readNativeHeader(Z)Z+12
j com.sun.imageio.plugins.jpeg.JPEGImageReader.checkTablesOnly()V+92
j com.sun.imageio.plugins.jpeg.JPEGImageReader.gotoImage(I)V+41
j com.sun.imageio.plugins.jpeg.JPEGImageReader.readHeader(IZ)V+2
j com.sun.imageio.plugins.jpeg.JPEGImageReader.readInternal(ILjavax/imageio/ImageReadParam;Z)Ljava/awt/image/Raster;+3
j com.sun.imageio.plugins.jpeg.JPEGImageReader.read(ILjavax/imageio/ImageReadParam;)Ljava/awt/image/BufferedImage;+15
j javax.imageio.ImageIO.read(Ljavax/imageio/stream/ImageInputStream;)Ljava/awt/image/BufferedImage;+55
j javax.imageio.ImageIO.read(Ljava/io/File;)Ljava/awt/image/BufferedImage;+51
j BugIIO$ImageReader.run()V+47
j java.lang.Thread.run()V+11

With libcms2-2 version 2.7-1ubuntu1 pinned from Ubuntu yakkety (running on Trusty 14.04 LTS):

Can produce crash reading jpgs in multiple threads fairly consistently.
(once out of 14 runs of simplified java test class on directory of 31 jpgs).

Running on java package openjdk-7-jre-headless 7u101-2.6.6-0ubuntu0.14.04.1

JRE version: OpenJDK Runtime Environment (7.0_101) (build 1.7.0_101-b00)
# Java VM: OpenJDK 64-Bit Server VM (24.95-b01 mixed mode linux-amd64 compressed oops)
# Derivative: IcedTea 2.6.6
# Distribution: Ubuntu 14.04 LTS, package 7u101-2.6.6-0ubuntu0.14.04.1
# Problematic frame:
# C  [liblcms2.so.2+0x14940]  cmsGetColorSpace+0x0

Stack: [0x00007f7227bfc000,0x00007f7227cfd000],  sp=0x00007f7227cfaac8,  free space=1018k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
C  [liblcms2.so.2+0x14940]  cmsGetColorSpace+0x0
j  sun.java2d.cmm.lcms.LCMS.createNativeTransform([JIIILjava/lang/Object;)J+0
j  sun.java2d.cmm.lcms.LCMSTransform.doTransform(Lsun/java2d/cmm/lcms/LCMSImageLayout;Lsun/java2d/cmm/lcms/LCMSImageLayout;)V+88
j  sun.java2d.cmm.lcms.LCMSTransform.colorConvert([S[S)[S+92
j  java.awt.color.ICC_ColorSpace.fromRGB([F)[F+119
j  com.sun.imageio.plugins.jpeg.JPEGImageReader.setImageData(IIIII[B)V+158
v  ~StubRoutines::call_stub
V  [libjvm.so+0x5ef089]
V  [libjvm.so+0x5eeb28]
V  [libjvm.so+0x5feb5f]
V  [libjvm.so+0x60c419]
C  [libjavajpeg.so+0x496f]  Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_readImageHeader+0x22f
j  com.sun.imageio.plugins.jpeg.JPEGImageReader.readImageHeader(JZZ)Z+0
j  com.sun.imageio.plugins.jpeg.JPEGImageReader.readNativeHeader(Z)Z+12
j  com.sun.imageio.plugins.jpeg.JPEGImageReader.checkTablesOnly()V+92
j  com.sun.imageio.plugins.jpeg.JPEGImageReader.gotoImage(I)V+41
j  com.sun.imageio.plugins.jpeg.JPEGImageReader.readHeader(IZ)V+2
j  com.sun.imageio.plugins.jpeg.JPEGImageReader.readInternal(ILjavax/imageio/ImageReadParam;Z)Ljava/awt/image/Raster;+3
j  com.sun.imageio.plugins.jpeg.JPEGImageReader.read(ILjavax/imageio/ImageReadParam;)Ljava/awt/image/BufferedImage;+15
j  javax.imageio.ImageIO.read(Ljavax/imageio/stream/ImageInputStream;)Ljava/awt/image/BufferedImage;+55
j  javax.imageio.ImageIO.read(Ljava/io/File;)Ljava/awt/image/BufferedImage;+51
j  BugIIO$ImageReader.run()V+47
j  java.lang.Thread.run()V+11

Revision history for this message

In Iced Tea Bugzilla #3020, Jamie-maher+bugz (jamie-maher+bugz) wrote on 2016-07-06:

#57

Also experienced jvm crash with same versions above but no SIGSERV detected:

Exception in thread "Thread-8" java.lang.NullPointerException
        at java.awt.color.ICC_Profile.activateDeferredProfile(ICC_Profile.java:1086)
        at java.awt.color.ICC_Profile$1.activate(ICC_Profile.java:742)
        at sun.java2d.cmm.ProfileDeferralMgr.activateProfiles(ProfileDeferralMgr.java:95)
        at java.awt.color.ICC_Profile.getInstance(ICC_Profile.java:775)
        at com.sun.imageio.plugins.jpeg.JPEGImageReader.setImageData(JPEGImageReader.java:652)
        at com.sun.imageio.plugins.jpeg.JPEGImageReader.readImageHeader(Native Method)
        at com.sun.imageio.plugins.jpeg.JPEGImageReader.readNativeHeader(JPEGImageReader.java:604)
        at com.sun.imageio.plugins.jpeg.JPEGImageReader.checkTablesOnly(JPEGImageReader.java:342)
        at com.sun.imageio.plugins.jpeg.JPEGImageReader.gotoImage(JPEGImageReader.java:476)
        at com.sun.imageio.plugins.jpeg.JPEGImageReader.readHeader(JPEGImageReader.java:597)
        at com.sun.imageio.plugins.jpeg.JPEGImageReader.readInternal(JPEGImageReader.java:1054)
        at com.sun.imageio.plugins.jpeg.JPEGImageReader.read(JPEGImageReader.java:1034)
        at javax.imageio.ImageIO.read(ImageIO.java:1448)
        at javax.imageio.ImageIO.read(ImageIO.java:1308)
        at BugIIO$ImageReader.run(BugIIO.java:48)
        at java.lang.Thread.run(Thread.java:745)
java: cmsio0.c:1301: cmsSaveProfileToIOhandler: Assertion `(hProfile != ((void *)0))' failed.
Aborted (core dumped)

Revision history for this message

In Iced Tea Bugzilla #3020, Mercurial (mercurial) wrote on 2016-07-20:

#58

details: http://icedtea.classpath.org//hg/icedtea7-forest/jdk?cmd=changeset;node=4c22fc4c3833
author: bae
date: Mon Dec 24 14:22:23 2012 +0400

8005402, PR3020: Need to provide benchmarks for color management
Reviewed-by: jgodinez, prr

Revision history for this message

In Iced Tea Bugzilla #3020, Mercurial (mercurial) wrote on 2016-07-20:

#59

details: http://icedtea.classpath.org//hg/icedtea7-forest/jdk?cmd=changeset;node=5ee9ef1d0b2d
author: bae
date: Tue Oct 23 13:10:52 2012 +0400

7051394, PR3020: NullPointerException when running regression tests LoadProfileTest by using openjdk-7-b144
Reviewed-by: jgodinez, prr

Revision history for this message

In Iced Tea Bugzilla #3020, Mercurial (mercurial) wrote on 2016-07-20:

#60

details: http://icedtea.classpath.org//hg/icedtea7-forest/jdk?cmd=changeset;node=35ea30b9068a
author: bae
date: Mon Jul 18 16:36:48 2016 +0100

7124245, PR3020: [lcms] ColorConvertOp to color space CS_GRAY apparently converts orange to 244,244,0
Reviewed-by: prr

Revision history for this message

In Iced Tea Bugzilla #3020, Mercurial (mercurial) wrote on 2016-07-20:

#61

details: http://icedtea.classpath.org//hg/icedtea7-forest/jdk?cmd=changeset;node=cc0614f20419
author: bae
date: Mon Jul 18 17:45:32 2016 +0100

8005530, PR3020: [lcms] Improve performance of ColorConverOp for default destinations
Reviewed-by: prr, jgodinez

Revision history for this message

In Iced Tea Bugzilla #3020, Mercurial (mercurial) wrote on 2016-07-20:

#62

details: http://icedtea.classpath.org//hg/icedtea7-forest/jdk?cmd=changeset;node=c74c52a31c64
author: anashaty
date: Tue Jul 08 17:47:47 2014 +0400

8047066, PR3020: Test test/sun/awt/image/bug8038000.java fails with ClassCastException
Reviewed-by: bae, prr

Revision history for this message

In Iced Tea Bugzilla #3020, Mercurial (mercurial) wrote on 2016-07-20:

#63

details: http://icedtea.classpath.org//hg/icedtea7-forest/jdk?cmd=changeset;node=e7f735d92c5c
author: bae
date: Mon Jul 18 18:07:23 2016 +0100

8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not transferred from source to destination.
Reviewed-by: prr

Revision history for this message

In Iced Tea Bugzilla #3020, Mercurial (mercurial) wrote on 2016-07-20:

#64

details: http://icedtea.classpath.org//hg/icedtea7-forest/jdk?cmd=changeset;node=bffb172306db
author: bae
date: Thu Jun 06 13:57:25 2013 +0400

8013430, PR3020: REGRESSION: closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java fails with java.io.StreamCorruptedException: invalid type code: EE since 8b87
Reviewed-by: prr, vadim

Revision history for this message

In Iced Tea Bugzilla #3020, Mercurial (mercurial) wrote on 2016-07-20:

#65

details: http://icedtea.classpath.org//hg/icedtea7-forest/jdk?cmd=changeset;node=7e6d1fe62c4c
author: bae
date: Mon Jul 18 19:01:07 2016 +0100

7043064, PR3020: sun/java2d/cmm/ tests failed against RI b141 & b138-nightly
Reviewed-by: prr, vadim

Revision history for this message

In Iced Tea Bugzilla #3020, Mercurial (mercurial) wrote on 2016-07-20:

#66

details: http://icedtea.classpath.org//hg/icedtea7-forest/jdk?cmd=changeset;node=6f9bce2ddda6
author: bae
date: Tue Sep 10 21:54:14 2013 +0400

8024511, PR3020: Crash during color profile destruction
Reviewed-by: vadim, prr

Revision history for this message

In Iced Tea Bugzilla #3020, Mercurial (mercurial) wrote on 2016-07-20:

#67

details: http://icedtea.classpath.org//hg/icedtea7-forest/jdk?cmd=changeset;node=19211caca73f
author: jchen
date: Tue Oct 15 14:16:27 2013 -0700

8025429, PR3020: [parfait] warnings from b107 for sun.java2d.cmm: JNI exception pending
Reviewed-by: prr, bae

Revision history for this message

In Iced Tea Bugzilla #3020, Mercurial (mercurial) wrote on 2016-07-20:

#68

details: http://icedtea.classpath.org//hg/icedtea7-forest/jdk?cmd=changeset;node=2d3caec4a8c4
author: bae
date: Wed Oct 16 17:13:15 2013 +0400

8026702, PR3020: Fix for 8025429 breaks jdk build on windows
Reviewed-by: serb

Revision history for this message

In Iced Tea Bugzilla #3020, Mercurial (mercurial) wrote on 2016-07-20:

#69

details: http://icedtea.classpath.org//hg/icedtea7-forest/jdk?cmd=changeset;node=322e1901d8ba
author: bae
date: Tue Oct 22 13:28:44 2013 +0400

8026780, PR3020: Crash on PPC and PPC v2 for Java_awt test suit
Reviewed-by: prr, jchen

Revision history for this message

In Iced Tea Bugzilla #3020, Mercurial (mercurial) wrote on 2016-07-21:

#70

Download full text (4.0 KiB)

details: http://icedtea.classpath.org//hg/icedtea7?cmd=changeset;node=3bf68d7f7711
author: Andrew John Hughes <email address hidden>
date: Wed Jul 20 14:00:17 2016 +0100

Bump to icedtea-2.7.0pre06.

Upstream changes:
   - PR2799: Files are missing from resources.jar
   - PR2900: Don't use WithSeed versions of NSS functions as they don't fully process the seed
   - S2178143, PR2958: JVM crashes if the number of bound CPUs changed during runtime
   - S4900206, PR3101: Include worst-case rounding tests for Math library functions
   - S6260348, PR3067: GTK+ L&F JTextComponent not respecting desktop caret blink rate
   - S6934604, PR3075: enable parts of EliminateAutoBox by default
   - S7043064, PR3020: sun/java2d/cmm/ tests failed against RI b141 & b138-nightly
   - S7051394, PR3020: NullPointerException when running regression tests LoadProfileTest by using openjdk-7-b144
   - S7086015, PR3013: fix test/tools/javac/parser/netbeans/JavacParserTest.java
   - S7119487, PR3013: JavacParserTest.java test fails on Windows platforms
   - S7124245, PR3020: [lcms] ColorConvertOp to color space CS_GRAY apparently converts orange to 244,244,0
   - S7159445, PR3013: (javac) emits inaccurate diagnostics for enhanced for-loops
   - S7175845, PR1437, RH1207129: 'jar uf' changes file permissions unexpectedly
   - S8005402, PR3020: Need to provide benchmarks for color management
   - S8005530, PR3020: [lcms] Improve performance of ColorConverOp for default destinations
   - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not transferred from source to destination.
   - S8013430, PR3020: REGRESSION: closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java fails with java.io.StreamCorruptedException: invalid type code: EE since 8b87
   - S8014286, PR3075: failed java/lang/Math/DivModTests.java after 6934604 changes
   - S8014959, PR3075: assert(Compile::current()->live_nodes() < (uint)MaxNodeLimit) failed: Live Node limit exceeded limit
   - S8019247, PR3075: SIGSEGV in compiled method c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
   - S8024511, PR3020: Crash during color profile destruction
   - S8025429, PR3020: [parfait] warnings from b107 for sun.java2d.cmm: JNI exception pending
   - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
   - S8026780, PR3020: Crash on PPC and PPC v2 for Java_awt test suit
   - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java fails with ClassCastException
   - S8069181, PR3012, RH1015612: java.lang.AssertionError when compiling JDK 1.4 code in JDK 8
   - S8148328: aarch64: redundant lsr instructions in stub code.
   - S8148783: aarch64: SEGV running SpecJBB2013
   - S8148948: aarch64: generate_copy_longs calls align() incorrectly
   - S8150045: arraycopy causes segfaults in SATB during garbage collection
   - S8151841, PR3098: Build needs additional flags to compile with GCC 6
   - S8154537: AArch64: some integer rotate instructions are never emitted
   - S8154739: AArch64: TemplateTable::fast_xaccess loads in wrong mode
   - S8157906: aarch64: some more integer rotate instructions are never emitted
   - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt can l...

	Status	Importance	Assigned to
OpenJDK	Fix Released	Medium	icedtea-bugzilla #3020
lcms2 (Ubuntu)	Invalid	Undecided	Unassigned
openjdk-7 (Ubuntu)	Fix Released	Undecided	Unassigned

Ubuntu
openjdk-7 package

ImageIO crashes (core dumped) while reading many image files

Bug Description

CVE References

Other bug subscribers

Bug attachments

Remote bug watches

Changed in openjdk-7 (Ubuntu):
status:	Incomplete → Fix Released

Changed in openjdk:
importance:	Medium → Unknown
status:	Fix Released → Unknown

Ubuntuopenjdk-7 package

ImageIO crashes (core dumped) while reading many image files

Bug Description

CVE References

Other bug subscribers

Bug attachments

Remote bug watches

Ubuntu
openjdk-7 package