Testsuite name: CTE Regressions Manual
JDK/JRE tested: 5u21b04-j4b
OS/architecture: Sles10.3-x86
Reproducible: Always
Reproducible on machine:
[If sometimes] Also reproducible on machine:
Is it a platform specific regression: N
[If yes] Is it a new platform support: Y/N
[If yes] Regression relative to OS version:
Is it a Regression: Not sure
[If yes] Regression introduced in release/build:
[If yes] Test result on FCS: Pass/Fail
Test result on FCS: Fail
Test run log location:

Steps to reproduce:
1. lauch test case of misc/javawebstart/6605184/Test6605184.java
2. Open javaws application and load the following page of http://jpseuwt-ap/testcases/150/6605184/test_key.jnlp
   Check If you see an exception dialog box popup by window OS due to buffer overflow for jnlp file, and Java webstart won't start at all. - test FAILED,this proved that security vulnerability exist.
   If no exception dialog box will popup and Java webstart should start normally,but will complain the parsing error for jnlp file,that is the correct behavior. - test PASSED.

Comments:

We use the following command, there is no exception dialog box pop-up, please refer to attachment photo.

/usr/local/jdk1.5.0_21/jre/javaws/javaws http://jpseuwt-ap/testcases/150/6605184/test_key.jnlp

With firefox has the same issue,and 5u22b03-j4b on rhel5.4-x86 has the same issue.