Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8033299

Yahoo- Cribbage game applet failed to load with java.security.AccessControlException: access denied

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not an Issue
    • Icon: P3 P3
    • None
    • 8
    • deploy
    • None
    • generic
    • windows

      It is noticed on Windows machines, Yahoo Cribbage game applet does not load using jre 8-b127 promotion
      Exception in thread "Thread-19" java.security.AccessControlException: access denied ("java.net.SocketPermission" "67.195.148.75:11999" "connect,resolve")

      The issue does not occur on the same machine using jre 7u51 GA, 7u55 and 7u60 deploy nightlies

      *** Tested Configurations:
      - x86 Win 7/ FF 26, GC 32, IE 9
      - x64 Win 7/ FF 26
      - jre 8-b127 ( also, 7u55 deploy nightly build#397, 7u60 (build#660)

      *** Steps to reproduce:
      0) Clean up all JREs (if existed)
      1) Install jre 8-b127
      2) Set the Security Level to 'Medium' from JCP (since the yahoo applet is unsigned)
      3) Use any browser to load Yahoo Cribbage game applet:
      https://login.yahoo.com/config/login_verify2?.src=ga&.done=http%3A%2F%2Fgames.yahoo.com%2Fgames%2Flogin2%3Fpage%3Dcr%26amp%3Bss%3D1
      4) Log into Yahoo account
      5) Click 'Play Now'
      6) Click 'Continue' to start the game

      If the applet failed to load, the issue is reproducible. There is no such issue if using 7u51, deployment 7u55 or 7u60

      Java console
      ------------------
      Java Plug-in 11.0.2.127
      Using JRE version 1.8.0-b127 Java HotSpot(TM) Client VM
      User home directory = C:\Users\uadmin
      ----------------------------------------------------
      c: clear console window
      f: finalize objects on finalization queue
      g: garbage collect
      h: display this help message
      l: dump classloader list
      m: print memory usage
      o: trigger logging
      q: hide console
      r: reload policy configuration
      s: dump system and deployment properties
      t: dump thread list
      v: dump thread stack
      x: clear classloader cache
      0-5: set trace level to <n>
      ----------------------------------------------------
      cache: Initialize resource manager: com.sun.deploy.cache.ResourceProviderImpl@7b84de
      basic: Added progress listener: sun.plugin.util.ProgressMonitorAdapter@d284ce
      basic: Plugin2ClassLoader.addURL parent called for http://yog8.games.sp2.yahoo.com/yog/y/it1.jar
      network: Cache entry found [url: http://yog8.games.sp2.yahoo.com/yog/y/it1.jar, version: null] prevalidated=false/0
      cache: Adding MemoryCache entry: http://yog8.games.sp2.yahoo.com/yog/y/it1.jar
      cache: Resource http://yog8.games.sp2.yahoo.com/yog/y/it1.jar has expired.
      network: Connecting http://yog8.games.sp2.yahoo.com/yog/y/it1.jar with proxy=HTTP @ www-proxy.us.oracle.com/148.87.19.20:80
      network: Connecting http://yog8.games.sp2.yahoo.com/yog/y/it1.jar with cookie "B=4nsa0rt9elsv6&b=4&d=hdBPKMppYELEfgFxzOsiIMpPDtgDosIYOQP0tA--&s=mv&i=TAOax0xJ5bJxA_wBrn32; AO=o=0; Y=v=1&n=362dj0oe7fq7r&l=5eh4l4h4l4hoekd6/o&p=m252ssic13360300&jb=21|37|24&r=2i&lg=&intl=us&np=1; PH=l=en-US&i=us; ypcdb=c5443c1cc4566b661593f4470e1935d0; ucs=bnas=0; RMBX=4nsa0rt9elsv6&b=4&d=hdBPKMppYELEfgFxzOsiIMpPDtgDosIYOQP0tA--&s=mv&i=TAOax0xJ5bJxA_wBrn32&t=30"
      network: ResponseCode for http://yog8.games.sp2.yahoo.com/yog/y/it1.jar : 304
      network: Encoding for http://yog8.games.sp2.yahoo.com/yog/y/it1.jar : null
      network: Disconnect connection to http://yog8.games.sp2.yahoo.com/yog/y/it1.jar
      cache: Reading Signers from 5 http://yog8.games.sp2.yahoo.com/yog/y/it1.jar | C:\Users\uadmin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\4d8e0d24-2906eed0.idx
      network: No certificate info for unsigned JAR file: http://yog8.games.sp2.yahoo.com/yog/y/it1.jar
      cache: Done readSigners(http://yog8.games.sp2.yahoo.com/yog/y/it1.jar)
      security: Grant connect perm for http://yog8.games.sp2.yahoo.com/yog/y/it1.jar : java.security.Permissions@23adb6 (
       ("java.net.URLPermission" "http://yog8.games.sp2.yahoo.com:80/-" "*:*")
      )

      network: Created version ID: 1.8.0
      network: Created version ID: 1.8.0.00
      security: Accessing keys and certificate in Mozilla user profile: null
      0
      basic: Embedding dialogs not enabled in Configuration
      network: Created version ID: 1.8.0
      network: Created version ID: 1.8.0.00
      security: SSV validation:
          running: 1.8.0
          requested: null
          range: null
          javaVersionParam: null
          Rule Set version: null
      network: Created version ID: 1.8.0
      network: Created version ID: 1.8.0
      security: continue with running version
      network: Created version ID: 1.8.0
      network: Created version ID: 1.8
      network: Created version ID: 8.0.0
      security: --- parseCommandLine converted :
      into:
      []
      basic: Applet loaded.
      basic: Applet resized and added to parent container
      basic: PERF: AppletExecutionRunnable - applet.init() BEGIN ; jvmLaunch dt 324761 us, pluginInit dt 2439009 us, TotalTime: 2763770 us
      basic: Applet initialized
      basic: Starting applet
      basic: completed perf rollup
      basic: Applet made visible
      basic: Applet started
      basic: Told clients applet is started
      network: Cache entry found [url: http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict, version: null] prevalidated=false/0
      cache: Adding MemoryCache entry: http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict
      cache: Resource http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict has expired.
      network: Connecting http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict with proxy=HTTP @ www-proxy.us.oracle.com/148.87.19.20:80
      network: Connecting http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict with cookie "B=4nsa0rt9elsv6&b=4&d=hdBPKMppYELEfgFxzOsiIMpPDtgDosIYOQP0tA--&s=mv&i=TAOax0xJ5bJxA_wBrn32; AO=o=0; Y=v=1&n=362dj0oe7fq7r&l=5eh4l4h4l4hoekd6/o&p=m252ssic13360300&jb=21|37|24&r=2i&lg=&intl=us&np=1; PH=l=en-US&i=us; ypcdb=c5443c1cc4566b661593f4470e1935d0; ucs=bnas=0; RMBX=4nsa0rt9elsv6&b=4&d=hdBPKMppYELEfgFxzOsiIMpPDtgDosIYOQP0tA--&s=mv&i=TAOax0xJ5bJxA_wBrn32&t=30"
      network: ResponseCode for http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict : 304
      network: Encoding for http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict : null
      network: Disconnect connection to http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict
      basic: Loaded image: http://yog8.games.sp2.yahoo.com/i/us/ga/sx/cr.gif
      network: Cache entry not found [url: http://67.195.148.75:11999/crossdomain.xml, version: null]
      network: Connecting http://67.195.148.75:11999/crossdomain.xml with proxy=HTTP @ www-proxy.us.oracle.com/148.87.19.20:80
      cache: http://67.195.148.75:11999/crossdomain.xml is not cacheable.
      java.security.PrivilegedActionException: org.xml.sax.SAXParseException; lineNumber: 1; columnNumber: 1; Content is not allowed in prolog.
          at java.security.AccessController.doPrivileged(Native Method)
          at com.sun.deploy.net.CrossDomainXML.check(Unknown Source)
          at com.sun.deploy.net.CrossDomainXML.check(Unknown Source)
          at sun.plugin2.applet.SecurityManagerHelper.checkConnectHelper(Unknown Source)
          at sun.plugin2.applet.AWTAppletSecurityManager.checkConnect(Unknown Source)
          at java.net.Socket.connect(Unknown Source)
          at java.net.Socket.connect(Unknown Source)
          at java.net.Socket.<init>(Unknown Source)
          at java.net.Socket.<init>(Unknown Source)
          at y.i.55.<init>(Unknown Source)
          at y.i.87.run(Unknown Source)
      Caused by: org.xml.sax.SAXParseException; lineNumber: 1; columnNumber: 1; Content is not allowed in prolog.
          at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.createSAXParseException(Unknown Source)
          at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.fatalError(Unknown Source)
          at com.sun.org.apache.xerces.internal.impl.XMLErrorReporter.reportError(Unknown Source)
          at com.sun.org.apache.xerces.internal.impl.XMLErrorReporter.reportError(Unknown Source)
          at com.sun.org.apache.xerces.internal.impl.XMLScanner.reportFatalError(Unknown Source)
          at com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl$PrologDriver.next(Unknown Source)
          at com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl.next(Unknown Source)
          at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocument(Unknown Source)
          at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(Unknown Source)
          at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(Unknown Source)
          at com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(Unknown Source)
          at com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.parse(Unknown Source)
          at com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl$JAXPSAXParser.parse(Unknown Source)
          at com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl.parse(Unknown Source)
          at javax.xml.parsers.SAXParser.parse(Unknown Source)
          at com.sun.deploy.net.CrossDomainXML$2.run(Unknown Source)
          ... 11 more
      Exception in thread "Thread-19" java.security.AccessControlException: access denied ("java.net.SocketPermission" "67.195.148.75:11999" "connect,resolve")
          at java.security.AccessControlContext.checkPermission(Unknown Source)
          at java.security.AccessController.checkPermission(Unknown Source)
          at java.lang.SecurityManager.checkPermission(Unknown Source)
          at java.lang.SecurityManager.checkConnect(Unknown Source)
          at sun.plugin2.applet.SecurityManagerHelper.checkConnectHelper(Unknown Source)
          at sun.plugin2.applet.AWTAppletSecurityManager.checkConnect(Unknown Source)
          at java.net.Socket.connect(Unknown Source)
          at java.net.Socket.connect(Unknown Source)
          at java.net.Socket.<init>(Unknown Source)
          at java.net.Socket.<init>(Unknown Source)
          at y.i.55.<init>(Unknown Source)
          at y.i.87.run(Unknown Source)

            ngthomas Thomas Ng (Inactive)
            hungnguy Hung Nguyen (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: