It is noticed on Windows machines, Yahoo Cribbage game applet does not load using jre 8-b127 promotion
Exception in thread "Thread-19" java.security.AccessControlException: access denied ("java.net.SocketPermission" "67.195.148.75:11999" "connect,resolve")
The issue does not occur on the same machine using jre 7u51 GA, 7u55 and 7u60 deploy nightlies
*** Tested Configurations:
- x86 Win 7/ FF 26, GC 32, IE 9
- x64 Win 7/ FF 26
- jre 8-b127 ( also, 7u55 deploy nightly build#397, 7u60 (build#660)
*** Steps to reproduce:
0) Clean up all JREs (if existed)
1) Install jre 8-b127
2) Set the Security Level to 'Medium' from JCP (since the yahoo applet is unsigned)
3) Use any browser to load Yahoo Cribbage game applet:
https://login.yahoo.com/config/login_verify2?.src=ga&.done=http%3A%2F%2Fgames.yahoo.com%2Fgames%2Flogin2%3Fpage%3Dcr%26amp%3Bss%3D1
4) Log into Yahoo account
5) Click 'Play Now'
6) Click 'Continue' to start the game
If the applet failed to load, the issue is reproducible. There is no such issue if using 7u51, deployment 7u55 or 7u60
Java console
------------------
Java Plug-in 11.0.2.127
Using JRE version 1.8.0-b127 Java HotSpot(TM) Client VM
User home directory = C:\Users\uadmin
----------------------------------------------------
c: clear console window
f: finalize objects on finalization queue
g: garbage collect
h: display this help message
l: dump classloader list
m: print memory usage
o: trigger logging
q: hide console
r: reload policy configuration
s: dump system and deployment properties
t: dump thread list
v: dump thread stack
x: clear classloader cache
0-5: set trace level to <n>
----------------------------------------------------
cache: Initialize resource manager: com.sun.deploy.cache.ResourceProviderImpl@7b84de
basic: Added progress listener: sun.plugin.util.ProgressMonitorAdapter@d284ce
basic: Plugin2ClassLoader.addURL parent called for http://yog8.games.sp2.yahoo.com/yog/y/it1.jar
network: Cache entry found [url: http://yog8.games.sp2.yahoo.com/yog/y/it1.jar, version: null] prevalidated=false/0
cache: Adding MemoryCache entry: http://yog8.games.sp2.yahoo.com/yog/y/it1.jar
cache: Resource http://yog8.games.sp2.yahoo.com/yog/y/it1.jar has expired.
network: Connecting http://yog8.games.sp2.yahoo.com/yog/y/it1.jar with proxy=HTTP @ www-proxy.us.oracle.com/148.87.19.20:80
network: Connecting http://yog8.games.sp2.yahoo.com/yog/y/it1.jar with cookie "B=4nsa0rt9elsv6&b=4&d=hdBPKMppYELEfgFxzOsiIMpPDtgDosIYOQP0tA--&s=mv&i=TAOax0xJ5bJxA_wBrn32; AO=o=0; Y=v=1&n=362dj0oe7fq7r&l=5eh4l4h4l4hoekd6/o&p=m252ssic13360300&jb=21|37|24&r=2i&lg=&intl=us&np=1; PH=l=en-US&i=us; ypcdb=c5443c1cc4566b661593f4470e1935d0; ucs=bnas=0; RMBX=4nsa0rt9elsv6&b=4&d=hdBPKMppYELEfgFxzOsiIMpPDtgDosIYOQP0tA--&s=mv&i=TAOax0xJ5bJxA_wBrn32&t=30"
network: ResponseCode for http://yog8.games.sp2.yahoo.com/yog/y/it1.jar : 304
network: Encoding for http://yog8.games.sp2.yahoo.com/yog/y/it1.jar : null
network: Disconnect connection to http://yog8.games.sp2.yahoo.com/yog/y/it1.jar
cache: Reading Signers from 5 http://yog8.games.sp2.yahoo.com/yog/y/it1.jar | C:\Users\uadmin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\4d8e0d24-2906eed0.idx
network: No certificate info for unsigned JAR file: http://yog8.games.sp2.yahoo.com/yog/y/it1.jar
cache: Done readSigners(http://yog8.games.sp2.yahoo.com/yog/y/it1.jar)
security: Grant connect perm for http://yog8.games.sp2.yahoo.com/yog/y/it1.jar : java.security.Permissions@23adb6 (
("java.net.URLPermission" "http://yog8.games.sp2.yahoo.com:80/-" "*:*")
)
network: Created version ID: 1.8.0
network: Created version ID: 1.8.0.00
security: Accessing keys and certificate in Mozilla user profile: null
0
basic: Embedding dialogs not enabled in Configuration
network: Created version ID: 1.8.0
network: Created version ID: 1.8.0.00
security: SSV validation:
running: 1.8.0
requested: null
range: null
javaVersionParam: null
Rule Set version: null
network: Created version ID: 1.8.0
network: Created version ID: 1.8.0
security: continue with running version
network: Created version ID: 1.8.0
network: Created version ID: 1.8
network: Created version ID: 8.0.0
security: --- parseCommandLine converted :
into:
[]
basic: Applet loaded.
basic: Applet resized and added to parent container
basic: PERF: AppletExecutionRunnable - applet.init() BEGIN ; jvmLaunch dt 324761 us, pluginInit dt 2439009 us, TotalTime: 2763770 us
basic: Applet initialized
basic: Starting applet
basic: completed perf rollup
basic: Applet made visible
basic: Applet started
basic: Told clients applet is started
network: Cache entry found [url: http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict, version: null] prevalidated=false/0
cache: Adding MemoryCache entry: http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict
cache: Resource http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict has expired.
network: Connecting http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict with proxy=HTTP @ www-proxy.us.oracle.com/148.87.19.20:80
network: Connecting http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict with cookie "B=4nsa0rt9elsv6&b=4&d=hdBPKMppYELEfgFxzOsiIMpPDtgDosIYOQP0tA--&s=mv&i=TAOax0xJ5bJxA_wBrn32; AO=o=0; Y=v=1&n=362dj0oe7fq7r&l=5eh4l4h4l4hoekd6/o&p=m252ssic13360300&jb=21|37|24&r=2i&lg=&intl=us&np=1; PH=l=en-US&i=us; ypcdb=c5443c1cc4566b661593f4470e1935d0; ucs=bnas=0; RMBX=4nsa0rt9elsv6&b=4&d=hdBPKMppYELEfgFxzOsiIMpPDtgDosIYOQP0tA--&s=mv&i=TAOax0xJ5bJxA_wBrn32&t=30"
network: ResponseCode for http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict : 304
network: Encoding for http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict : null
network: Disconnect connection to http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict
basic: Loaded image: http://yog8.games.sp2.yahoo.com/i/us/ga/sx/cr.gif
network: Cache entry not found [url: http://67.195.148.75:11999/crossdomain.xml, version: null]
network: Connecting http://67.195.148.75:11999/crossdomain.xml with proxy=HTTP @ www-proxy.us.oracle.com/148.87.19.20:80
cache: http://67.195.148.75:11999/crossdomain.xml is not cacheable.
java.security.PrivilegedActionException: org.xml.sax.SAXParseException; lineNumber: 1; columnNumber: 1; Content is not allowed in prolog.
at java.security.AccessController.doPrivileged(Native Method)
at com.sun.deploy.net.CrossDomainXML.check(Unknown Source)
at com.sun.deploy.net.CrossDomainXML.check(Unknown Source)
at sun.plugin2.applet.SecurityManagerHelper.checkConnectHelper(Unknown Source)
at sun.plugin2.applet.AWTAppletSecurityManager.checkConnect(Unknown Source)
at java.net.Socket.connect(Unknown Source)
at java.net.Socket.connect(Unknown Source)
at java.net.Socket.<init>(Unknown Source)
at java.net.Socket.<init>(Unknown Source)
at y.i.55.<init>(Unknown Source)
at y.i.87.run(Unknown Source)
Caused by: org.xml.sax.SAXParseException; lineNumber: 1; columnNumber: 1; Content is not allowed in prolog.
at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.createSAXParseException(Unknown Source)
at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.fatalError(Unknown Source)
at com.sun.org.apache.xerces.internal.impl.XMLErrorReporter.reportError(Unknown Source)
at com.sun.org.apache.xerces.internal.impl.XMLErrorReporter.reportError(Unknown Source)
at com.sun.org.apache.xerces.internal.impl.XMLScanner.reportFatalError(Unknown Source)
at com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl$PrologDriver.next(Unknown Source)
at com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl.next(Unknown Source)
at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocument(Unknown Source)
at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(Unknown Source)
at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(Unknown Source)
at com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(Unknown Source)
at com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.parse(Unknown Source)
at com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl$JAXPSAXParser.parse(Unknown Source)
at com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl.parse(Unknown Source)
at javax.xml.parsers.SAXParser.parse(Unknown Source)
at com.sun.deploy.net.CrossDomainXML$2.run(Unknown Source)
... 11 more
Exception in thread "Thread-19" java.security.AccessControlException: access denied ("java.net.SocketPermission" "67.195.148.75:11999" "connect,resolve")
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkConnect(Unknown Source)
at sun.plugin2.applet.SecurityManagerHelper.checkConnectHelper(Unknown Source)
at sun.plugin2.applet.AWTAppletSecurityManager.checkConnect(Unknown Source)
at java.net.Socket.connect(Unknown Source)
at java.net.Socket.connect(Unknown Source)
at java.net.Socket.<init>(Unknown Source)
at java.net.Socket.<init>(Unknown Source)
at y.i.55.<init>(Unknown Source)
at y.i.87.run(Unknown Source)
Exception in thread "Thread-19" java.security.AccessControlException: access denied ("java.net.SocketPermission" "67.195.148.75:11999" "connect,resolve")
The issue does not occur on the same machine using jre 7u51 GA, 7u55 and 7u60 deploy nightlies
*** Tested Configurations:
- x86 Win 7/ FF 26, GC 32, IE 9
- x64 Win 7/ FF 26
- jre 8-b127 ( also, 7u55 deploy nightly build#397, 7u60 (build#660)
*** Steps to reproduce:
0) Clean up all JREs (if existed)
1) Install jre 8-b127
2) Set the Security Level to 'Medium' from JCP (since the yahoo applet is unsigned)
3) Use any browser to load Yahoo Cribbage game applet:
https://login.yahoo.com/config/login_verify2?.src=ga&.done=http%3A%2F%2Fgames.yahoo.com%2Fgames%2Flogin2%3Fpage%3Dcr%26amp%3Bss%3D1
4) Log into Yahoo account
5) Click 'Play Now'
6) Click 'Continue' to start the game
If the applet failed to load, the issue is reproducible. There is no such issue if using 7u51, deployment 7u55 or 7u60
Java console
------------------
Java Plug-in 11.0.2.127
Using JRE version 1.8.0-b127 Java HotSpot(TM) Client VM
User home directory = C:\Users\uadmin
----------------------------------------------------
c: clear console window
f: finalize objects on finalization queue
g: garbage collect
h: display this help message
l: dump classloader list
m: print memory usage
o: trigger logging
q: hide console
r: reload policy configuration
s: dump system and deployment properties
t: dump thread list
v: dump thread stack
x: clear classloader cache
0-5: set trace level to <n>
----------------------------------------------------
cache: Initialize resource manager: com.sun.deploy.cache.ResourceProviderImpl@7b84de
basic: Added progress listener: sun.plugin.util.ProgressMonitorAdapter@d284ce
basic: Plugin2ClassLoader.addURL parent called for http://yog8.games.sp2.yahoo.com/yog/y/it1.jar
network: Cache entry found [url: http://yog8.games.sp2.yahoo.com/yog/y/it1.jar, version: null] prevalidated=false/0
cache: Adding MemoryCache entry: http://yog8.games.sp2.yahoo.com/yog/y/it1.jar
cache: Resource http://yog8.games.sp2.yahoo.com/yog/y/it1.jar has expired.
network: Connecting http://yog8.games.sp2.yahoo.com/yog/y/it1.jar with proxy=HTTP @ www-proxy.us.oracle.com/148.87.19.20:80
network: Connecting http://yog8.games.sp2.yahoo.com/yog/y/it1.jar with cookie "B=4nsa0rt9elsv6&b=4&d=hdBPKMppYELEfgFxzOsiIMpPDtgDosIYOQP0tA--&s=mv&i=TAOax0xJ5bJxA_wBrn32; AO=o=0; Y=v=1&n=362dj0oe7fq7r&l=5eh4l4h4l4hoekd6/o&p=m252ssic13360300&jb=21|37|24&r=2i&lg=&intl=us&np=1; PH=l=en-US&i=us; ypcdb=c5443c1cc4566b661593f4470e1935d0; ucs=bnas=0; RMBX=4nsa0rt9elsv6&b=4&d=hdBPKMppYELEfgFxzOsiIMpPDtgDosIYOQP0tA--&s=mv&i=TAOax0xJ5bJxA_wBrn32&t=30"
network: ResponseCode for http://yog8.games.sp2.yahoo.com/yog/y/it1.jar : 304
network: Encoding for http://yog8.games.sp2.yahoo.com/yog/y/it1.jar : null
network: Disconnect connection to http://yog8.games.sp2.yahoo.com/yog/y/it1.jar
cache: Reading Signers from 5 http://yog8.games.sp2.yahoo.com/yog/y/it1.jar | C:\Users\uadmin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\4d8e0d24-2906eed0.idx
network: No certificate info for unsigned JAR file: http://yog8.games.sp2.yahoo.com/yog/y/it1.jar
cache: Done readSigners(http://yog8.games.sp2.yahoo.com/yog/y/it1.jar)
security: Grant connect perm for http://yog8.games.sp2.yahoo.com/yog/y/it1.jar : java.security.Permissions@23adb6 (
("java.net.URLPermission" "http://yog8.games.sp2.yahoo.com:80/-" "*:*")
)
network: Created version ID: 1.8.0
network: Created version ID: 1.8.0.00
security: Accessing keys and certificate in Mozilla user profile: null
0
basic: Embedding dialogs not enabled in Configuration
network: Created version ID: 1.8.0
network: Created version ID: 1.8.0.00
security: SSV validation:
running: 1.8.0
requested: null
range: null
javaVersionParam: null
Rule Set version: null
network: Created version ID: 1.8.0
network: Created version ID: 1.8.0
security: continue with running version
network: Created version ID: 1.8.0
network: Created version ID: 1.8
network: Created version ID: 8.0.0
security: --- parseCommandLine converted :
into:
[]
basic: Applet loaded.
basic: Applet resized and added to parent container
basic: PERF: AppletExecutionRunnable - applet.init() BEGIN ; jvmLaunch dt 324761 us, pluginInit dt 2439009 us, TotalTime: 2763770 us
basic: Applet initialized
basic: Starting applet
basic: completed perf rollup
basic: Applet made visible
basic: Applet started
basic: Told clients applet is started
network: Cache entry found [url: http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict, version: null] prevalidated=false/0
cache: Adding MemoryCache entry: http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict
cache: Resource http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict has expired.
network: Connecting http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict with proxy=HTTP @ www-proxy.us.oracle.com/148.87.19.20:80
network: Connecting http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict with cookie "B=4nsa0rt9elsv6&b=4&d=hdBPKMppYELEfgFxzOsiIMpPDtgDosIYOQP0tA--&s=mv&i=TAOax0xJ5bJxA_wBrn32; AO=o=0; Y=v=1&n=362dj0oe7fq7r&l=5eh4l4h4l4hoekd6/o&p=m252ssic13360300&jb=21|37|24&r=2i&lg=&intl=us&np=1; PH=l=en-US&i=us; ypcdb=c5443c1cc4566b661593f4470e1935d0; ucs=bnas=0; RMBX=4nsa0rt9elsv6&b=4&d=hdBPKMppYELEfgFxzOsiIMpPDtgDosIYOQP0tA--&s=mv&i=TAOax0xJ5bJxA_wBrn32&t=30"
network: ResponseCode for http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict : 304
network: Encoding for http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict : null
network: Disconnect connection to http://yog8.games.sp2.yahoo.com/yog/y/i/us-t1.ldict
basic: Loaded image: http://yog8.games.sp2.yahoo.com/i/us/ga/sx/cr.gif
network: Cache entry not found [url: http://67.195.148.75:11999/crossdomain.xml, version: null]
network: Connecting http://67.195.148.75:11999/crossdomain.xml with proxy=HTTP @ www-proxy.us.oracle.com/148.87.19.20:80
cache: http://67.195.148.75:11999/crossdomain.xml is not cacheable.
java.security.PrivilegedActionException: org.xml.sax.SAXParseException; lineNumber: 1; columnNumber: 1; Content is not allowed in prolog.
at java.security.AccessController.doPrivileged(Native Method)
at com.sun.deploy.net.CrossDomainXML.check(Unknown Source)
at com.sun.deploy.net.CrossDomainXML.check(Unknown Source)
at sun.plugin2.applet.SecurityManagerHelper.checkConnectHelper(Unknown Source)
at sun.plugin2.applet.AWTAppletSecurityManager.checkConnect(Unknown Source)
at java.net.Socket.connect(Unknown Source)
at java.net.Socket.connect(Unknown Source)
at java.net.Socket.<init>(Unknown Source)
at java.net.Socket.<init>(Unknown Source)
at y.i.55.<init>(Unknown Source)
at y.i.87.run(Unknown Source)
Caused by: org.xml.sax.SAXParseException; lineNumber: 1; columnNumber: 1; Content is not allowed in prolog.
at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.createSAXParseException(Unknown Source)
at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.fatalError(Unknown Source)
at com.sun.org.apache.xerces.internal.impl.XMLErrorReporter.reportError(Unknown Source)
at com.sun.org.apache.xerces.internal.impl.XMLErrorReporter.reportError(Unknown Source)
at com.sun.org.apache.xerces.internal.impl.XMLScanner.reportFatalError(Unknown Source)
at com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl$PrologDriver.next(Unknown Source)
at com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl.next(Unknown Source)
at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocument(Unknown Source)
at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(Unknown Source)
at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(Unknown Source)
at com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(Unknown Source)
at com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.parse(Unknown Source)
at com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl$JAXPSAXParser.parse(Unknown Source)
at com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl.parse(Unknown Source)
at javax.xml.parsers.SAXParser.parse(Unknown Source)
at com.sun.deploy.net.CrossDomainXML$2.run(Unknown Source)
... 11 more
Exception in thread "Thread-19" java.security.AccessControlException: access denied ("java.net.SocketPermission" "67.195.148.75:11999" "connect,resolve")
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkConnect(Unknown Source)
at sun.plugin2.applet.SecurityManagerHelper.checkConnectHelper(Unknown Source)
at sun.plugin2.applet.AWTAppletSecurityManager.checkConnect(Unknown Source)
at java.net.Socket.connect(Unknown Source)
at java.net.Socket.connect(Unknown Source)
at java.net.Socket.<init>(Unknown Source)
at java.net.Socket.<init>(Unknown Source)
at y.i.55.<init>(Unknown Source)
at y.i.87.run(Unknown Source)