Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8087189

RMI server-side multiplex protocol support should be removed

    XMLWordPrintable

Details

    • b22

    Description

      The RMI code supports a disused protocol called the "multiplex" protocol. This was removed by JDK-4183204 in JDK 1.2.2. More history is in JDK-4257730. The latter bug comments indicate that the multiplex protocol was implemented in order to solve a problem that existed in JDK 1.0.2 but that it was no longer necessary and was considered "deprecated" by JDK 1.2.2.

      JDK-4183204 removed client initiation of the multiplex protocol but server side support still exists and can probably be exercised. This is a potential security risk.

      An initial step would be simply to disable the multiplex protocol processing so that the old code will no longer be invoked. Done in 8158963 for JDK 9.

      A second step would be to remove the multiplex support entirely.

      Attachments

        Issue Links

          csr for

          CSR - null JDK-8186925 RMI server-side multiplex protocol support should be removed

          • P3 - Major loss of function.
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. JDK-8158963 RMI server-side multiplex protocol should be disabled

          • P3 - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. JDK-4257730 Client initiated multiplex RMI socket connectivity disabled in JDK 1.2.2

          • P4 - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. JDK-8197415 Move two jdk_rmi tests into OpenJDK

          • P4 - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Enhancement - null JDK-8006859 Improve RMI's HTTP header parsing

          • P3 - Major loss of function.
          • Resolved

          Enhancement - null JDK-4183204 client-side multiplexing should be disabled

          • P4 - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Activity

            People

              rriggs Roger Riggs
              smarks Stuart Marks
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: