Comparing 7 and 8 versions of 8160104:

--- - 2018-04-04 20:31:06.370250653 +0100
+++ 8 2018-04-04 20:30:41.675123804 +0100
@@ -2,15 +2,70 @@
 # User aefimov
 # Date 1505231651 -3600
 # Tue Sep 12 16:54:11 2017 +0100
-# Node ID 1735a600050a964dfc6c921bb0ab5d42f9020e8d
-# Parent 2a7d0883d64a457d0b631a712d0bf31501402370
+# Node ID 13dc4818297dce0ab898489df8ff120573a89949
+# Parent 0fe04d5b0f3d2874e6e7037ba8d525d7239c61d5
 8160104: CORBA communication improvements
 Reviewed-by: dfuchs, msheppar
 
+diff --git a/src/share/lib/security/java.security-aix b/src/share/lib/security/java.security-aix
+--- a/src/share/lib/security/java.security-aix
++++ b/src/share/lib/security/java.security-aix
+@@ -908,3 +908,24 @@
+ # java.rmi.dgc.VMID;\
+ # java.rmi.dgc.Lease;\
+ # maxdepth=5;maxarray=10000
++
++# CORBA ORBIorTypeCheckRegistryFilter
++# Type check enhancement for ORB::string_to_object processing
++#
++# An IOR type check filter, if configured, is used by an ORB during
++# an ORB::string_to_object invocation to check the veracity of the type encoded
++# in the ior string.
++#
++# The filter pattern consists of a semi-colon separated list of class names.
++# The configured list contains the binary class names of the IDL interface types
++# corresponding to the IDL stub class to be instantiated.
++# As such, a filter specifies a list of IDL stub classes that will be
++# allowed by an ORB when an ORB::string_to_object is invoked.
++# It is used to specify a white list configuration of acceptable
++# IDL stub types which may be contained in a stringified IOR
++# parameter passed as input to an ORB::string_to_object method.
++#
++# Note: This property is currently used by the JDK Reference implementation.
++# It is not guaranteed to be examined and used by other implementations.
++#
++#com.sun.CORBA.ORBIorTypeCheckRegistryFilter=binary_class_name;binary_class_name
+diff --git a/src/share/lib/security/java.security-linux b/src/share/lib/security/java.security-linux
+--- a/src/share/lib/security/java.security-linux
++++ b/src/share/lib/security/java.security-linux
+@@ -915,3 +915,23 @@
+ # java.rmi.dgc.Lease;\
+ # maxdepth=5;maxarray=10000
+
++# CORBA ORBIorTypeCheckRegistryFilter
++# Type check enhancement for ORB::string_to_object processing
++#
++# An IOR type check filter, if configured, is used by an ORB during
++# an ORB::string_to_object invocation to check the veracity of the type encoded
++# in the ior string.
++#
++# The filter pattern consists of a semi-colon separated list of class names.
++# The configured list contains the binary class names of the IDL interface types
++# corresponding to the IDL stub class to be instantiated.
++# As such, a filter specifies a list of IDL stub classes that will be
++# allowed by an ORB when an ORB::string_to_object is invoked.
++# It is used to specify a white list configuration of acceptable
++# IDL stub types which may be contained in a stringified IOR
++# parameter passed as input to an ORB::string_to_object method.
++#
++# Note: This property is currently used by the JDK Reference implementation.
++# It is not guaranteed to be examined and used by other implementations.
++#
++#com.sun.CORBA.ORBIorTypeCheckRegistryFilter=binary_class_name;binary_class_name
 diff --git a/src/share/lib/security/java.security-macosx b/src/share/lib/security/java.security-macosx
 --- a/src/share/lib/security/java.security-macosx
 +++ b/src/share/lib/security/java.security-macosx
-@@ -846,3 +846,24 @@
+@@ -911,3 +911,24 @@
  # java.rmi.dgc.VMID;\
  # java.rmi.dgc.Lease;\
  # maxdepth=5;maxarray=10000
@@ -38,7 +93,7 @@
 diff --git a/src/share/lib/security/java.security-solaris b/src/share/lib/security/java.security-solaris
 --- a/src/share/lib/security/java.security-solaris
 +++ b/src/share/lib/security/java.security-solaris
-@@ -845,3 +845,24 @@
+@@ -910,3 +910,24 @@
  # java.rmi.dgc.VMID;\
  # java.rmi.dgc.Lease;\
  # maxdepth=5;maxarray=10000
@@ -66,7 +121,7 @@
 diff --git a/src/share/lib/security/java.security-windows b/src/share/lib/security/java.security-windows
 --- a/src/share/lib/security/java.security-windows
 +++ b/src/share/lib/security/java.security-windows
-@@ -846,3 +846,24 @@
+@@ -911,3 +911,24 @@
  # java.rmi.dgc.VMID;\
  # java.rmi.dgc.Lease;\
  # maxdepth=5;maxarray=10000

aix is expected to be missing as there is no java.security-aix in OpenJDK 7, but linux file should be patched.