Bug 1155012

Summary: ArrayOutOfBoundsException from SHA2 certificate test
Product: [Fedora] Fedora Reporter: Mattias Ellert <mattias.ellert>
Component: java-1.7.0-openjdkAssignee: Andrew John Hughes <ahughes>
Status: CLOSED UPSTREAM QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 20CC: ahughes, dbhole, jerboaa, jvanek, omajid
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-12-04 21:09:50 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Result of failing test - includes backtrace
none
Backport of 8000897 to fix bug none

Description Mattias Ellert 2014-10-21 09:00:27 UTC
Created attachment 948853 [details]
Result of failing test - includes backtrace

Description of problem:

When building canl-java-1.3.3 for Fedora 20 using java-1.7.0-openjdk-devel-1.7.0.71-2.5.3.0.fc20 it fails with a ArrayOutOfBoundsException during a test that checks SHA2 certificates. See attatched test rusult file for details.
https://koji.fedoraproject.org/koji/taskinfo?taskID=7923128

Version-Release number of selected component (if applicable):
java-1.7.0-openjdk-devel-1.7.0.71-2.5.3.0.fc20

How reproducible:
Always - more attemts in koji:
https://koji.fedoraproject.org/koji/taskinfo?taskID=7910997
https://koji.fedoraproject.org/koji/taskinfo?taskID=7910634

Steps to Reproduce:
1. Build canl-java-1.3.3-1 using java-1.7.0-openjdk-devel-1.7.0.71-2.5.3.0.fc20

Actual results:
ArrayOutOfBoundsException

Expected results:
Working canl-java build - especially since it used to work before. See the additional info below.

Additional info:

A previous scratch build using the previous version of java-1.7.0-openjdk (java-1.7.0-openjdk-devel-1.7.0.65-2.5.2.5.fc20) worked fine:
https://koji.fedoraproject.org/koji/taskinfo?taskID=7847841

A similar problem exists in EPEL7 where building canl-java-2.1.1 worked with java-1.7.0-openjdk-devel-1.7.0.65-2.5.1.2.el7_0:
https://koji.fedoraproject.org/koji/taskinfo?taskID=7849180

But failed with java-1.7.0-openjdk-devel-1.7.0.71-2.5.3.1.el7_0:
https://koji.fedoraproject.org/koji/taskinfo?taskID=7910638

The following try on EPEL7 worked - but then somehow the openjdk version went backwards to java-1.7.0-openjdk-devel-1.7.0.65-2.5.1.2.el7_0 again:
https://koji.fedoraproject.org/koji/taskinfo?taskID=7923140

Not quite sure how the version went back to the old version in the EPEL7 build root. You can declare build root overrides in koji that can expire, but the openjdk is a RHEL package and not an EPEL package, and as far as I know you can't declare overrides for RHEL packages.

These build problems are reproducible locally and in a local mock - they are not specific to koji.

The problem affects version 1.7.0.71 in both F20 and EPEL7, but not 1.7.0.65 in either of them. The 1.7.0.71 update for F19 has not been pushed to stable yet but it is likely that it is affected too.

Comment 1 Andrew John Hughes 2014-10-22 04:44:34 UTC
Created attachment 949240 [details]
Backport of 8000897 to fix bug

I replicated the same failure on RHEL 7. Patching OpenJDK with the attached patch makes the build succeed.

I'll backport this to 6-HEAD, 7-HEAD, 6-1.13 and 7-2.5 upstream.

Comment 2 Andrew John Hughes 2014-10-29 17:26:09 UTC
All backports completed. The bug will be fixed when Fedora updates to the next upstream release.

Comment 3 Mattias Ellert 2014-12-04 15:59:52 UTC
Is there an ETA for fixing this?

It seems not to be fixed by the update java-1.7.0-openjdk-1.7.0.71-2.5.3.1.fc20.

Comment 4 Andrew John Hughes 2014-12-04 21:06:49 UTC
The change will be released in 2.5.4 in mid-January. Fedora could provide the fix earlier by applying the patch locally, but that's up to the Fedora maintainer.

Comment 7 Mattias Ellert 2014-12-09 16:04:05 UTC
After installing java-1.7.0-openjdk-1.7.0.71-2.5.3.2.fc20 the build of canl-java-1.3.3-1.fc20 succeeds.

Comment 8 jiri vanek 2014-12-10 13:29:37 UTC
oook. I will update once bodhi will come out of dead.

Comment 9 Mattias Ellert 2014-12-10 22:09:11 UTC
Thank you very much for the update.

Would it be possible to have a buildroot override so that canl-java can be built in koji?

Comment 10 jiri vanek 2014-12-11 14:12:18 UTC
I have no idea how to workaround it (otherwise then quickly karma++ in  https://admin.fedoraproject.org/updates/java-1.7.0-openjdk-1.7.0.71-2.5.3.2.fc19 / https://admin.fedoraproject.org/updates/java-1.7.0-openjdk-1.7.0.71-2.5.3.2.fc20 ) Feel free to ping fedora release engineers.

Comment 11 Mattias Ellert 2014-12-11 14:38:08 UTC
Buildroot overrides are created by the maintainer from:

https://admin.fedoraproject.org/updates/override/new

Comment 12 jiri vanek 2014-12-11 14:43:09 UTC
Oh, I didnt know. Thnak you. Here you go:
Your buildroot override has been successfully tagged. It may take up to 20 minutes for the buildroot to regenerate. You can wait for the new buildroot by running `koji wait-repo f20-build --build=java-1.7.0-openjdk-1.7.0.71-2.5.3.2.fc20`

Expires 12.12.2014


Not sure what canl-java is, but it owes me a beer :)

Comment 13 Mattias Ellert 2014-12-11 16:02:47 UTC
Thank you. canl-java built in koji for F20.

http://koji.fedoraproject.org/koji/buildinfo?buildID=586561