Update OpenJDK to 17

vendor/generate_jre.sh

@@ -3,12 +3,12 @@
 # This script is used as a reference to generate a stripped-down JRE for the server
 
 rm -rf java/
-wget https://github.com/AdoptOpenJDK/openjdk16-binaries/releases/download/jdk-16.0.1%2B9/OpenJDK16U-jdk_x64_linux_hotspot_16.0.1_9.tar.gz
-tar -zxvf OpenJDK*
-rm OpenJDK*
+curl -L https://download.java.net/java/GA/jdk17.0.1/2a2082e5a09d4267845be086888add4f/12/GPL/openjdk-17.0.1_linux-x64_bin.tar.gz > openjdk.tar.gz
+tar -zxvf openjdk.tar.gz
+rm openjdk.tar.gz
 mv jdk* jdk/
 jdk/bin/jlink --no-header-files --no-man-pages --compress=2 --strip-debug \
 	--exclude-files=**java_*.properties,**jrunscript,**keytool,**legal/** \
-	--add-modules java.desktop,java.logging,java.management,java.naming,java.net.http,java.scripting,java.sql,jdk.crypto.ec,jdk.unsupported,jdk.zipfs \
+	--add-modules java.desktop,java.instrument,java.logging,java.management,java.naming,java.net.http,java.scripting,java.sql,jdk.crypto.ec,jdk.security.auth,jdk.unsupported,jdk.zipfs \
 	--output java
 rm -rf jdk/

vendor/java/conf/logging.properties

@@ -2,15 +2,15 @@
 #  	Default Logging Configuration File
 #
 # You can use a different file by specifying a filename
-# with the java.util.logging.config.file system property.  
-# For example java -Djava.util.logging.config.file=myfile
+# with the java.util.logging.config.file system property.
+# For example, java -Djava.util.logging.config.file=myfile
 ############################################################
 
 ############################################################
 #  	Global properties
 ############################################################
 
-# "handlers" specifies a comma separated list of log Handler 
+# "handlers" specifies a comma-separated list of log Handler
 # classes.  These handlers will be installed during VM startup.
 # Note that these classes must be on the system classpath.
 # By default we only configure a ConsoleHandler, which will only
@@ -23,7 +23,7 @@ handlers= java.util.logging.ConsoleHandler
 # Default global logging level.
 # This specifies which kinds of events are logged across
 # all loggers.  For any given facility this global level
-# can be overriden by a facility specific level
+# can be overridden by a facility-specific level
 # Note that the ConsoleHandler also has a separate level
 # setting to limit messages printed to the console.
 .level= INFO
@@ -43,18 +43,18 @@ java.util.logging.FileHandler.count = 1
 java.util.logging.FileHandler.maxLocks = 100
 java.util.logging.FileHandler.formatter = java.util.logging.XMLFormatter
 
-# Limit the message that are printed on the console to INFO and above.
+# Limit the messages that are printed on the console to INFO and above.
 java.util.logging.ConsoleHandler.level = INFO
 java.util.logging.ConsoleHandler.formatter = java.util.logging.SimpleFormatter
 
-# Example to customize the SimpleFormatter output format 
+# Example to customize the SimpleFormatter output format
 # to print one-line log message like this:
 #     <level>: <log message> [<date/time>]
 #
 # java.util.logging.SimpleFormatter.format=%4$s: %5$s [%1$tc]%n
 
 ############################################################
-# Facility specific properties.
+# Facility-specific properties.
 # Provides extra control for each logger.
 ############################################################
 

vendor/java/conf/security/java.security

@@ -430,21 +430,22 @@ networkaddress.cache.negative.ttl=10
 # Policy for failed Kerberos KDC lookups:
 #
 # When a KDC is unavailable (network error, service failure, etc), it is
-# put inside a blacklist and accessed less often for future requests. The
+# put inside a secondary list and accessed less often for future requests. The
 # value (case-insensitive) for this policy can be:
 #
 # tryLast
-#    KDCs in the blacklist are always tried after those not on the list.
+#    KDCs in the secondary list are always tried after those not on the list.
 #
 # tryLess[:max_retries,timeout]
-#    KDCs in the blacklist are still tried by their order in the configuration,
-#    but with smaller max_retries and timeout values. max_retries and timeout
-#    are optional numerical parameters (default 1 and 5000, which means once
-#    and 5 seconds). Please notes that if any of the values defined here is
-#    more than what is defined in krb5.conf, it will be ignored.
+#    KDCs in the secondary list are still tried by their order in the
+#    configuration, but with smaller max_retries and timeout values.
+#    max_retries and timeout are optional numerical parameters (default 1 and
+#    5000, which means once and 5 seconds). Please note that if any of the
+#    values defined here are more than what is defined in krb5.conf, it will be
+#    ignored.
 #
-# Whenever a KDC is detected as available, it is removed from the blacklist.
-# The blacklist is reset when krb5.conf is reloaded. You can add
+# Whenever a KDC is detected as available, it is removed from the secondary
+# list. The secondary list is reset when krb5.conf is reloaded. You can add
 # refreshKrb5Config=true to a JAAS configuration file so that krb5.conf is
 # reloaded whenever a JAAS authentication is attempted.
 #
@@ -913,10 +914,11 @@ jdk.tls.keyLimits=AES/GCM/NoPadding KeyUpdate 2^37
 crypto.policy=unlimited
 
 #
-# The policy for the XML Signature secure validation mode. The mode is
-# enabled by setting the property "org.jcp.xml.dsig.secureValidation" to
-# true with the javax.xml.crypto.XMLCryptoContext.setProperty() method,
-# or by running the code with a SecurityManager.
+# The policy for the XML Signature secure validation mode. Validation of
+# XML Signatures that violate any of these constraints will fail. The
+# mode is enforced by default. The mode can be disabled by setting the
+# property "org.jcp.xml.dsig.secureValidation" to Boolean.FALSE with the
+# javax.xml.crypto.XMLCryptoContext.setProperty() method.
 #
 #   Policy:
 #       Constraint {"," Constraint }
@@ -943,14 +945,19 @@ crypto.policy=unlimited
 # MaxReferencesConstraint or KeySizeConstraint (for the same key type) is
 # specified more than once, only the last entry is enforced.
 #
-# Note: This property is currently used by the JDK Reference implementation. It
-# is not guaranteed to be examined and used by other implementations.
+# Note: This property is currently used by the JDK Reference implementation.
+# It is not guaranteed to be examined and used by other implementations.
 #
 jdk.xml.dsig.secureValidationPolicy=\
     disallowAlg http://www.w3.org/TR/1999/REC-xslt-19991116,\
     disallowAlg http://www.w3.org/2001/04/xmldsig-more#rsa-md5,\
     disallowAlg http://www.w3.org/2001/04/xmldsig-more#hmac-md5,\
     disallowAlg http://www.w3.org/2001/04/xmldsig-more#md5,\
+    disallowAlg http://www.w3.org/2000/09/xmldsig#sha1,\
+    disallowAlg http://www.w3.org/2000/09/xmldsig#dsa-sha1,\
+    disallowAlg http://www.w3.org/2000/09/xmldsig#rsa-sha1,\
+    disallowAlg http://www.w3.org/2007/05/xmldsig-more#sha1-rsa-MGF1,\
+    disallowAlg http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1,\
     maxTransforms 5,\
     maxReferences 30,\
     disallowReferenceUriSchemes file http https,\
@@ -960,11 +967,27 @@ jdk.xml.dsig.secureValidationPolicy=\
     noDuplicateIds,\
     noRetrievalMethodLoops
 
+
 #
-# Serialization system-wide filter
+# Deserialization JVM-wide filter factory
 #
-# A filter, if configured, is used by java.io.ObjectInputStream during
-# deserialization to check the contents of the stream.
+# A filter factory class name is used to configure the JVM-wide filter factory.
+# The class must be public, must have a public zero-argument constructor, implement the
+# java.util.function.BinaryOperator<java.io.ObjectInputFilter> interface, provide its
+# implementation and be accessible via the application class loader.
+# A builtin filter factory is used if no filter factory is defined.
+# See java.io.ObjectInputFilter.Config for more information.
+#
+# If the system property jdk.serialFilterFactory is also specified, it supersedes
+# the security property value defined here.
+#
+#jdk.serialFilterFactory=<classname>
+
+#
+# Deserialization JVM-wide filter
+#
+# A filter, if configured, is used by the filter factory to provide the filter used by
+# java.io.ObjectInputStream during deserialization to check the contents of the stream.
 # A filter is configured as a sequence of patterns, each pattern is either
 # matched against the name of a class in the stream or defines a limit.
 # Patterns are separated by ";" (semicolon).
@@ -1042,7 +1065,6 @@ jdk.xml.dsig.secureValidationPolicy=\
 #    sun.rmi.server.UnicastRef;\
 #    sun.rmi.server.RMIClientSocketFactory;\
 #    sun.rmi.server.RMIServerSocketFactory;\
-#    java.rmi.activation.ActivationID;\
 #    java.rmi.server.UID
 #
 # RMI Distributed Garbage Collector (DGC) Serial Filter

vendor/java/lib/classlist

@@ -172,6 +172,7 @@ java/lang/module/ModuleDescriptor$Exports
 java/lang/module/ModuleDescriptor$Provides
 java/util/ImmutableCollections$AbstractImmutableList
 java/util/ImmutableCollections$List12
+java/util/ImmutableCollections$ListN
 java/net/URI
 java/util/function/Supplier
 jdk/internal/module/SystemModuleFinders$2
@@ -180,7 +181,6 @@ java/lang/module/ModuleDescriptor$Requires
 java/lang/Enum
 java/lang/module/ModuleDescriptor$Requires$Modifier
 java/lang/module/Configuration
-java/util/ImmutableCollections$ListN
 java/lang/module/ResolvedModule
 java/util/function/Function
 jdk/internal/module/ModuleLoaderMap$Mapper
@@ -236,6 +236,8 @@ java/lang/ref/ReferenceQueue$Lock
 jdk/internal/access/JavaLangRefAccess
 java/lang/ref/Reference$1
 java/lang/ref/Finalizer$FinalizerThread
+jdk/internal/access/JavaLangAccess
+java/lang/System$2
 jdk/internal/util/SystemProps
 jdk/internal/util/SystemProps$Raw
 java/nio/charset/Charset
@@ -257,11 +259,6 @@ sun/nio/cs/UTF_16BE
 sun/nio/cs/UTF_16LE
 sun/nio/cs/UTF_16
 java/lang/StringCoding
-java/lang/StringCoding$1
-java/lang/ThreadLocal$ThreadLocalMap
-java/lang/ThreadLocal$ThreadLocalMap$Entry
-jdk/internal/misc/TerminatingThreadLocal
-java/lang/StringCoding$Result
 java/lang/StringConcatHelper
 java/lang/VersionProps
 jdk/internal/misc/VM
@@ -307,8 +304,6 @@ jdk/internal/misc/Signal
 java/util/Hashtable$Entry
 jdk/internal/misc/Signal$NativeHandler
 jdk/internal/misc/OSEnvironment
-jdk/internal/access/JavaLangAccess
-java/lang/System$2
 java/util/Collections
 java/util/Collections$EmptySet
 java/util/Collections$EmptyList
@@ -345,14 +340,7 @@ sun/nio/fs/UnixPath
 sun/nio/fs/Util
 sun/nio/fs/UnixNativeDispatcher
 jdk/internal/loader/BootLoader
-jdk/internal/loader/ArchivedClassLoaders
-jdk/internal/module/ServicesCatalog
-jdk/internal/loader/AbstractClassLoaderValue
-jdk/internal/loader/ClassLoaderValue
 jdk/internal/loader/NativeLibraries
-jdk/internal/loader/NativeLibrary
-jdk/internal/loader/NativeLibraries$NativeLibraryImpl
-jdk/internal/loader/NativeLibraries$2
 java/util/HashSet
 java/util/Queue
 java/util/Deque
@@ -362,6 +350,8 @@ jdk/internal/loader/ClassLoaderHelper
 jdk/internal/loader/NativeLibraries$1
 java/io/File$PathStatus
 java/util/ArrayDeque$DeqIterator
+jdk/internal/loader/NativeLibrary
+jdk/internal/loader/NativeLibraries$NativeLibraryImpl
 java/security/cert/Certificate
 java/util/concurrent/ConcurrentHashMap$CollectionView
 java/util/concurrent/ConcurrentHashMap$ValuesView
@@ -374,9 +364,6 @@ java/nio/file/attribute/PosixFileAttributes
 sun/nio/fs/UnixFileAttributes
 sun/nio/fs/UnixFileStoreAttributes
 sun/nio/fs/UnixMountEntry
-java/lang/Readable
-java/nio/CharBuffer
-java/nio/HeapCharBuffer
 jdk/internal/module/ModulePath
 jdk/internal/perf/PerfCounter
 jdk/internal/perf/Perf$GetPerfAction
@@ -401,6 +388,7 @@ java/lang/Runtime$Version
 java/util/Optional
 jdk/internal/access/JavaNetUriAccess
 java/net/URI$1
+jdk/internal/loader/ArchivedClassLoaders
 jdk/internal/loader/ClassLoaders$BootClassLoader
 java/lang/ClassLoader$ParallelLoaders
 java/util/WeakHashMap
@@ -417,10 +405,14 @@ java/net/URL$DefaultFactory
 jdk/internal/access/JavaNetURLAccess
 java/net/URL$3
 sun/net/www/ParseUtil
+java/util/HexFormat
 java/net/URLStreamHandler
 sun/net/www/protocol/file/Handler
 sun/net/util/IPAddressUtil
 jdk/internal/util/Preconditions
+jdk/internal/module/ServicesCatalog
+jdk/internal/loader/AbstractClassLoaderValue
+jdk/internal/loader/ClassLoaderValue
 jdk/internal/module/SystemModuleFinders
 jdk/internal/module/SystemModulesMap
 jdk/internal/module/SystemModules
@@ -473,7 +465,6 @@ java/lang/invoke/MethodTypeForm
 java/lang/invoke/MethodType$ConcurrentWeakInternSet$WeakEntry
 sun/invoke/util/Wrapper
 sun/invoke/util/Wrapper$Format
-java/lang/StringUTF16
 java/lang/invoke/LambdaForm$NamedFunction
 java/lang/invoke/DirectMethodHandle$Holder
 sun/invoke/util/ValueConversions
@@ -485,10 +476,13 @@ java/lang/invoke/LambdaForm$BasicType
 java/lang/reflect/Array
 java/lang/invoke/LambdaForm$Name
 java/lang/invoke/LambdaForm$Holder
-java/lang/invoke/MethodHandleImpl$Intrinsic
 java/lang/invoke/InvokerBytecodeGenerator
 java/lang/invoke/InvokerBytecodeGenerator$2
-java/lang/invoke/GenerateJLIClassesHelper
+java/lang/invoke/MethodHandleImpl$Intrinsic
+java/lang/StringUTF16
+java/lang/Readable
+java/nio/CharBuffer
+java/nio/HeapCharBuffer
 @lambda-form-invoker [LF_RESOLVE] java.lang.invoke.DirectMethodHandle$Holder invokeStatic L7_L
 java/lang/Module$ReflectionData
 java/lang/WeakPairMap
@@ -515,7 +509,6 @@ jdk/internal/org/objectweb/asm/AnnotationWriter
 java/lang/invoke/InvokerBytecodeGenerator$ClassData
 sun/invoke/util/VerifyType
 sun/invoke/empty/Empty
-sun/reflect/misc/ReflectUtil
 java/util/ArrayList$Itr
 jdk/internal/org/objectweb/asm/FieldVisitor
 jdk/internal/org/objectweb/asm/FieldWriter
@@ -525,6 +518,8 @@ java/lang/invoke/MethodHandles$Lookup$ClassFile
 java/lang/invoke/MethodHandles$Lookup$ClassOption
 java/lang/invoke/MethodHandles$Lookup$ClassDefiner
 java/lang/invoke/BootstrapMethodInvoker
+java/lang/invoke/VarHandle$AccessMode
+java/lang/invoke/VarHandle$AccessType
 java/lang/invoke/Invokers$Holder
 @lambda-form-invoker [LF_RESOLVE] java.lang.invoke.DirectMethodHandle$Holder invokeSpecial L8_L
 @lambda-form-invoker [LF_RESOLVE] java.lang.invoke.Invokers$Holder invokeExact_MT L8_L
@@ -563,11 +558,11 @@ java/lang/invoke/DirectMethodHandle$2
 @lambda-form-invoker [LF_RESOLVE] java.lang.invoke.DirectMethodHandle$Holder getReference LL_L
 java/lang/invoke/DirectMethodHandle$Accessor
 @lambda-form-invoker [LF_RESOLVE] java.lang.invoke.LambdaForm$Holder identity_L LL_L
-sun/invoke/util/Wrapper$1
-@lambda-form-invoker [LF_RESOLVE] java.lang.invoke.LambdaForm$Holder zero_L L_L
 java/lang/invoke/DelegatingMethodHandle
 java/lang/invoke/MethodHandleImpl$IntrinsicMethodHandle
 java/lang/invoke/DelegatingMethodHandle$Holder
+sun/invoke/util/Wrapper$1
+@lambda-form-invoker [LF_RESOLVE] java.lang.invoke.LambdaForm$Holder zero_L L_L
 java/lang/invoke/LambdaFormEditor
 java/lang/invoke/LambdaFormEditor$TransformKey
 java/lang/invoke/LambdaFormBuffer
@@ -582,10 +577,7 @@ java/lang/ref/Cleaner$Cleanable
 jdk/internal/ref/PhantomCleanable
 jdk/internal/ref/CleanerImpl$PhantomCleanableRef
 jdk/internal/ref/CleanerImpl$CleanerCleanable
-jdk/internal/ref/CleanerFactory$1$1
 jdk/internal/misc/InnocuousThread
-jdk/internal/misc/InnocuousThread$3
-jdk/internal/misc/InnocuousThread$2
 @lambda-form-invoker [LF_RESOLVE] java.lang.invoke.DirectMethodHandle$Holder invokeSpecial LL_L
 @lambda-form-invoker [LF_RESOLVE] java.lang.invoke.Invokers$Holder linkToTargetMethod L_L
 @lambda-proxy jdk/internal/module/DefaultRoots test ()Ljava/util/function/Predicate; (Ljava/lang/Object;)Z REF_invokeStatic jdk/internal/module/DefaultRoots lambda$compute$0 (Ljava/lang/module/ModuleReference;)Z (Ljava/lang/module/ModuleReference;)Z
@@ -685,8 +677,11 @@ sun/nio/fs/DynamicFileAttributeView
 sun/nio/fs/AbstractBasicFileAttributeView
 sun/nio/fs/UnixFileAttributeViews$Basic
 sun/nio/fs/NativeBuffers
+jdk/internal/misc/TerminatingThreadLocal
 sun/nio/fs/NativeBuffers$1
 jdk/internal/misc/TerminatingThreadLocal$1
+java/lang/ThreadLocal$ThreadLocalMap
+java/lang/ThreadLocal$ThreadLocalMap$Entry
 java/util/IdentityHashMap
 java/util/IdentityHashMap$KeySet
 sun/nio/fs/NativeBuffer
@@ -844,6 +839,9 @@ java/lang/NamedPackage
 java/lang/Package
 java/lang/Package$VersionInfo
 sun/nio/ByteBuffered
+java/util/zip/Checksum
+java/util/zip/CRC32
+java/util/zip/Checksum$1
 java/security/SecureClassLoader$CodeSourceKey
 java/security/SecureClassLoader$1
 java/security/PermissionCollection
@@ -953,7 +951,6 @@ java/nio/DirectIntBufferRU
 jdk/internal/jimage/ImageStrings
 jdk/internal/jimage/ImageStringsReader
 jdk/internal/jimage/decompressor/Decompressor
-jdk/internal/jimage/ImageLocation
 java/util/Collections$EmptyIterator
 java/util/Collections$EmptyEnumeration
 jdk/internal/loader/BuiltinClassLoader$1
@@ -994,18 +991,21 @@ java/lang/invoke/VarHandle$1
 jdk/internal/util/Preconditions$1
 java/lang/invoke/VarHandleGuards
 java/lang/invoke/VarForm
-java/lang/invoke/VarHandle$AccessType
-java/lang/invoke/VarHandle$AccessMode
 java/util/concurrent/atomic/Striped64
 java/util/concurrent/atomic/LongAdder
 java/util/concurrent/ConcurrentSkipListMap$Node
 java/net/InetAddressImplFactory
 java/net/InetAddressImpl
-java/net/Inet4AddressImpl
+java/net/Inet6AddressImpl
 java/lang/Class$1
 java/net/InetAddress$NameService
 java/net/InetAddress$PlatformNameService
 java/net/Inet4Address
+java/net/NetworkInterface
+java/net/InterfaceAddress
+java/net/Inet6Address
+java/net/Inet6Address$Inet6AddressHolder
+java/net/DefaultInterface
 java/util/Arrays$ArrayList
 java/util/Spliterators$ArraySpliterator
 java/util/StringJoiner
@@ -1021,25 +1021,30 @@ java/util/concurrent/ForkJoinTask
 java/util/concurrent/CountedCompleter
 java/util/stream/AbstractTask
 java/util/stream/ReduceOps$ReduceTask
-java/util/concurrent/ForkJoinTask$ExceptionNode
 java/lang/invoke/VarHandleInts$FieldInstanceReadOnly
 java/lang/invoke/VarHandleInts$FieldInstanceReadWrite
+java/util/concurrent/ForkJoinTask$Aux
 java/util/concurrent/Executor
 java/util/concurrent/ExecutorService
 java/util/concurrent/AbstractExecutorService
 java/util/concurrent/ForkJoinPool
 java/lang/invoke/VarHandleLongs$FieldInstanceReadOnly
 java/lang/invoke/VarHandleLongs$FieldInstanceReadWrite
-java/lang/invoke/VarHandleReferences$Array
+java/lang/invoke/VarHandleInts$FieldStaticReadOnly
+java/lang/invoke/VarHandleInts$FieldStaticReadWrite
 java/util/concurrent/ForkJoinPool$ForkJoinWorkerThreadFactory
 java/util/concurrent/ForkJoinPool$DefaultForkJoinWorkerThreadFactory
 java/util/concurrent/ForkJoinPool$1
+java/util/concurrent/ForkJoinPool$DefaultCommonPoolForkJoinWorkerThreadFactory
 java/util/concurrent/ForkJoinPool$WorkQueue
 java/util/concurrent/ForkJoinWorkerThread
+java/util/random/RandomGenerator
 java/util/Random
 java/util/concurrent/ThreadLocalRandom
+jdk/internal/util/random/RandomSupport
+java/lang/invoke/VarHandleReferences$Array
 java/lang/invoke/VarHandle$AccessDescriptor
-java/util/concurrent/ForkJoinPool$DefaultForkJoinWorkerThreadFactory$1
+java/util/concurrent/ForkJoinPool$DefaultCommonPoolForkJoinWorkerThreadFactory$1
 java/util/regex/ASCII
 @lambda-proxy java/util/regex/CharPredicates is ()Ljava/util/regex/Pattern$BmpCharPredicate; (I)Z REF_invokeStatic java/util/regex/CharPredicates lambda$ASCII_SPACE$20 (I)Z (I)Z
 java/util/ArrayList$SubList
@@ -1168,7 +1173,6 @@ java/time/chrono/Chronology
 java/time/chrono/AbstractChronology
 java/time/chrono/IsoChronology
 java/util/Locale$Category
-java/util/Locale$1
 java/time/format/DateTimeFormatterBuilder$CompositePrinterParser
 java/time/format/DecimalStyle
 java/time/format/DateTimeFormatterBuilder$SettingsParser
@@ -1206,6 +1210,7 @@ java/time/LocalDateTime
 java/time/chrono/ChronoLocalDate
 java/time/LocalDate
 java/time/LocalTime
+java/time/InstantSource
 java/time/Clock
 java/time/Clock$SystemClock
 java/time/Instant
@@ -1247,7 +1252,8 @@ sun/util/locale/LocaleObjectCache
 sun/util/locale/BaseLocale$Cache
 sun/util/locale/LocaleObjectCache$CacheEntry
 java/util/Locale$Cache
-sun/util/cldr/CLDRLocaleProviderAdapter$1
+@lambda-form-invoker [LF_RESOLVE] java.lang.invoke.DirectMethodHandle$Holder invokeStatic L_L
+@lambda-proxy sun/util/cldr/CLDRLocaleProviderAdapter run ()Ljava/security/PrivilegedExceptionAction; ()Ljava/lang/Object; REF_invokeStatic sun/util/cldr/CLDRLocaleProviderAdapter lambda$new$0 ()Lsun/util/locale/provider/LocaleDataMetaInfo; ()Lsun/util/locale/provider/LocaleDataMetaInfo;
 @lambda-proxy sun/util/locale/provider/JRELocaleProviderAdapter run (Lsun/util/locale/provider/JRELocaleProviderAdapter;)Ljava/security/PrivilegedAction; ()Ljava/lang/Object; REF_invokeVirtual sun/util/locale/provider/JRELocaleProviderAdapter lambda$getDateFormatProvider$2 ()Ljava/text/spi/DateFormatProvider; ()Ljava/text/spi/DateFormatProvider;
 sun/util/locale/provider/AvailableLanguageTags
 sun/util/locale/provider/DateFormatProviderImpl
@@ -1294,7 +1300,7 @@ java/util/ResourceBundle$NoFallbackControl
 java/util/AbstractSequentialList
 java/util/LinkedList
 java/util/LinkedList$Node
-@lambda-proxy sun/util/cldr/CLDRLocaleProviderAdapter run (Lsun/util/cldr/CLDRLocaleProviderAdapter;)Ljava/security/PrivilegedAction; ()Ljava/lang/Object; REF_invokeVirtual sun/util/cldr/CLDRLocaleProviderAdapter lambda$getCalendarDataProvider$0 ()Ljava/util/spi/CalendarDataProvider; ()Ljava/util/spi/CalendarDataProvider;
+@lambda-proxy sun/util/cldr/CLDRLocaleProviderAdapter run (Lsun/util/cldr/CLDRLocaleProviderAdapter;)Ljava/security/PrivilegedAction; ()Ljava/lang/Object; REF_invokeVirtual sun/util/cldr/CLDRLocaleProviderAdapter lambda$getCalendarDataProvider$1 ()Ljava/util/spi/CalendarDataProvider; ()Ljava/util/spi/CalendarDataProvider;
 sun/util/locale/provider/CalendarDataProviderImpl
 sun/util/cldr/CLDRCalendarDataProviderImpl
 sun/util/locale/provider/LocaleResources
@@ -1358,10 +1364,10 @@ java/text/Format$FieldDelegate
 java/text/DontCareFieldPosition$1
 java/text/NumberFormat$Field
 java/util/Formatter
+java/util/Formatter$Conversion
 java/util/Formatter$FormatString
 java/util/Formatter$FormatSpecifier
 java/util/Formatter$Flags
-java/util/Formatter$Conversion
 java/util/Formattable
 @lambda-form-invoker [LF_RESOLVE] java.lang.invoke.LambdaForm$Holder identity_D LD_D
 @lambda-form-invoker [LF_RESOLVE] java.lang.invoke.LambdaForm$Holder zero_D L_D

vendor/java/lib/security/default.policy

@@ -19,6 +19,7 @@ grant codeBase "jrt:/java.net.http" {
     permission java.lang.RuntimePermission "accessClassInPackage.sun.net.util";
     permission java.lang.RuntimePermission "accessClassInPackage.sun.net.www";
     permission java.lang.RuntimePermission "accessClassInPackage.jdk.internal.misc";
+    permission java.lang.RuntimePermission "modifyThread";
     permission java.net.SocketPermission "*","connect,resolve";
     permission java.net.URLPermission "http:*","*:*";
     permission java.net.URLPermission "https:*","*:*";
@@ -98,6 +99,8 @@ grant codeBase "jrt:/java.xml.crypto" {
                    "accessClassInPackage.com.sun.org.apache.xpath.internal";
     permission java.lang.RuntimePermission
                    "accessClassInPackage.com.sun.org.apache.xpath.internal.*";
+    permission java.io.FilePermission "<<ALL FILES>>","read";
+    permission java.net.SocketPermission "*", "connect,resolve";
 };
 
 
@@ -123,6 +126,9 @@ grant codeBase "jrt:/jdk.crypto.ec" {
 };
 
 grant codeBase "jrt:/jdk.crypto.cryptoki" {
+    permission java.lang.RuntimePermission
+                   "accessClassInPackage.com.sun.crypto.provider";
+    permission java.lang.RuntimePermission "accessClassInPackage.jdk.internal.misc";
     permission java.lang.RuntimePermission
                    "accessClassInPackage.sun.security.*";
     permission java.lang.RuntimePermission "accessClassInPackage.sun.nio.ch";

vendor/java/release

@@ -1,2 +1,2 @@
-JAVA_VERSION="16.0.1"
-MODULES="java.base java.datatransfer java.xml java.prefs java.desktop java.logging java.management java.security.sasl java.naming java.net.http java.scripting java.transaction.xa java.sql jdk.crypto.ec jdk.unsupported jdk.zipfs"
+JAVA_VERSION="17.0.1"
+MODULES="java.base java.datatransfer java.xml java.prefs java.desktop java.instrument java.logging java.management java.security.sasl java.naming java.net.http java.scripting java.security.jgss java.transaction.xa java.sql jdk.crypto.ec jdk.security.auth jdk.unsupported jdk.zipfs"