dev-java/oracle-jdk-bin: Bump to 1.8.0.77 wrt security bug #578160

Package-Manager: portage-2.2.28

2 files changed, 371 insertions, 0 deletions

diff --git a/dev-java/oracle-jdk-bin/Manifest b/dev-java/oracle-jdk-bin/Manifest
index e4f184225db7..cdd2997215df 100644
--- a/dev-java/oracle-jdk-bin/Manifest
+++ b/dev-java/oracle-jdk-bin/Manifest
@@ -29,3 +29,17 @@ DIST jdk-8u74-solaris-sparcv9-demos.tar.gz 9778749 SHA256 cf7258803473a9222d0c43
 DIST jdk-8u74-solaris-sparcv9.tar.gz 103907265 SHA256 feac2fbf698c5605721c713eec8f46819ab1d4433160cae3baf352983d502b63 SHA512 a35703e85d1e98e8bd9c91e526e07061e6fb2b6085f0a06606811447c1f6c539d9d7e0f8bd7506f30e2929d2f5145a5e8431642dc8877e6e779d2df7c186f98d WHIRLPOOL 50db91e69765abb5febbc6f8c31ee6b3bc06f43cab625d0f3585ded2a7ad1c4e4b5f2bd9804bad814b11a623fb86985a4f0084b035b83ba77d21446ba212aafe
 DIST jdk-8u74-solaris-x64-demos.tar.gz 9720841 SHA256 f9bc5a01422ecc6a335dc11b03bf9d187f9c1e8d5dbd862f2fd67a5e60f10691 SHA512 c3d09afefe8161a702f0f91bb6b659825fb0a5efd8b3f75b949cd6dcc9b3f034e3c68dfd9bb659801831429b5cf050bca26e90ac403911d617033e9d2378b1b0 WHIRLPOOL 51c945e5c60362fbb31a2b43793d64c81387e335aa8366d6ef88a646992fb27bdc046e8325c00a9d0a00f9be4d2b32ddf3da8c05d35bd48093c834e82334b0c6
 DIST jdk-8u74-solaris-x64.tar.gz 100860086 SHA256 214aa329f50a381bacfb0754b01eafb50360c71ac005e903d121724584595716 SHA512 4ac8b7b2499167fe1f271680bc201d33daa48b8168b8145654f4e170c2ba2e71f968d6761a8d39ead9f5ec6542a4cb55060873922fa497c0d7bb644cc2cb2624 WHIRLPOOL 31c9929351ef1328b3e8c9b4d79783d91d5b2595eb26f6ad5960fb016c50c1bb2b73ffb8e80b59e774bb0b7ec57eb90c72fe844d27bfb8e4fde09de34db69e1c
+DIST jdk-8u77-linux-arm32-vfp-hflt-demos.tar.gz 10430328 SHA256 4c0b15e54eebd2a969391fe00824021204352fc7a947d916e5e49e40a0b47dd7 SHA512 83f72301477825f8edab92eb3ab235b11ea516321f21b28cff8d2877c7a4409493811bc942a134e9aa8762106d1c5c2f8f9a9967a9194195ee2a6a290eaf9e11 WHIRLPOOL af62a3fd120de9ac8fec8977fc346f1c4f64d488495bd6ce8a373d62e1ff46ee50372105d5a24ac50331acd515f52dab4af90a9a00fe321b71f36199aa769873
+DIST jdk-8u77-linux-arm32-vfp-hflt.tar.gz 81472238 SHA256 c3af7a080cd74f7350680a020749b8161f78f66d1f16cda91bf758c3e58b524b SHA512 85482f839c8321b5094b404ccfc6ff1bde355842a33bbef6719e3f387688bc5d6393397cb15bc84aaaa3aefa604a5dae67f2c5a2b95aa06b3f4c832d054805a9 WHIRLPOOL d57249869f3bb6b298e9e2c625e70b89ead02f944c22e080eb355c2da6f00ecafb09482c8b30ed713af51f4be121dacb18c48d7ef42a1dfc445cefa50a3412f5
+DIST jdk-8u77-linux-arm64-vfp-hflt-demos.tar.gz 10416390 SHA256 17ba8e737b511640c3f8729daa3558c0e43b2efaaf20ae95d3ebc40632d5ce31 SHA512 5a0f054c534a8eefd8f63c68d0e796cfbeedfb25fbe17bad1c0ebd6b1bede88a136e0a5dcba3dc0685b2cb2ffd82dc451db1c8d97c4024d6e3a5fbdb557f4215 WHIRLPOOL c6dbb762ec47e8b5ce969bcf552b466c3640157fdd00539b6848048ee5472a33bcac876a30c99f5191638de973549ea630f0cb119de4ed26d482bdb8ffea77b4
+DIST jdk-8u77-linux-arm64-vfp-hflt.tar.gz 78304471 SHA256 d194595d0c6d2f0b6fad36da489e26a65e3825af85c051ce3c84d5a1f5a96b31 SHA512 48fceb586f82e4b30f02dc5878bf3108803e568abc5510513ae88afc5389136766cb8de749f5bb7cfb188394f9c3af4338fdbd96709cc8e967705a52f57962ea WHIRLPOOL e036911d1a2398c803b526c57ffa1ecd971f398e738fe5a8c60cd8155e4b648c271055fe6fc768c3a49fdc95f04d1b0491f13c70d377f2a7e7c558667bd0bff7
+DIST jdk-8u77-linux-i586-demos.tar.gz 55074148 SHA256 59e6177d33c2ff7a4836e8a8461e8435aaee59fede5dfcabd4b47b92e9fe49b6 SHA512 534812935f7f5b887be17ea778d9890b8de521a09ec61fe39bc9943412d1937a76238ea779434f9f34c3b0386e4f1721a1c9192c6d5375ae65a8817f1c62bb34 WHIRLPOOL 43dcb150d6a182453d639c52b36c968de45cbe1177c286c39b16cb8f650a6090bff9ea0d9e759df048971c90bbf53fb2b2da999d23b42a12ec3bdf9e6e913215
+DIST jdk-8u77-linux-i586.tar.gz 183417093 SHA256 f2889b778538fe3d20b2d37d0de3c3204de86126aadb75c1bb38d11255b41e92 SHA512 9f1a08e2062c15f2946e70dfe3c4d41db68ace95058257f9799d45336d5aec435869b5880639a4eb146c475fcb980471598d54f7b62759e68918ce0b37b7106f WHIRLPOOL 3068d1b2360a0cd96963d5a5ed0bc77e036f7b70a8d5b412056b8d7a104517584029f78f40eb8840e0d5bca68c91f86134dd2e61b37093f10a7f9bc526e62471
+DIST jdk-8u77-linux-x64-demos.tar.gz 55134532 SHA256 e816859e6b168ee63a85d8b0ffbd6d78ca47de7be216fa1afef94f3ef989536a SHA512 ab0ceb9c866bed3a4943e78ab66077a1cbd952be005484ed4390dfc5150b8bcaf0afa1286ab52e34f0ada97926887eceb2c4923ae29289cca63fe17f095fdf7a WHIRLPOOL 60c901ba4510cf1226a9d5b73ac0ecb5e4a0225dd313e3cd1f4c786216c5a45f5b3182e117ceeace5aa3b10fefd82c138b90079fbddee228305536b8bc791f81
+DIST jdk-8u77-linux-x64.tar.gz 181365687 SHA256 a47dc0962a57b27a0cc00b9f11a53dc3add40c98633ba49a2419b845e4dedf43 SHA512 02eb338f910669d2b772eaf3c170ee8cfca6c149212e899370c8a9cd4a06f588bfc56771973c3763163d49290803c456aa9e64642268de163119b252cb32554d WHIRLPOOL a38b9b8c4e502902f68784e66b383cef72648409dab814bd63680ee08cf32908a71a45358765dcd55c5cb4eb83f38dd558b200cffdf43428d81696f795a60005
+DIST jdk-8u77-macosx-x64.dmg 238309337 SHA256 b7464e3876b0b58b97288ce801a8317d71fca802fc1d3b2177e4b514ddc0088c SHA512 b341b9308767114fb0cc22a44735143497717389711bde5cbb607f3940baf49209cab459c2db0c91bb3492c1fa1bc1094f2fd390a261dfa098379a8815faddf2 WHIRLPOOL e7d66b536413be33b2ed6fb305fbceb90016b2dbeace2ba3f9cc616e1ebfad0991e948fc3d49aff4cb241c4119d6b4bb4c4c3fed577feb75e8b9cc588719c6ab
+DIST jdk-8u77-macosx-x86_64-demos.zip 55665366 SHA256 533c05ebfee495feca0d4f6902356a545792b5f1c84a4b037577cf8e5bfcdafb SHA512 8af4f6bb4111c56569ff4c5687455abc3a4d0acfe992d85158d5aacd885bbfaec5196dfae59a525c69b3104437e68f95826c098493f04b5551a96a4d6ad55050 WHIRLPOOL d5a8cd0a0a5ffecee07adf84fe837a47ba0cbdebcccf3ffed8275370d4b14a93e39c772bf489a58556382b6e1c9106d77b5806abbf84bcb385ddcf05b3d2a0f5
+DIST jdk-8u77-solaris-sparcv9-demos.tar.gz 9779097 SHA256 4b2d0cb314e47e59f7dc445cd88b38553a818f35100d610c199b4678b5d528d9 SHA512 7e7045a0599ff0741fb28b7adb846dba504029493fdbce4b4e7492721050878055dd0b762b573654c8c2f842e849ee5f2a73c08a27e2b90a4a9a271460210ea2 WHIRLPOOL 452d9506c70fdb3658cdb00c532af4bcd250b804cf04a96be2e40e8cd58e5a0dfa9f64bc90f1ea2de45743b2262b9d01c9da36d58c9180c424ff448291fe43fb
+DIST jdk-8u77-solaris-sparcv9.tar.gz 103876991 SHA256 ed3d65f2fc3e2555ec26988d7a9bc4a25cb01e4de0fde4ea878ea84584dcf4ef SHA512 b7c3de717b57608ee5a19f84139bb0fb0d9698a0dc254a041bc6f0fffa995deee30d0e6fcf5a69d9473f3f62780d05d9ab8d7909283618a915ce1fd5b2c22920 WHIRLPOOL 9cdea23f84ca0a05c358b857f4edc704d95d4670e742e57eca426692e862124fb4ee68983cf1bb7caae82d168cb2ef28c07f8898c241a589ce437b938584961d
+DIST jdk-8u77-solaris-x64-demos.tar.gz 9721749 SHA256 0c323d8b78fb3c37a1d718a455be6d02ebf565ca8895614f721fcdba2d7385ad SHA512 0ec1b763131727a2cdf7dfa8ed47d662d7925e07c45f895a636c1cafd03569a0689df6caef9e181306173a84fab0a9b1e5496578e12519e01815410882c49b96 WHIRLPOOL eaa0a2e4c70f58046df81870deb0cdc93a957b025eca5045b6caa4cf067476bfc282ffd23c9f6b8dd14032841155784a9858686f2fa9c868926e8c9ed7962468
+DIST jdk-8u77-solaris-x64.tar.gz 100853474 SHA256 696782a0cff2db4c50977a77ce2612d5bbc9d9796e5a316b4286b6955dc54b64 SHA512 ef88f6a318c9642e41927b44cf56296eab67fca818872fae985be9323129264c81903a76cc41f49b47483f79851b83558bab275133fe48cb5301fc8ba0851327 WHIRLPOOL 00b1c2b57230c0181ecba5a1d0ede62c055c3ab1178623db8903ce384fe3ad3761b2309608dc71022c0d598feb38a7207166ce1060e2f6521e51cde13e7a8068
diff --git a/dev-java/oracle-jdk-bin/oracle-jdk-bin-1.8.0.77.ebuild b/dev-java/oracle-jdk-bin/oracle-jdk-bin-1.8.0.77.ebuild
new file mode 100644
index 000000000000..1750760d1758
--- /dev/null
+++ b/dev-java/oracle-jdk-bin/oracle-jdk-bin-1.8.0.77.ebuild
@@ -0,0 +1,357 @@
+# Copyright 1999-2016 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Id$
+
+EAPI="5"
+
+inherit eutils java-vm-2 prefix versionator
+
+# This URIs need to be updated when bumping!
+JDK_URI="http://www.oracle.com/technetwork/java/javase/downloads/jdk8-downloads-2133151.html"
+JCE_URI="http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html"
+
+# This is a list of archs supported by this update.
+# Currently arm comes and goes.
+AT_AVAILABLE=( amd64 arm arm64 x86 x64-solaris sparc64-solaris x64-macos )
+
+# Sometimes some or all of the demos are missing, this is to not have to rewrite half
+# the ebuild when it happens.
+DEMOS_AVAILABLE=( amd64 arm arm64 x86 x64-solaris sparc64-solaris x64-macos )
+
+if [[ "$(get_version_component_range 4)" == 0 ]] ; then
+	S_PV="$(get_version_component_range 1-3)"
+else
+	MY_PV_EXT="u$(get_version_component_range 4)"
+	S_PV="$(get_version_component_range 1-4)"
+fi
+
+MY_PV="$(get_version_component_range 2)${MY_PV_EXT}"
+
+AT_amd64="jdk-${MY_PV}-linux-x64.tar.gz"
+AT_arm="jdk-${MY_PV}-linux-arm32-vfp-hflt.tar.gz"
+AT_arm64="jdk-${MY_PV}-linux-arm64-vfp-hflt.tar.gz"
+AT_x86="jdk-${MY_PV}-linux-i586.tar.gz"
+AT_x64_solaris="jdk-${MY_PV}-solaris-x64.tar.gz"
+AT_sparc64_solaris="${AT_sparc_solaris} jdk-${MY_PV}-solaris-sparcv9.tar.gz"
+AT_x64_macos="jdk-${MY_PV}-macosx-x64.dmg"
+
+DEMOS_amd64="jdk-${MY_PV}-linux-x64-demos.tar.gz"
+DEMOS_arm="jdk-${MY_PV}-linux-arm32-vfp-hflt-demos.tar.gz"
+DEMOS_arm64="jdk-${MY_PV}-linux-arm64-vfp-hflt-demos.tar.gz"
+DEMOS_x86="jdk-${MY_PV}-linux-i586-demos.tar.gz"
+DEMOS_x64_solaris="jdk-${MY_PV}-solaris-x64-demos.tar.gz"
+DEMOS_sparc64_solaris="jdk-${MY_PV}-solaris-sparcv9-demos.tar.gz"
+DEMOS_x64_macos="jdk-${MY_PV}-macosx-x86_64-demos.zip"
+
+JCE_DIR="UnlimitedJCEPolicyJDK8"
+JCE_FILE="jce_policy-8.zip"
+
+DESCRIPTION="Oracle's Java SE Development Kit"
+HOMEPAGE="http://www.oracle.com/technetwork/java/javase/"
+for d in "${AT_AVAILABLE[@]}"; do
+	SRC_URI+=" ${d}? ( $(eval "echo \${$(echo AT_${d/-/_})}")"
+	if has ${d} "${DEMOS_AVAILABLE[@]}"; then
+		SRC_URI+=" examples? ( $(eval "echo \${$(echo DEMOS_${d/-/_})}") )"
+	fi
+	SRC_URI+=" )"
+done
+unset d
+SRC_URI+=" jce? ( ${JCE_FILE} )"
+
+LICENSE="Oracle-BCLA-JavaSE examples? ( BSD )"
+SLOT="1.8"
+KEYWORDS="~amd64 ~arm ~arm64 ~x86 ~amd64-linux ~x86-linux ~x64-macos ~sparc64-solaris ~x64-solaris"
+IUSE="alsa cups derby doc examples +fontconfig headless-awt javafx jce nsplugin pax_kernel selinux source"
+REQUIRED_USE="javafx? ( alsa fontconfig )"
+
+RESTRICT="fetch preserve-libs strip"
+QA_PREBUILT="*"
+
+# NOTES:
+#
+# * cups is dlopened.
+#
+# * libpng is also dlopened but only by libsplashscreen, which isn't
+#   important, so we can exclude that.
+#
+# * We still need to work out the exact AWT and JavaFX dependencies
+#   under MacOS. It doesn't appear to use many, if any, of the
+#   dependencies below.
+#
+RDEPEND="!x64-macos? (
+		!headless-awt? (
+			x11-libs/libX11
+			x11-libs/libXext
+			x11-libs/libXi
+			x11-libs/libXrender
+			x11-libs/libXtst
+		)
+		javafx? (
+			dev-libs/glib:2
+			dev-libs/libxml2:2
+			dev-libs/libxslt
+			media-libs/freetype:2
+			x11-libs/cairo
+			x11-libs/gtk+:2
+			x11-libs/libX11
+			x11-libs/libXtst
+			x11-libs/libXxf86vm
+			x11-libs/pango
+			virtual/opengl
+		)
+	)
+	alsa? ( media-libs/alsa-lib )
+	cups? ( net-print/cups )
+	doc? ( dev-java/java-sdk-docs:${SLOT} )
+	fontconfig? ( media-libs/fontconfig:1.0 )
+	!prefix? ( sys-libs/glibc:* )
+	selinux? ( sec-policy/selinux-java )"
+
+# A PaX header isn't created by scanelf so depend on paxctl to avoid
+# fallback marking. See bug #427642.
+DEPEND="app-arch/zip
+	jce? ( app-arch/unzip )
+	examples? ( x64-macos? ( app-arch/unzip ) )
+	pax_kernel? ( sys-apps/paxctl )"
+
+S="${WORKDIR}/jdk"
+
+check_tarballs_available() {
+	local uri=$1; shift
+	local dl= unavailable=
+	for dl in "${@}" ; do
+		[[ ! -f "${DISTDIR}/${dl}" ]] && unavailable+=" ${dl}"
+	done
+
+	if [[ -n "${unavailable}" ]] ; then
+		if [[ -z ${_check_tarballs_available_once} ]] ; then
+			einfo
+			einfo "Oracle requires you to download the needed files manually after"
+			einfo "accepting their license through a javascript capable web browser."
+			einfo
+			_check_tarballs_available_once=1
+		fi
+		einfo "Download the following files:"
+		for dl in ${unavailable}; do
+			einfo "  ${dl}"
+		done
+		einfo "at '${uri}'"
+		einfo "and move them to '${DISTDIR}'"
+		einfo
+		einfo "If the above mentioned urls do not point to the correct version anymore,"
+		einfo "please download the files from Oracle's java download archive:"
+		einfo
+		einfo "   http://www.oracle.com/technetwork/java/javase/downloads/java-archive-javase8-2177648.html#jdk-${MY_PV}-oth-JPR"
+		einfo
+	fi
+}
+
+pkg_nofetch() {
+	local distfiles=( $(eval "echo \${$(echo AT_${ARCH/-/_})}") )
+	if use examples && has ${ARCH} "${DEMOS_AVAILABLE[@]}"; then
+		distfiles+=( $(eval "echo \${$(echo DEMOS_${ARCH/-/_})}") )
+	fi
+	check_tarballs_available "${JDK_URI}" "${distfiles[@]}"
+
+	use jce && check_tarballs_available "${JCE_URI}" "${JCE_FILE}"
+}
+
+src_unpack() {
+	if use x64-macos ; then
+		pushd "${T}" > /dev/null
+		mkdir dmgmount
+		hdiutil attach "${DISTDIR}"/jdk-${MY_PV}-macosx-x64.dmg \
+			-mountpoint "${T}"/dmgmount
+		local update=$(get_version_component_range 4)
+		[[ ${#update} == 1 ]] && update="0${update}"
+		xar -xf dmgmount/JDK\ $(get_version_component_range 2)\ Update\ ${update}.pkg
+		hdiutil detach "${T}"/dmgmount
+		zcat jdk1${MY_PV%u*}0${update}.pkg/Payload | cpio -idv
+		mv Contents/Home "${WORKDIR}"/jdk${MY_PV}
+		popd > /dev/null
+		use jce && unpack "${JCE_FILE}"
+	else
+		default
+	fi
+
+	# Upstream is changing their versioning scheme every release around 1.8.0.*;
+	# to stop having to change it over and over again, just wildcard match and
+	# live a happy life instead of trying to get this new jdk1.8.0_05 to work.
+	mv "${WORKDIR}"/jdk* "${S}" || die
+}
+
+src_prepare() {
+	if use jce ; then
+		mv "${WORKDIR}"/${JCE_DIR} jre/lib/security/ || die
+	fi
+
+	if [[ -n ${JAVA_PKG_STRICT} ]] ; then
+		# Mark this binary early to run it now.
+		pax-mark Cm ./bin/javap
+
+		eqawarn "Ensure that this only calls trackJavaUsage(). If not, see bug #559936."
+		eqawarn
+		eqawarn "$(./bin/javap -J-Duser.home=${T} -c sun.misc.PostVMInitHook || die)"
+	fi
+
+	# Remove the hook that calls Oracle's evil usage tracker. Not just
+	# because it's evil but because it breaks the sandbox during builds
+	# and we can't find any other feasible way to disable it or make it
+	# write somewhere else. See bug #559936 for details.
+	zip -d jre/lib/rt.jar sun/misc/PostVMInitHook.class || die
+}
+
+src_install() {
+	local dest="/opt/${P}"
+	local ddest="${ED}${dest#/}"
+
+	# Create files used as storage for system preferences.
+	mkdir jre/.systemPrefs || die
+	touch jre/.systemPrefs/.system.lock || die
+	touch jre/.systemPrefs/.systemRootModFile || die
+
+	if ! use alsa ; then
+		rm -vf jre/lib/*/libjsoundalsa.* || die
+	fi
+
+	if use headless-awt ; then
+		rm -vf {,jre/}lib/*/lib*{[jx]awt,splashscreen}* \
+		   {,jre/}bin/{javaws,policytool} \
+		   bin/appletviewer || die
+	fi
+
+	if ! use javafx ; then
+		rm -vf jre/lib/*/lib*{decora,fx,glass,prism}* \
+		   jre/lib/*/libgstreamer-lite.* {,jre/}lib/{,ext/}*fx* \
+		   bin/*javafx* bin/javapackager || die
+	fi
+
+	if ! use nsplugin ; then
+		rm -vf jre/lib/*/libnpjp2.* || die
+	else
+		local nsplugin=$(echo jre/lib/*/libnpjp2.*)
+	fi
+
+	# Even though plugins linked against multiple ffmpeg versions are
+	# provided, they generally lag behind what Gentoo has available.
+	rm -vf jre/lib/*/libavplugin* || die
+
+	dodoc COPYRIGHT
+	dodir "${dest}"
+	cp -pPR bin include jre lib man "${ddest}" || die
+
+	if use derby ; then
+		cp -pPR	db "${ddest}" || die
+	fi
+
+	if use examples && has ${ARCH} "${DEMOS_AVAILABLE[@]}" ; then
+		cp -pPR demo sample "${ddest}" || die
+	fi
+
+	if use jce ; then
+		dodir "${dest}"/jre/lib/security/strong-jce
+		mv "${ddest}"/jre/lib/security/US_export_policy.jar \
+			"${ddest}"/jre/lib/security/strong-jce || die
+		mv "${ddest}"/jre/lib/security/local_policy.jar \
+			"${ddest}"/jre/lib/security/strong-jce || die
+		dosym "${dest}"/jre/lib/security/${JCE_DIR}/US_export_policy.jar \
+			"${dest}"/jre/lib/security/US_export_policy.jar
+		dosym "${dest}"/jre/lib/security/${JCE_DIR}/local_policy.jar \
+			"${dest}"/jre/lib/security/local_policy.jar
+	fi
+
+	if use nsplugin ; then
+		local nsplugin_link=${nsplugin##*/}
+		nsplugin_link=${nsplugin_link/./-${PN}-${SLOT}.}
+		dosym "${dest}/${nsplugin}" "/usr/$(get_libdir)/nsbrowser/plugins/${nsplugin_link}"
+	fi
+
+	if use source ; then
+		cp -v src.zip "${ddest}" || die
+
+		if use javafx ; then
+			cp -v javafx-src.zip "${ddest}" || die
+		fi
+	fi
+
+	if [[ -d jre/lib/desktop ]] ; then
+		# Install desktop file for the Java Control Panel.
+		# Using ${PN}-${SLOT} to prevent file collision with jre and or
+		# other slots.  make_desktop_entry can't be used as ${P} would
+		# end up in filename.
+		newicon jre/lib/desktop/icons/hicolor/48x48/apps/sun-jcontrol.png \
+			sun-jcontrol-${PN}-${SLOT}.png || die
+		sed -e "s#Name=.*#Name=Java Control Panel for Oracle JDK ${SLOT}#" \
+			-e "s#Exec=.*#Exec=/opt/${P}/jre/bin/jcontrol#" \
+			-e "s#Icon=.*#Icon=sun-jcontrol-${PN}-${SLOT}#" \
+			-e "s#Application;##" \
+			-e "/Encoding/d" \
+			jre/lib/desktop/applications/sun_java.desktop \
+			> "${T}"/jcontrol-${PN}-${SLOT}.desktop || die
+		domenu "${T}"/jcontrol-${PN}-${SLOT}.desktop
+	fi
+
+	# Prune all fontconfig files so libfontconfig will be used and only install
+	# a Gentoo specific one if fontconfig is disabled.
+	# http://docs.oracle.com/javase/8/docs/technotes/guides/intl/fontconfig.html
+	rm "${ddest}"/jre/lib/fontconfig.*
+	if ! use fontconfig ; then
+		cp "${FILESDIR}"/fontconfig.Gentoo.properties "${T}"/fontconfig.properties || die
+		eprefixify "${T}"/fontconfig.properties
+		insinto "${dest}"/jre/lib/
+		doins "${T}"/fontconfig.properties
+	fi
+
+	# This needs to be done before CDS - #215225
+	java-vm_set-pax-markings "${ddest}"
+
+	# see bug #207282
+	einfo "Creating the Class Data Sharing archives"
+	case ${ARCH} in
+		arm|ia64)
+			${ddest}/bin/java -client -Xshare:dump || die
+			;;
+		x86)
+			${ddest}/bin/java -client -Xshare:dump || die
+			# limit heap size for large memory on x86 #467518
+			# this is a workaround and shouldn't be needed.
+			${ddest}/bin/java -server -Xms64m -Xmx64m -Xshare:dump || die
+			;;
+		*)
+			${ddest}/bin/java -server -Xshare:dump || die
+			;;
+	esac
+
+	# Remove empty dirs we might have copied.
+	find "${D}" -type d -empty -exec rmdir -v {} + || die
+
+	if use x64-macos ; then
+		# Fix miscellaneous install_name issues.
+		pushd "${ddest}"/jre/lib > /dev/null || die
+		local lib needed nlib npath
+		for lib in decora_sse glass prism_{common,es2,sw} ; do
+			lib=lib${lib}.dylib
+			einfo "Fixing self-reference of ${lib}"
+			install_name_tool \
+				-id "${EPREFIX}${dest}/jre/lib/${lib}" \
+				"${lib}"
+		done
+		popd > /dev/null
+
+		# This is still jdk1{5,6}, even on Java 8, so don't change it
+		# until you know different.
+		for nlib in jdk1{5,6} ; do
+			install_name_tool -change \
+				/usr/lib/libgcc_s_ppc64.1.dylib \
+				/usr/lib/libSystem.B.dylib \
+				"${ddest}"/lib/visualvm/profiler/lib/deployed/${nlib}/mac/libprofilerinterface.jnilib
+			install_name_tool -id \
+				"${EPREFIX}${dest}"/lib/visualvm/profiler/lib/deployed/${nlib}/mac/libprofilerinterface.jnilib \
+				"${ddest}"/lib/visualvm/profiler/lib/deployed/${nlib}/mac/libprofilerinterface.jnilib
+		done
+	fi
+
+	set_java_env
+	java-vm_revdep-mask
+	java-vm_sandbox-predict /dev/random /proc/self/coredump_filter
+}