Bug#1089580: visualvm: JVM crashes with StackOverflowError at startup

[Julien Plissonneau Duquène]

Package: visualvm
Version: 2.1.8-2
Severity: grave
Justification: renders package unusable
X-Debbugs-Cc: sre4ever at free.fr

Dear Maintainers,

VisualVM as packaged and using the provided /usr/bin/visualvm to launch it is
currently unusable at least with the JDK 21 (default JDK) and JDK 11, I haven't
tested others. It seems to trigger some JRE bug in the initialization phase:
Error occurred during initialization of VM
java.lang.StackOverflowError
        at
java.security.BasicPermission.init(java.base at 11.0.25/BasicPermission.java:107)
        at
java.security.BasicPermission.<init>(java.base at 11.0.25/BasicPermission.java:130)
        at
java.lang.RuntimePermission.<init>(java.base at 11.0.25/RuntimePermission.java:420)
        at
java.lang.System.setSecurityManager0(java.base at 11.0.25/System.java:342)
        at
java.lang.System.setSecurityManager(java.base at 11.0.25/System.java:333)
        at allow.uninstall(Unknown Source)
        at allow.checkPermission(Unknown Source)
        at
java.lang.System.setSecurityManager0(java.base at 11.0.25/System.java:342)
        at
java.lang.System.setSecurityManager(java.base at 11.0.25/System.java:333)
        at allow.uninstall(Unknown Source)
        at allow.checkPermission(Unknown Source)
        at
java.lang.System.setSecurityManager0(java.base at 11.0.25/System.java:342)
        at
java.lang.System.setSecurityManager(java.base at 11.0.25/System.java:333)
# (...) snipped: 252 identical recursions
        at allow.uninstall(Unknown Source)
        at allow.checkPermission(Unknown Source)
        at
java.lang.System.setSecurityManager0(java.base at 11.0.25/System.java:342)

As a workaround, removing -Djava.security.manager=allow from the JVM options
make it usable with the JDK 11 but not the default JDK (21):
java.lang.UnsupportedOperationException: The Security Manager is deprecated and
will be removed in a future release
        at java.base/java.lang.System.setSecurityManager(System.java:430)
        at org.netbeans.TopSecurityManager.install(Unknown Source)
        at org.netbeans.core.NbLifecycleManager.advancePolicy(Unknown Source)
        at org.netbeans.core.GuiRunLevel.run(Unknown Source)
        at org.netbeans.core.startup.Main.start(Unknown Source)
        at org.netbeans.core.startup.TopThreadGroup.run(Unknown Source)
        at java.base/java.lang.Thread.run(Thread.java:1583)

I haven't investigated further options tweaking to make it work with the JDK
21.

Best regards,

--
Julien Plissonneau Duquène


-- System Information:
Debian Release: trixie/sid
  APT prefers trixie
  APT policy: (500, 'trixie'), (500, 'testing'), (20, 'unstable'), (10, 'experimental'), (5, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.11.2-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages visualvm depends on:
ii  default-jdk [java11-sdk]     2:1.21-76
ii  libnb-platform18-java        12.1-3
ii  libvisualvm-jni              2.1.8-2
ii  openjdk-21-jdk [java11-sdk]  21.0.5+11-1

visualvm recommends no packages.

visualvm suggests no packages.

-- no debconf information