Update to 2.4.8 final.

PR1781: NSS PKCS11 provider fails to handle multipart AES encryption
RH905128: [CRASH] OpenJDK-1.7.0 while using NSS security provider and kerberos
S8029755, CVE-2014-4209: Enhance subject class
S8030763: Validate global memory allocation
S8031340, CVE-2014-4264: Better TLS/EC management
S8031346, CVE-2014-4244: Enhance RSA key handling
S8031540: Introduce document horizon
S8032536: JVM resolves wrong method in some unusual cases
S8033055: Issues in 2d
S8033301, CVE-2014-4266: Build more informative InfoBuilder
S8034267: Probabilistic native crash
S8034272: Do not cram data into CRAM arrays
S8034985, CVE-2014-2483: Better form for Lambda Forms
S8035004, CVE-2014-4252: Provider provides less service
S8035009, CVE-2014-4218: Make Proxy representations consistent
S8035119, CVE-2014-4219: Fix exceptions to bytecode verification
S8035699, CVE-2014-4268: File choosers should be choosier
S8035788. CVE-2014-4221: Provide more consistency for lookups
S8035793, CVE-2014-4223: Maximum arity maxed out
S8036571: (process) Process process arguments carefully
S8036800: Attribute OOM to correct part of code
S8037046: Validate libraries to be loaded
S8037076, CVE-2014-2490: Check constant pool constants
S8037157: Verify <init> call
S8037162, CVE-2014-4263: More robust DH exchanges
S8037167, CVE-2014-4216: Better method signature resolution
S8039520, CVE-2014-4262: More atomicity of atomic updates
S8001108: an attempt to use "<init>" as a method name should elicit NoSuchMethodException
S8001109: arity mismatch on a call to spreader method handle should elicit IllegalArgumentException
S8013611: Modal dialog fails to obtain keyboard focus
S8013809: deadlock in SSLSocketImpl between between write and close
S8013836: getFirstDayOfWeek reports wrong day for pt-BR locale
S8019990: IM candidate window appears on the South-East corner of the display.
S8023990: Regression: postscript size increase from 6u18
S8024283: 10 nashorn tests fail with similar stack trace InternalError with cause being NoClassDefFoundError
S8024616: JSR292: lazily initialize core NamedFunctions used for bootstrapping
S8027212: java/nio/channels/Selector/SelectAfterRead.java fails intermittently
S8028285: RMI Thread can no longer call out to AWT
S8029177: [Parfait] warnings from b117 for jdk.src.share.native.com.sun.java.util.jar: JNI exception pending
S8031075: [Regression] focus disappears with shift+tab on dialog having one focus component
S8032585: JSR292: IllegalAccessError when attempting to invoke protected method from different package
S8033278: Missed access checks for Lookup.unreflect* after 8032585
S8035613: With active Securitymanager JAXBContext.newInstance fails
S8036786: Update jdk7 testlibrary to match jdk8
S8037012: (tz) Support tzdata2014a
S8038306: (tz) Support tzdata2014b
S8038392: Generating prelink cache breaks JAVA 'jinfo' utility normal behavior
S8042264: 7u65 l10n resource file translation update 1
S8042582: Test java/awt/KeyboardFocusmanager/ChangeKFMTest/ChangeKFMTest.html fails on Windows x64
S8042590: Running form URL throws NPE
S8042789: org.omg.CORBA.ORBSingletonClass loading no longer uses context class loader
S8043012: (tz) Support tzdata2014c

2014-07-22  Andrew John Hughes  <gnu_andrew@member.fsf.org>

	* Makefile.am:
	(CORBA_CHANGESET): Update to icedtea-2.4.8 tag.
	(JAXP_CHANGESET): Likewise.
	(JAXWS_CHANGESET): Likewise.
	(JDK_CHANGESET): Likewise.
	(LANGTOOLS_CHANGESET): Likewise.
	(OPENJDK_CHANGESET): Likewise.
	(CORBA_SHA256SUM): Likewise.
	(JAXP_SHA256SUM): Likewise.
	(JAXWS_SHA256SUM): Likewise.
	(JDK_SHA256SUM): Likewise.
	(LANGTOOLS_SHA256SUM): Likewise.
	(OPENJDK_SHA256SUM): Likewise.
	* NEWS: Updated.
	* configure.ac: Bump to 2.4.8.
	* hotspot.map: Update to icedtea-2.4.8 tag.
	* patches/boot/ecj-diamond.patch: Regenerated.
PR1833, RH1022017: Report elliptic curves supported by NSS, not the SunEC library

2014-06-10  Andrew John Hughes  <gnu.andrew@member.fsf.org>

	PR1833, RH1022017: Report elliptic curves
	supported by NSS, not the SunEC library
	* Makefile.am:
	(ICEDTEA_PATCHES): Add new patch when
	PKCS11+NSS is enabled, so that the NSS set
	of curves are announced via SSL.
	* NEWS: Updated.
	* patches/rh1022017.patch:
	Reduce number of curves announced over SSL
	to just those supported by NSS.
Re-enable systemtap_gc patch.

2014-07-22  Andrew John Hughes  <gnu_andrew@member.fsf.org>

	* Makefile.am:
	(ICEDTEA_PATCHES): Re-enable systemtap_gc patch.
PR1830: Drop version requirement for LCMS 2

2014-06-10  Andrew John Hughes  <gnu.andrew@member.fsf.org>

	PR1830: Drop version requirement for LCMS 2
	* INSTALL: Document lcms2 requirement.
	* NEWS: Updated.
	* acinclude.m4:
	(IT_CHECK_FOR_LCMS): Drop 2.5 requirement.
Bump aarch64 port to latest tip and add security patches.

AArch64 C2 instruct for smull
Add a constructor as a conversion from Register - RegSet.  Use it.
Add RegSet::operator+=.
Add support for a few simple intrinsics
Add support for builtin crc32 instructions
Add support for CRC32 intrinsic
Add support for Neon implementation of CRC32
All address constants are 48 bits in size.
C1: Fix offset overflow when profiling.
Common frame handling for C1/C2 which correctly handle all frame sizes
Correct costs for operations with shifts.
Correct OptoAssembly for prologs and epilogs.
Delete useless instruction.
Don't use any form of _call_VM_leaf when we're calling a stub.
Fast string comparison
Fast String.equals()
Fix a tonne of bogus comments.
Fix biased locking and enable as default
Fix instruction size from 8 to 4
Fix opto assembly for shifts.
Fix register misuse in verify_method_data_pointer
Fix register usage in generate_verify_oop().
Implement various locked memory operations.
Improve C1 performance improvements in ic_cache checks
Improve code generation for pop(), as suggested by Edward Nevill.
Improvements to safepoint polling
Make code entry alignment 64 for C2
Minor optimisation for divide by 2
New cost model for instruction selection.
Offsets in lookupswitch instructions should be signed.
Optimise addressing of card table byte map base
Optimise C2 entry point verification
Optimise long divide by 2
Performance improvement and ease of use changes pulled from upstream
Preserve callee save FP registers around call to java code
Remove obsolete C1 patching code.
Remove special-case handling of division arguments.  AArch64 doesn't need it.
Remove unnecessary memory barriers around CAS operations
Restore sp from sender sp, r13 in crc32 code
Restrict default ReservedCodeCacheSize to 128M
Rewrite CAS operations to be more conservative
Save intermediate state before removing C1 patching code.
Tidy up register usage in push/pop instructions.
Tidy up stack frame handling.
Use 2- and 3-instruction immediate form of movoop and mov_metadata in C2-generated code.
Use an explicit set of registers rather than a bitmap for psh and pop operations.
Use explicit barrier instructions in C1.
Use gcc __clear_cache instead of doing it ourselves

2014-07-16  Andrew John Hughes  <gnu.andrew@member.fsf.org>

	* patches/hotspot/aarch64/20140415-8029858-enhance_array_copies.patch,
	* patches/hotspot/aarch64/20140415-8034926-attribute_classes_properly.patch:
	Removed, as applied upstream.
	* Makefile.am:
	(ICEDTEA_PATCHES): Updated.
	* NEWS: Likewise.
	* hotspot.map: Bump aarch64 port to latest tip.
	* patches/hotspot/aarch64/20140715-8030763-validate_global_memory_allocation.patch,
	* patches/hotspot/aarch64/20140715-8032536-jvm_resolves_wrong_method.patch,
	* patches/hotspot/aarch64/20140715-8035119-fix_exceptions_to_bytecode_verification.patch,
	* patches/hotspot/aarch64/20140715-8036800-attribute_oom_to_right_code.patch,
	* patches/hotspot/aarch64/20140715-8037076-check_constant_pool_constants.patch,
	* patches/hotspot/aarch64/20140715-8037157-verify_init_call.patch,
	* patches/hotspot/aarch64/20140715-8037167-better_method_signature_resolution.patch,
	* patches/hotspot/aarch64/20140715-8043454-8037157_test_case_fix.patch:
	July 2014 security patches for AArch64 HotSpot.
S8024648: 7141246 & 8016131 break Zero port (AArch64 only)

2014-07-22  Andrew John Hughes  <gnu_andrew@member.fsf.org>

	* Makefile.am:
	(ICEDTEA_PATCHES): Add new patch for AArch64.
	* NEWS: Updated.
	* patches/hotspot/aarch64/8024648-zero_build_fix.patch:
	Fix Zero on AArch64.
Prepare for 2.4.8 release.

2014-07-23  Andrew John Hughes  <gnu_andrew@member.fsf.org>

	* NEWS: Set release date.
Added tag icedtea-2.4.8 for changeset c04ac627df95
Close off branch.

2014-07-23  Andrew John Hughes  <gnu_andrew@member.fsf.org>

	* configure.ac: Bump to 2.4.9pre00.
	* NEWS: Add 2.4.9 section.