Cleaned-up log4j 1.2 that disables scary networking (base=1.2.17, fully binary compatible)

.github/workflows/maven.yml

@@ -0,0 +1,97 @@
+name: Maven CI Build
+
+on: [push]
+
+jobs:
+  JDK6Toolchain:
+    name: Toolchain 1.6, JDK 11, OS ${{ matrix.os }}
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-18.04, ubuntu-20.04, windows-2019, windows-2022]
+      fail-fast: true
+      max-parallel: 2
+    steps:
+      - uses: actions/checkout@v1
+      - name: Install Toolchain JDK
+        uses: battila7/jdk-via-jabba@v1
+        with:
+          jdk: [email protected]
+          javaHomeEnvironmentVariable: TOOLCHAIN_JDK
+          addBinDirectoryToPath: false
+      - name: Configure Maven for Toolchain
+        shell: bash
+        run: |
+          mkdir -p $HOME/.m2 && cat >$HOME/.m2/toolchains.xml <<EOF
+          <?xml version="1.0" encoding="UTF8"?>
+          <toolchains>
+            <toolchain>
+              <type>jdk</type>
+                <provides>
+                  <version>1.6</version>
+                  <vendor>oracle</vendor><!-- definitely a lie -->
+                </provides>
+                <configuration>
+                  <jdkHome>${{ env.TOOLCHAIN_JDK }}</jdkHome>
+                </configuration>
+            </toolchain>
+          </toolchains>
+          EOF
+      - name: Set up Modern JDK for Maven
+        uses: actions/setup-java@v1
+        with:
+          java-version: 11
+      - name: Run maven build
+        run: mvn clean verify site assembly:single -B
+  JDK7Toolchain:
+    name: Toolchain 1.7, JDK 11, OS ubuntu-18.04
+    runs-on: ubuntu-18.04
+    steps:
+      - uses: actions/checkout@v1
+      - name: Install Toolchain JDK
+        uses: battila7/jdk-via-jabba@v1
+        with:
+          jdk: [email protected]
+          javaHomeEnvironmentVariable: TOOLCHAIN_JDK
+          addBinDirectoryToPath: false
+      - name: Configure Maven for Toolchain
+        shell: bash
+        run: |
+          mkdir -p $HOME/.m2 && cat >$HOME/.m2/toolchains.xml <<EOF
+          <?xml version="1.0" encoding="UTF8"?>
+          <toolchains>
+            <toolchain>
+              <type>jdk</type>
+                <provides>
+                  <version>1.6</version><!-- a little lie -->
+                  <vendor>oracle</vendor><!-- definitely a lie -->
+                </provides>
+                <configuration>
+                  <jdkHome>${{ env.TOOLCHAIN_JDK }}</jdkHome>
+                </configuration>
+            </toolchain>
+          </toolchains>
+          EOF
+      - name: Set up Modern JDK for Maven
+        uses: actions/setup-java@v1
+        with:
+          java-version: 11
+      - name: Run maven build
+        run: mvn clean verify -B
+  Modern:
+    name: JDK ${{ matrix.jdk }}, OS ${{ matrix.os }}
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-18.04, ubuntu-20.04, windows-2019, windows-2022]
+        jdk: [8, 11, 17]
+      fail-fast: true
+      max-parallel: 4
+    steps:
+    - uses: actions/checkout@v1
+    - name: Set up Modern JDK for Maven
+      uses: actions/setup-java@v1
+      with:
+        java-version: ${{ matrix.jdk }}
+    - name: Run maven build
+      run: mvn clean verify -B -P no-toolchain

.gitignore

@@ -0,0 +1,4 @@
+target/
+tests/output/
+tests/temp
+.idea/

INSTALL

@@ -1,19 +1,3 @@
- Licensed to the Apache Software Foundation (ASF) under one or more
- contributor license agreements.  See the NOTICE file distributed with
- this work for additional information regarding copyright ownership.
- The ASF licenses this file to You under the Apache License, Version 2.0
- (the "License"); you may not use this file except in compliance with
- the License.  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing, software
- distributed under the License is distributed on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- See the License for the specific language governing permissions and
- limitations under the License.
-
-
 ===========
 Using log4j
 ===========
@@ -73,32 +57,49 @@ except test cases and classes from the "examples" and
 Building log4j
 ==============
 
-log4j (as of 1.2.15) is built with Maven 2.  To rebuild log4j,
-place Maven 2 on the PATH and execute "mvn package".  The resulting
-jar will be placed in the target subdirectory.
+log4j (as of 1.2.18) is built with Maven 3 and JDK 8 or higher.
+
+To build for compatibility with older JDKs (1.4/5/7), set up a Maven
+toolchain JDK with version=1.6 and vendor=oracle. For example set up
+the following configuration in ~/.m2/toolchains.xml:
+
+      <?xml version="1.0" encoding="UTF-8"?>
+      <toolchains>
+         <toolchain>
+            <type>jdk</type>
+            <provides>
+               <version>1.6</version>
+               <vendor>oracle</vendor>
+            </provides>
+            <configuration>
+               <jdkHome>/usr/lib/jvm/java-1.6.0-openjdk-amd64</jdkHome>
+               <!-- <jdkHome>C:\Program Files\Java\jdk1.6.0_45</jdkHome> -->
+            </configuration>
+         </toolchain>
+      </toolchains>
+
+See https://maven.apache.org/guides/mini/guide-using-toolchains.html
+for more information about maven toolchains.
+
+After setting up a toolchain you can then build using the default
+profile:
+
+  mvn verify
+
+If you do not care about compatibility with old JDKs, you can use a
+build without a toolchain and execute
 
-If building with JDK 1.4, one dependency will need to be manually
-installed since its license does not allow it to be placed in the
-online maven repositories.  If not already installed, a build attempt will
-describe where to download and how to install the dependency.  To
-install the dependency:
+  mvn verify -P no-toolchain
 
-Download JMX 1.2.1 from http://java.sun.com/products/JavaManagement/download.html.
+Build results can be found in the target/ subdirectory.
 
-$ jar xf jmx-1_2_1-ri.zip
-$ mvn install:install-file -DgroupId=com.sun.jmx -DartifactId=jmxri \
-          -Dversion=1.2.1 -Dpackaging=jar -Dfile=jmx-1_2_1-bin/lib/jmxri.jar
+==================
+NTEventLogAppender
+==================
 
+The maven build uses prebuilt NTEventLogAppender.dll and
+NTEventLogAppender.amd64.dll binaries. To rebuild these, see
 
-The build script will attempt to build NTEventLogAppender.dll if
-MinGW is available on the path.  If the unit tests are run on Windows
-without NTEventLogAppender.dll, many warnings of the missing DLL
-will be generated.  An installer for MinGW on Windows is
-available for download at http://sourceforge.net/project/showfiles.php?group_id=2435.
-MinGW is also available through the package managers of many Linux distributions.
+  src/ntdll
 
-In case of problems send an e-mail note to
-[email protected].  Please do not directly e-mail any
-log4j developers. The answer to your question might be useful to other
-users. Moreover, there are many knowledgeable users on the log4j-user
-mailing lists who can quickly answer your questions.
+for more information.

NOTICE

@@ -1,5 +1,5 @@
 Apache log4j
-Copyright 2010 The Apache Software Foundation
+Copyright 2000-2021 The Apache Software Foundation
 
 This product includes software developed at
 The Apache Software Foundation (http://www.apache.org/).

README.md

@@ -0,0 +1,13 @@
+# End Of Life
+
+On August 5, 2015 the Logging Services Project Management Committee announced that Log4j 1.x had reached end of life. For complete text of the announcement please see the [Apache Blog](https://blogs.apache.org/foundation/entry/apache_logging_services_project_announces). Users of Log4j 1 are recommended to upgrade to [Apache Log4j 2](https://logging.apache.org/log4j/2.x/index.html).
+
+# Security release 1.2.18
+
+Several security vulnerabilities have been identified in Log4J 1 up to and including 1.2.17. All users should upgrade to Log4J 2. For users that cannot upgrade, certain fixes are made available here. Please note Log4J 1 remains End Of Life.
+
+See [the log4j 1.2 website](https://logging.apache.org/log4j/1.2/) for more information.
+
+## Changes in 1.2.18
+
+See the [Changes Report](https://logging.apache.org/log4j/1.2/changes-report.html) for a detailed list of changes. This file is generated from [changes.xml](src/changes/changes.xml).