Integrated: 8356645: Javac should utilize new ZIP file system read-only access mode

[David Beaumont]

On Wed, 4 Jun 2025 12:08:38 GMT, David Beaumont <duke at openjdk.org> wrote:

> This PR seeks to integrate the new ZipFileSystem "accessMode" parameter to open internal ZIP/JAR files as read only, to act as defense in-depth against accidental modification.
> 
> Note that this currently also propagates the (currently undocumented) "zipinfo-time" parameter to several other places where ZIP/JAR files are opened, which is likely to improve performance. This was discussed and is expected to be safe (but it's something to be careful about).
> This will, of course, be thoroughly tested before integration.
> 
> It also unifies several places to use a common helper method to obtain the environment map, adds more comments, and changes a small number of affected tests.
> 
> I'm also happy to update the original bug description to include the timestamp related changes as necessary.

This pull request has now been integrated.

Changeset: 0ceb366d
Author:    David Beaumont <david.beaumont at oracle.com>
Committer: Jan Lahoda <jlahoda at openjdk.org>
URL:       https://git.openjdk.org/jdk/commit/0ceb366dc26e2e4f6252da9dd8930b016a5d46ba
Stats:     88 lines in 6 files changed: 57 ins; 15 del; 16 mod

8356645: Javac should utilize new ZIP file system read-only access mode

Reviewed-by: jlahoda

-------------

PR: https://git.openjdk.org/jdk/pull/25639