[RFC][IcedTea-WEB]: Fix for PR765

Deepak Bhole dbhole at redhat.com
Tue Aug 9 13:43:35 PDT 2011


* Saad Mohammad <smohammad at redhat.com> [2011-08-09 16:23]:
> On 08/09/2011 03:41 PM, Deepak Bhole wrote:
> [ . . .]
> >Ah okay.
> >
> >Please repost this with a NEWS entry then and I will approve.
> >
> >Thanks,
> >Deepak
> >
> I have attached the complete patch with NEWS/ChangeLog entry.
> 
> [ . . .]
> 
> -- 
> Cheers,
> Saad Mohammad
> 

The ChangeLog entry should have a "PR765: JNLP file..." line as well.
See other entries in the file for examples.

After adding the above, okay for HEAD.

Cheers,
Deepak

> diff -r defa7d0051bf ChangeLog
> --- a/ChangeLog	Wed Aug 03 14:11:11 2011 -0400
> +++ b/ChangeLog	Tue Aug 09 16:21:52 2011 -0400
> @@ -1,3 +1,9 @@
> +2011-08-09  Saad Mohammad  <smohammad at redhat.com>
> +
> +	* netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java:
> +	(initializeResources): Initializes the first jar file if all resources
> +	are marked as lazy jars
> +
>  2011-08-03  Saad Mohammad  <smohammad at redhat.com>
>  
>  	* netx/net/sourceforge/jnlp/JNLPMatcher.java:
> diff -r defa7d0051bf NEWS
> --- a/NEWS	Wed Aug 03 14:11:11 2011 -0400
> +++ b/NEWS	Tue Aug 09 16:21:52 2011 -0400
> @@ -12,6 +12,8 @@
>  * Security updates:
>  	- RH718164, CVE-2011-2513: Home directory path disclosure to untrusted applications
>  	- RH718170, CVE-2011-2514: Java Web Start security warning dialog manipulation
> +* NetX
> +  - PR765: JNLP file with all resource jars marked as 'lazy' fails to validate signature and stops the launch of application
>  * Plugin
>    - PR749: sun.applet.PluginStreamHandler#handleMessage(String) really slow
>  Common
> diff -r defa7d0051bf netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java
> --- a/netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java	Wed Aug 03 14:11:11 2011 -0400
> +++ b/netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java	Tue Aug 09 16:21:52 2011 -0400
> @@ -428,6 +428,10 @@
>                                  jars[i].isCacheable() ? JNLPRuntime.getDefaultUpdatePolicy() : UpdatePolicy.FORCE
>                                 );
>          }
> +        
> +        //If there are no eager jars, initialize the first jar
> +        if(initialJars.size() == 0)
> +            initialJars.add(jars[0]);
>  
>          if (strict)
>              fillInPartJars(initialJars); // add in each initial part's lazy jars




More information about the distro-pkg-dev mailing list