/hg/icedtea-web: PR765: JNLP file with all resource jars marked ...

smohammad at icedtea.classpath.org smohammad at icedtea.classpath.org
Tue Aug 9 13:52:19 PDT 2011


changeset a06bae0764b6 in /hg/icedtea-web
details: http://icedtea.classpath.org/hg/icedtea-web?cmd=changeset;node=a06bae0764b6
author: Saad Mohammad <smohammad at redhat.com>
date: Tue Aug 09 16:52:29 2011 -0400

	PR765: JNLP file with all resource jars marked as 'lazy' fails to
	validate signature and stops the launch of application


diffstat:

 ChangeLog                                              |  8 ++++++++
 NEWS                                                   |  2 ++
 netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java |  4 ++++
 3 files changed, 14 insertions(+), 0 deletions(-)

diffs (41 lines):

diff -r defa7d0051bf -r a06bae0764b6 ChangeLog
--- a/ChangeLog	Wed Aug 03 14:11:11 2011 -0400
+++ b/ChangeLog	Tue Aug 09 16:52:29 2011 -0400
@@ -1,3 +1,11 @@
+2011-08-09  Saad Mohammad  <smohammad at redhat.com>
+
+	PR765: JNLP file with all resource jars marked as 'lazy' fails to validate 
+	signature and stops the launch of application
+	* netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java:
+	(initializeResources): Initializes the first jar file if all resources
+	are marked as lazy jars
+
 2011-08-03  Saad Mohammad  <smohammad at redhat.com>
 
 	* netx/net/sourceforge/jnlp/JNLPMatcher.java:
diff -r defa7d0051bf -r a06bae0764b6 NEWS
--- a/NEWS	Wed Aug 03 14:11:11 2011 -0400
+++ b/NEWS	Tue Aug 09 16:52:29 2011 -0400
@@ -12,6 +12,8 @@
 * Security updates:
 	- RH718164, CVE-2011-2513: Home directory path disclosure to untrusted applications
 	- RH718170, CVE-2011-2514: Java Web Start security warning dialog manipulation
+* NetX
+  - PR765: JNLP file with all resource jars marked as 'lazy' fails to validate signature and stops the launch of application
 * Plugin
   - PR749: sun.applet.PluginStreamHandler#handleMessage(String) really slow
 Common
diff -r defa7d0051bf -r a06bae0764b6 netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java
--- a/netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java	Wed Aug 03 14:11:11 2011 -0400
+++ b/netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java	Tue Aug 09 16:52:29 2011 -0400
@@ -428,6 +428,10 @@
                                 jars[i].isCacheable() ? JNLPRuntime.getDefaultUpdatePolicy() : UpdatePolicy.FORCE
                                );
         }
+        
+        //If there are no eager jars, initialize the first jar
+        if(initialJars.size() == 0)
+            initialJars.add(jars[0]);
 
         if (strict)
             fillInPartJars(initialJars); // add in each initial part's lazy jars



More information about the distro-pkg-dev mailing list