/hg/icedtea-web: PR765: JNLP file with all resource jars marked ...
smohammad at icedtea.classpath.org
smohammad at icedtea.classpath.org
Tue Aug 9 13:52:19 PDT 2011
changeset a06bae0764b6 in /hg/icedtea-web
details: http://icedtea.classpath.org/hg/icedtea-web?cmd=changeset;node=a06bae0764b6
author: Saad Mohammad <smohammad at redhat.com>
date: Tue Aug 09 16:52:29 2011 -0400
PR765: JNLP file with all resource jars marked as 'lazy' fails to
validate signature and stops the launch of application
diffstat:
ChangeLog | 8 ++++++++
NEWS | 2 ++
netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java | 4 ++++
3 files changed, 14 insertions(+), 0 deletions(-)
diffs (41 lines):
diff -r defa7d0051bf -r a06bae0764b6 ChangeLog
--- a/ChangeLog Wed Aug 03 14:11:11 2011 -0400
+++ b/ChangeLog Tue Aug 09 16:52:29 2011 -0400
@@ -1,3 +1,11 @@
+2011-08-09 Saad Mohammad <smohammad at redhat.com>
+
+ PR765: JNLP file with all resource jars marked as 'lazy' fails to validate
+ signature and stops the launch of application
+ * netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java:
+ (initializeResources): Initializes the first jar file if all resources
+ are marked as lazy jars
+
2011-08-03 Saad Mohammad <smohammad at redhat.com>
* netx/net/sourceforge/jnlp/JNLPMatcher.java:
diff -r defa7d0051bf -r a06bae0764b6 NEWS
--- a/NEWS Wed Aug 03 14:11:11 2011 -0400
+++ b/NEWS Tue Aug 09 16:52:29 2011 -0400
@@ -12,6 +12,8 @@
* Security updates:
- RH718164, CVE-2011-2513: Home directory path disclosure to untrusted applications
- RH718170, CVE-2011-2514: Java Web Start security warning dialog manipulation
+* NetX
+ - PR765: JNLP file with all resource jars marked as 'lazy' fails to validate signature and stops the launch of application
* Plugin
- PR749: sun.applet.PluginStreamHandler#handleMessage(String) really slow
Common
diff -r defa7d0051bf -r a06bae0764b6 netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java
--- a/netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java Wed Aug 03 14:11:11 2011 -0400
+++ b/netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java Tue Aug 09 16:52:29 2011 -0400
@@ -428,6 +428,10 @@
jars[i].isCacheable() ? JNLPRuntime.getDefaultUpdatePolicy() : UpdatePolicy.FORCE
);
}
+
+ //If there are no eager jars, initialize the first jar
+ if(initialJars.size() == 0)
+ initialJars.add(jars[0]);
if (strict)
fillInPartJars(initialJars); // add in each initial part's lazy jars
More information about the distro-pkg-dev
mailing list