[jdk8u-dev] Integrated: 8173072: zipfs fails to handle incorrect info-zip "extended timestamp extra field"

[Xin Liu]

On Mon, 31 Jul 2023 22:54:53 GMT, Xin Liu <xliu at openjdk.org> wrote:

> Package nio.zipfs is in demo directory of jdk8u. It is not the part of standard libraries until jdk9. However, we found that some Java8 applications use it and hit a bug. I guess this manifests Hyrum's Law again. 
> 
> This patch can *NOT* apply to jdk8u cleanly. I need to adjust the directory. I drop the cosmetic changes in nio/zipfs/ZipCoder.java. It helps minimize changeset. If we want to include them, we need to backport other patches. 
> 
> We test jtreg locally. I reckon the risk is minimal because the patch only adds a few boundary checks in nio/zipfs/EXTT. Without it, zipfs throws java.lang.ArrayIndexOutOfBoundsException when it encounters a problematic zip file.

This pull request has now been integrated.

Changeset: f9292695
Author:    Xin Liu <xliu at openjdk.org>
Committer: Paul Hohensee <phh at openjdk.org>
URL:       https://git.openjdk.org/jdk8u-dev/commit/f92926955791c810469e412927f58f2ca634fe4b
Stats:     4 lines in 1 file changed: 1 ins; 0 del; 3 mod

8173072: zipfs fails to handle incorrect info-zip "extended timestamp extra field"

Reviewed-by: phh, serb, andrew
Backport-of: 248778d27a5f8a16e4c90a4f5a6632a7ca8e9a89

-------------

PR: https://git.openjdk.org/jdk8u-dev/pull/349