RFR: 8222807: Address iteration with invalid ZIP header entries
Lance Andersen
lance.andersen at oracle.com
Mon May 20 11:16:32 UTC 2019
Hi Christoph,
Thank you for the review.
> On May 20, 2019, at 2:58 AM, Langer, Christoph <christoph.langer at sap.com> wrote:
>
> Hi Lance,
>
> I checked the code and it looks good to me.
>
> The comment in the test (line 46) should probably be more like: “Validate that you can iterate a ZIP file with invalid ZIP header entries”.
Sure I can update that prior to pushing.
Best
lance
>
> Best regards
> Christoph
>
>
> From: nio-dev <nio-dev-bounces at openjdk.java.net <mailto:nio-dev-bounces at openjdk.java.net>> On Behalf Of Lance Andersen
> Sent: Samstag, 18. Mai 2019 22:59
> To: Claes Redestad <claes.redestad at oracle.com <mailto:claes.redestad at oracle.com>>
> Cc: nio-dev <nio-dev at openjdk.java.net <mailto:nio-dev at openjdk.java.net>>
> Subject: Re: RFR: 8222807: Address iteration with invalid ZIP header entries
>
> Hi Claes,
>
> Thank you for the feedback.
> On May 17, 2019, at 9:14 PM, Claes Redestad <claes.redestad at oracle.com <mailto:claes.redestad at oracle.com>> wrote:
>
> Hi Lance,
>
> since needing to normalize should be very rare in practice it might be
> profitable to outline that case, see similar code in
> UnixFileSystem::normalize
>
> Per your suggestion, I made the change and it can be found at: http://cr.openjdk.java.net/~lancea/8222807/webrev.01/index.html <http://cr.openjdk.java.net/~lancea/8222807/webrev.01/index.html>
>
> Mach5 tier1, tier2 and tier3 runs are clean
>
>
>
> You introduced int len = path.length but then use path.length
> in most places.
>
> Thank you again.
>
> Best
> Lance
>
>
> /Claes
>
> On 2019-05-18 01:46, Lance Andersen wrote:
>
> Hi all.
> Please review the webrev for 8222807. This deals with ZIP header entries such as “foo//“. resulting in issues walking walking through a ZIP archive.
> The webrev can be found at: http://cr.openjdk.java.net/~lancea/8222807/webrev.00/index.html <http://cr.openjdk.java.net/~lancea/8222807/webrev.00/index.html>.
> I have verified that the mach5 tier1, tier2, and tier3 tests all pass.
> Thank you and have a good weekend.
> Best
> Lance
> <http://oracle.com/us/design/oracle-email-sig-198324.gif <http://oracle.com/us/design/oracle-email-sig-198324.gif>>
> <http://oracle.com/us/design/oracle-email-sig-198324.gif <http://oracle.com/us/design/oracle-email-sig-198324.gif>><http://oracle.com/us/design/oracle-email-sig-198324.gif <http://oracle.com/us/design/oracle-email-sig-198324.gif>>
> <http://oracle.com/us/design/oracle-email-sig-198324.gif <http://oracle.com/us/design/oracle-email-sig-198324.gif>>Lance Andersen| Principal Member of Technical Staff | +1.781.442.2037
> Oracle Java Engineering
> 1 Network Drive
> Burlington, MA 01803
> Lance.Andersen at oracle.com <mailto:Lance.Andersen at oracle.com> <mailto:Lance.Andersen at oracle.com <mailto:Lance.Andersen at oracle.com>>
>
> <image001.gif> <http://oracle.com/us/design/oracle-email-sig-198324.gif>
>
> <http://oracle.com/us/design/oracle-email-sig-198324.gif>Lance Andersen| Principal Member of Technical Staff | +1.781.442.2037
> Oracle Java Engineering
> 1 Network Drive
> Burlington, MA 01803
> Lance.Andersen at oracle.com <mailto:Lance.Andersen at oracle.com>
>
>
>
>
<http://oracle.com/us/design/oracle-email-sig-198324.gif>
<http://oracle.com/us/design/oracle-email-sig-198324.gif> <http://oracle.com/us/design/oracle-email-sig-198324.gif>
<http://oracle.com/us/design/oracle-email-sig-198324.gif>Lance Andersen| Principal Member of Technical Staff | +1.781.442.2037
Oracle Java Engineering
1 Network Drive
Burlington, MA 01803
Lance.Andersen at oracle.com <mailto:Lance.Andersen at oracle.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.java.net/pipermail/nio-dev/attachments/20190520/a40c2be6/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: oracle_sig_logo.gif
Type: image/gif
Size: 658 bytes
Desc: not available
URL: <https://mail.openjdk.java.net/pipermail/nio-dev/attachments/20190520/a40c2be6/oracle_sig_logo-0001.gif>
More information about the nio-dev
mailing list