hg: jdk7/tl/jdk: 7037201: regression: invalid signed jar file not detected
weijun.wang at oracle.com
weijun.wang at oracle.com
Thu Apr 28 12:36:29 UTC 2011
Changeset: 76703c84b3a2
Author: weijun
Date: 2011-04-28 20:34 +0800
URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/76703c84b3a2
7037201: regression: invalid signed jar file not detected
Reviewed-by: mullan
! src/share/classes/java/util/jar/JarFile.java
! src/share/classes/java/util/jar/JarInputStream.java
! src/share/classes/java/util/jar/JarVerifier.java
! src/share/classes/sun/security/pkcs/PKCS7.java
! src/share/classes/sun/security/pkcs/SignerInfo.java
! src/share/classes/sun/security/util/ManifestEntryVerifier.java
- src/share/classes/sun/security/util/SignatureFileManifest.java
! src/share/classes/sun/security/util/SignatureFileVerifier.java
! test/java/util/jar/JarInputStream/ScanSignedJar.java
! test/java/util/jar/JarInputStream/TestIndexedJarWithBadSignature.java
More information about the security-dev
mailing list