hg: jdk7/tl/jdk: 7037201: regression: invalid signed jar file not detected

weijun.wang at oracle.com weijun.wang at oracle.com
Thu Apr 28 12:36:29 UTC 2011


Changeset: 76703c84b3a2
Author:    weijun
Date:      2011-04-28 20:34 +0800
URL:       http://hg.openjdk.java.net/jdk7/tl/jdk/rev/76703c84b3a2

7037201: regression: invalid signed jar file not detected
Reviewed-by: mullan

! src/share/classes/java/util/jar/JarFile.java
! src/share/classes/java/util/jar/JarInputStream.java
! src/share/classes/java/util/jar/JarVerifier.java
! src/share/classes/sun/security/pkcs/PKCS7.java
! src/share/classes/sun/security/pkcs/SignerInfo.java
! src/share/classes/sun/security/util/ManifestEntryVerifier.java
- src/share/classes/sun/security/util/SignatureFileManifest.java
! src/share/classes/sun/security/util/SignatureFileVerifier.java
! test/java/util/jar/JarInputStream/ScanSignedJar.java
! test/java/util/jar/JarInputStream/TestIndexedJarWithBadSignature.java




More information about the security-dev mailing list