Code review request: 8021788: JarInputStream doesn't provide certificates for some file under META-INF
Xueming Shen
xueming.shen at oracle.com
Thu Aug 8 21:53:03 UTC 2013
Looks fine.
-Sherman
On 08/04/2013 06:28 PM, Weijun Wang wrote:
> Please take a look at
>
> http://cr.openjdk.java.net/~weijun/8021788/webrev.00/
>
> The problem is that the method treats no META-INF entry as normal. If we can be sure that MANIFEST.MF and signature-related files are always at the beginning, we can safely treat an entry normal when we have done with those.
>
> Thanks
> Max
More information about the security-dev
mailing list