Code review request: 8021788: JarInputStream doesn't provide certificates for some file under META-INF

Xueming Shen xueming.shen at oracle.com
Thu Aug 8 21:53:03 UTC 2013


Looks fine.

-Sherman

On 08/04/2013 06:28 PM, Weijun Wang wrote:
> Please take a look at
>
>    http://cr.openjdk.java.net/~weijun/8021788/webrev.00/
>
> The problem is that the method treats no META-INF entry as normal. If we can be sure that MANIFEST.MF and signature-related files are always at the beginning, we can safely treat an entry normal when we have done with those.
>
> Thanks
> Max




More information about the security-dev mailing list