ManifestDigester fails with a manifest ending in CR

Philipp Kunz philipp.kunz at
Sun Jan 20 08:20:14 UTC 2019

ManifestDigester fails to digest manifests that end with \r with an
array index out of bounds exception and such jar files cannot be
I cannot create a bug myself because I don't have the privileges and
could therefore not add the proper @bug tag to the test yet.

Following up in smaller parts

Possibly related:
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: manifestdigesterlinebreaks.patch
Type: text/x-patch
Size: 5963 bytes
Desc: not available
URL: <>

More information about the security-dev mailing list