RFR: 8280409: JarFile::getInputStream can fail with NPE accessing ze.getName() [v4]
Alan Bateman
alanb at openjdk.java.net
Fri Feb 18 17:08:55 UTC 2022
On Fri, 18 Feb 2022 16:25:30 GMT, Lance Andersen <lancea at openjdk.org> wrote:
> > The updates changes to ZipFile/JarFile look okay. I don't have time to study the test too closely right now but it will need to include instructions on how to re-create the signed JAR that is stored in the byte array.
>
> Those instructions are already in the comments for the constant `SIGNED_VALID_ENTRY_NAME`
That's the keytool command to sign the JAR. What I meant is the complete steps to create the JAR file, sign it, and then create the byte array.
-------------
PR: https://git.openjdk.java.net/jdk/pull/7348
More information about the security-dev
mailing list