RFR: 8280409: JarFile::getInputStream can fail with NPE accessing ze.getName() [v7]
Lance Andersen
lancea at openjdk.java.net
Fri Feb 18 19:54:23 UTC 2022
> Hi all,
>
> Please review the attached patch to address
>
> - That JarFile::getInputStream did not check for a null ZipEntry passed as a parameter
> - Have Zip/JarFile::getInputStream throw a ZipException in the event that an unexpected exception occurs
>
> Mach5 tiers1-3 runs are clean as are the TCK java.util.zip and java.util.jar test runs
>
> Best
> Lance
Lance Andersen has updated the pull request incrementally with one additional commit since the last revision:
remove extra '}'
-------------
Changes:
- all: https://git.openjdk.java.net/jdk/pull/7348/files
- new: https://git.openjdk.java.net/jdk/pull/7348/files/818c2857..839d99f7
Webrevs:
- full: https://webrevs.openjdk.java.net/?repo=jdk&pr=7348&range=06
- incr: https://webrevs.openjdk.java.net/?repo=jdk&pr=7348&range=05-06
Stats: 4 lines in 1 file changed: 0 ins; 0 del; 4 mod
Patch: https://git.openjdk.java.net/jdk/pull/7348.diff
Fetch: git fetch https://git.openjdk.java.net/jdk pull/7348/head:pull/7348
PR: https://git.openjdk.java.net/jdk/pull/7348
More information about the security-dev
mailing list