RFR: 8280409: JarFile::getInputStream can fail with NPE accessing ze.getName() [v8]

Alan Bateman alanb at openjdk.java.net
Wed Feb 23 10:38:56 UTC 2022


On Tue, 22 Feb 2022 22:05:32 GMT, Lance Andersen <lancea at openjdk.org> wrote:

>> Hi all,
>> 
>> Please review the attached patch to address
>> 
>> - That JarFile::getInputStream did not check for a null ZipEntry passed as a parameter
>> - Have Zip/JarFile::getInputStream throw a ZipException in the event that an unexpected exception occurs
>> 
>> Mach5 tiers1-3 runs are clean as are the TCK java.util.zip and java.util.jar test runs
>> 
>> Best
>> Lance
>
> Lance Andersen has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Modified and clarified test comments

Thanks for the update to the test to provide instructions on how to re-create the JAR and sign it.

-------------

Marked as reviewed by alanb (Reviewer).

PR: https://git.openjdk.java.net/jdk/pull/7348



More information about the security-dev mailing list