RFR: 8280409: JarFile::getInputStream can fail with NPE accessing ze.getName() [v8]
Alan Bateman
alanb at openjdk.java.net
Wed Feb 23 10:38:56 UTC 2022
On Tue, 22 Feb 2022 22:05:32 GMT, Lance Andersen <lancea at openjdk.org> wrote:
>> Hi all,
>>
>> Please review the attached patch to address
>>
>> - That JarFile::getInputStream did not check for a null ZipEntry passed as a parameter
>> - Have Zip/JarFile::getInputStream throw a ZipException in the event that an unexpected exception occurs
>>
>> Mach5 tiers1-3 runs are clean as are the TCK java.util.zip and java.util.jar test runs
>>
>> Best
>> Lance
>
> Lance Andersen has updated the pull request incrementally with one additional commit since the last revision:
>
> Modified and clarified test comments
Thanks for the update to the test to provide instructions on how to re-create the JAR and sign it.
-------------
Marked as reviewed by alanb (Reviewer).
PR: https://git.openjdk.java.net/jdk/pull/7348
More information about the security-dev
mailing list