Integrated: 8280409: JarFile::getInputStream can fail with NPE accessing ze.getName()

Lance Andersen lancea at openjdk.java.net
Wed Feb 23 17:01:01 UTC 2022


On Fri, 4 Feb 2022 12:42:39 GMT, Lance Andersen <lancea at openjdk.org> wrote:

> Hi all,
> 
> Please review the attached patch to address
> 
> - That JarFile::getInputStream did not check for a null ZipEntry passed as a parameter
> - Have Zip/JarFile::getInputStream throw a ZipException in the event that an unexpected exception occurs
> 
> Mach5 tiers1-3 runs are clean as are the TCK java.util.zip and java.util.jar test runs
> 
> Best
> Lance

This pull request has now been integrated.

Changeset: a020b6ba
Author:    Lance Andersen <lancea at openjdk.org>
URL:       https://git.openjdk.java.net/jdk/commit/a020b6ba8f38fe85fb26972a51e4c1068408b1c1
Stats:     1103 lines in 3 files changed: 1071 ins; 0 del; 32 mod

8280409: JarFile::getInputStream can fail with NPE accessing ze.getName()

Reviewed-by: mullan, alanb

-------------

PR: https://git.openjdk.java.net/jdk/pull/7348



More information about the security-dev mailing list