RFR: 8215788: Clarify JarInputStream Manifest access [v4]

Lance Andersen lancea at openjdk.org
Sat Sep 17 14:38:29 UTC 2022


On Sat, 17 Sep 2022 08:05:37 GMT, Alan Bateman <alanb at openjdk.org> wrote:

> It's a bit better but I think we can make it clearer and also link the JAR Manifest section of the JAR file spec. Can you try this:
> 
> ```
>  * <p> The {@link #getManifest() getManifest} method is used to read the
>  * <a href="{@docRoot}/../specs/jar/jar.html#jar-manifest">JAR Manifest</a>
>  * from the entry {@code META-INF/MANIFEST.MF} when it is the first entry
>  * in the stream (or the second entry in the case that the fist entry is
>  * {@code META-INF/} and the second entry {@code META-INF/MANIFEST.MF}).
>  *
>  * <p> The {@link #getNextJarEntry()} and {@link #getNextEntry()} methods are
>  * used to read JAR file entries from the stream. These methods skip over the
>  * manifest ({@code META-INF/MANIFEST.MF}) when it is at the beginning of the
>  * stream. In other words, these methods do not return an entry for the manifest
>  * when the manifest is the first entry in the stream. If the first entry is
>  * {@code META-INF/} and the second entry is the manifest then both are skipped
>  * over by these methods. Whether these methods skip over the manifest when it
>  * appears later in the stream is not specified.
> ```
> 
Revised using the above

> I think we also have to update getManifest method to align with the above as doesn't say anything about the manifest needing to be at the beginning of the stream.

Ok,  I added some verbiage similar to what I had originally before we decided to update the class description.  Please let me know if this is what you had in mind

Thank you again for your feedback

-------------

PR: https://git.openjdk.org/jdk/pull/10045



More information about the security-dev mailing list