RFR: 8300140: ZipFile.isSignatureRelated returns true for files in META-INF subdirectories

Fri Jan 13 20:56:19 UTC 2023

Some call sites of SignatureFileVerifier.isBlockOrSF fails to check that files reside in META-INF directly, and not in a subdirectory of META-INF.

The mentioned call sites needs updates to check and ignore such files.

A new test VerifyUnrelatedSignatureFiles is added which verifies that [*.SF, *.RSA] files in META-INF/ subdirectories are indeed ignored.

-------------

Commit messages:
 - Merge branch 'master' into signature-related-subdirs
 - Files residing in subdirectories of META-INF/ should not be treated as signature related

Changes: https://git.openjdk.org/jdk/pull/11976/files
 Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=11976&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8300140
  Stats: 235 lines in 5 files changed: 227 ins; 1 del; 7 mod
  Patch: https://git.openjdk.org/jdk/pull/11976.diff
  Fetch: git fetch https://git.openjdk.org/jdk pull/11976/head:pull/11976

PR: https://git.openjdk.org/jdk/pull/11976