Integrated: 8339280: jarsigner -verify performs cross-checking between CEN and LOC

[Hai-May Chao]

On Sun, 9 Feb 2025 05:02:07 GMT, Hai-May Chao <hchao at openjdk.org> wrote:

> The jarsigner -verify command currently performs verification by reading from JarFile to navigate the central directory (CEN) headers. It is now enhanced to include cross-validation of entries between JarFile (CEN-based) and JarInputStream (stream-based) representations of the JAR. It emits earnings when detecting discrepancies between a JAR file’s central directory and its local file entries.

This pull request has now been integrated.

Changeset: bbd5b174
Author:    Hai-May Chao <hchao at openjdk.org>
URL:       https://git.openjdk.org/jdk/commit/bbd5b174c50346152a624317b6bd76ec48f7e551
Stats:     303 lines in 4 files changed: 303 ins; 0 del; 0 mod

8339280: jarsigner -verify performs cross-checking between CEN and LOC

Reviewed-by: mullan, weijun, lancea

-------------

PR: https://git.openjdk.org/jdk/pull/23532