RFR: 8366522: CodeSource.getCodeSigners() throws NPE within empty certs [v6]

Sean Mullan mullan at openjdk.org
Mon Jan 12 17:40:47 UTC 2026


On Fri, 9 Jan 2026 19:53:31 GMT, Kirill Shirokov <duke at openjdk.org> wrote:

>> The new tests cover only NPE scenarios.
>
> Kirill Shirokov has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains eight additional commits since the last revision:
> 
>  - Fixed java/security/CodeSource/CodeSourceNoInputs code style. Updated copyright year
>  - Merge remote-tracking branch 'origin' into JDK-8366522-fix-npe-codeSourceGetCodeSigners
>  - Fixed java/security/CodeSource/CodeSourceNoInputs test description
>  - Make CodeSource.getCodeSigners() return empty array of CodeSigners when constructed with emtpy array of certificates. Update the jtreg test to test null/empty array combinations of certificates and code signers
>  - Merge branch 'master' into JDK-8366522-fix-npe-codeSourceGetCodeSigners
>  - Merge branch 'master' into JDK-8366522-fix-npe-codeSourceGetCodeSigners
>  - Merge branch 'master' into JDK-8366522-fix-npe-codeSourceGetCodeSigners
>  - 8366522: CodeSource.getCodeSigners() throws NPE within empty certs

test/jdk/java/security/CodeSource/CodeSourceNoInputs.java line 33:

> 31:  * @bug 8366522
> 32:  * @summary Verify that getCertificates() and getCodeSigners() return correct
> 33:  *          results when CodeSource is created with emtpy or null Certificate[]

Typo: s/emtpy/empty/

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/27105#discussion_r2683227124


More information about the security-dev mailing list