RFR: 8366522: CodeSource.getCodeSigners() throws NPE within empty certs [v6]

Kirill Shirokov duke at openjdk.org
Mon Jan 12 22:09:19 UTC 2026


On Mon, 12 Jan 2026 17:30:54 GMT, Sean Mullan <mullan at openjdk.org> wrote:

>> Kirill Shirokov has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains eight additional commits since the last revision:
>> 
>>  - Fixed java/security/CodeSource/CodeSourceNoInputs code style. Updated copyright year
>>  - Merge remote-tracking branch 'origin' into JDK-8366522-fix-npe-codeSourceGetCodeSigners
>>  - Fixed java/security/CodeSource/CodeSourceNoInputs test description
>>  - Make CodeSource.getCodeSigners() return empty array of CodeSigners when constructed with emtpy array of certificates. Update the jtreg test to test null/empty array combinations of certificates and code signers
>>  - Merge branch 'master' into JDK-8366522-fix-npe-codeSourceGetCodeSigners
>>  - Merge branch 'master' into JDK-8366522-fix-npe-codeSourceGetCodeSigners
>>  - Merge branch 'master' into JDK-8366522-fix-npe-codeSourceGetCodeSigners
>>  - 8366522: CodeSource.getCodeSigners() throws NPE within empty certs
>
> test/jdk/java/security/CodeSource/CodeSourceNoInputs.java line 33:
> 
>> 31:  * @bug 8366522
>> 32:  * @summary Verify that getCertificates() and getCodeSigners() return correct
>> 33:  *          results when CodeSource is created with emtpy or null Certificate[]
> 
> Typo: s/emtpy/empty/

Fixed

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/27105#discussion_r2684065589


More information about the security-dev mailing list