RFR: 8370688: java.util.jar.JarEntry.getCodeSigners() and getCertificates() should specify that they return a copy of the arrays [v6]

Jaikiran Pai jpai at openjdk.org
Sat Jan 24 01:25:25 UTC 2026


On Thu, 22 Jan 2026 21:54:35 GMT, Koushik Muthukrishnan Thirupattur <duke at openjdk.org> wrote:

>> The implementation of JarEntry.getCodeSigners() and getCertificates() both return a copy of the original array. However, the documentation of these 2 methods currently doesn't specify this.
>
> Koushik Muthukrishnan Thirupattur has updated the pull request incrementally with one additional commit since the last revision:
> 
>   8370688: Updated the documentation to describe the behavior using @implSpec

Marked as reviewed by jpai (Reviewer).

-------------

PR Review: https://git.openjdk.org/jdk/pull/28615#pullrequestreview-3700349807


More information about the security-dev mailing list