<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>I've been poking around the zip internals and am now able to
locate the 16 bits of interest. The position of these actual bits
does appear to move around from one test run to another. For now,
I guess it's sufficient to look for the pattern of interest in the
signed zip file. New testcase added.</p>
<p><a
href="http://cr.openjdk.java.net/~coffeys/webrev.8250968.v4/webrev/">http://cr.openjdk.java.net/~coffeys/webrev.8250968.v4/webrev/</a></p>
<p>regards,<br>
Sean.<br>
</p>
<div class="moz-cite-prefix">On 27/08/2020 15:58, Weijun Wang wrote:<br>
</div>
<blockquote type="cite"
cite="mid:1582051D-5EDD-4F16-88D3-A064683023D3@ORACLE.COM">
<blockquote type="cite" style="color: #000000;">
<pre class="moz-quote-pre" wrap="">Looks like it was a conscious design decision to only allow recording of POSIX permission bits for this field (& 0xFFF). I don't see anything about symlink support in zipfs docs.
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">As long as that <b class="moz-txt-star"><span class="moz-txt-tag">*</span>byte<span class="moz-txt-tag">*</span></b> is there and it’s not difficult to locate, we can manually add the <b class="moz-txt-star"><span class="moz-txt-tag">*</span>bit<span class="moz-txt-tag">*</span></b> for symlink and see if jarsigner can keep it.
—Max
</pre>
</blockquote>
</body>
</html>