[rfc][icedtea-web] Reproducer & unit test for unsigned content in META-INF/

Adam Domurad adomurad at redhat.com
Fri Aug 10 12:31:51 PDT 2012


Ping. The fix for this test has been in HEAD for a while now, and I was
originally asked to make a reproducer for it ASAP.

On Thu, 2012-07-05 at 11:27 -0400, Adam Domurad wrote:
> Note, bugfix already in HEAD. Reproducer sanity checked by backing out
> -r429 in HEAD. 
> 
> Reproducer functions by copying and modifying ReadPropertiesSigned.jar
> to have unsigned content in META-INF/ directory. If it is felt that it
> should sign and create its own jar let me know.
> 
> Unit test changelog:
> 2012-07-05  Adam Domurad  <adomurad at redhat.com>
> 
> 	Unit test for method in JCV, isMetaInfFile()
> 	* netx/net/sourceforge/jnlp/tools/JarCertVerifier.java: 
> 	Made isMetaInfFile package-private for testing purposes.
> 	* tests/netx/unit/net/sourceforge/jnlp/tools/JarCertVerifierTest.java:
> 	New, tests isMetaInfFile()
> 
> Reproducer changelog:
> 2012-07-05  Adam Domurad  <adomurad at redhat.com>
> 
> 	Reproducer for allowing unsigned content in META-INF/ folder. 
> 	Derives from ReadPropertiesSigned test's signed jar.
> 	*
> tests/reproducers/custom/UnsignedContentInMETAINF/resources/UnsignedContentInMETAINF.jnlp:
> 	New, runs a modified version of ReadPropertiesSigned.jar
> (UnsignedContentInMETAINF.jar)
> 	*
> tests/reproducers/custom/UnsignedContentInMETAINF/srcs/META-INF/unsigned_file_in_metainf: 
> 	New, placed into a modified version of ReadPropertiesSigned.jar 
> 	(UnsignedContentInMETAINF.jar) so that there is unsigned content in the
> 	META-INF/ folder.
> 	* tests/reproducers/custom/UnsignedContentInMETAINF/srcs/Makefile:
> 	New, creates a modified version of ReadPropertiesSigned.jar, named 
> 	UnsignedContentInMETAINF.jar, and places unsigned content inside its 
> 	META-INF/ folder
> 	*
> tests/reproducers/custom/UnsignedContentInMETAINF/testcases/UnsignedContentInMETAINF.java: 
> 	Test driver for jnlp file
> 
> Thanks,
> Adam
> 
> 





More information about the distro-pkg-dev mailing list