Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8022761

regression: SecurityException is NOT thrown while trying to pack a wrongly signed Indexed Jar file

    XMLWordPrintable

Details

    • b106
    • Verified

    Backports

      Description

        This seems a regression since 2013-08-08 TL nightly
        SecurityException is NOT thrown while trying to pack a wrongly signed Indexed Jar file

        Test case attached.

        Test PASS with jdk8/b102
        bash-3.2$ /java/re/jdk/8/promoted/all/b102/binaries/solaris-sparc/bin/java Pack200Tests `pwd`
        pack200Test3 PASS ... expected SecurityException thrown
        java.lang.SecurityException: cannot verify signature block file META-INF/MYKEY
                at sun.security.util.SignatureFileVerifier.processImpl(SignatureFileVerifier.java:219)
                at sun.security.util.SignatureFileVerifier.process(SignatureFileVerifier.java:192)
                at java.util.jar.JarVerifier.processEntry(JarVerifier.java:304)
                at java.util.jar.JarVerifier.update(JarVerifier.java:216)
                at java.util.jar.JarFile.initializeVerifier(JarFile.java:375)
                at java.util.jar.JarFile.getInputStream(JarFile.java:442)
                at com.sun.java.util.jar.pack.PackerImpl$DoPack$InFile.getInputStream(PackerImpl.java:384)
                at com.sun.java.util.jar.pack.PackerImpl$DoPack.run(PackerImpl.java:472)
                at com.sun.java.util.jar.pack.PackerImpl.pack(PackerImpl.java:98)
                at Pack200Tests.pack200Test3(Pack200Tests.java:46)
                at Pack200Tests.main(Pack200Tests.java:22)

        Test FAIL since 2013-08-08 TL nightly
        bash-3.2$ /java/re/jdk/8/nightly-tl/ws/build/solaris-sparc/j2sdk-image/bin/java Pack200Tests `pwd`
        pack200Test3 FAIL ... expected SecurityException is not thrown

        bash-3.2$ /java/re/jdk/8/nightly-tl/ws/build/solaris-sparc/j2sdk-image/bin/java -version
        java version "1.8.0-ea"
        Java(TM) SE Runtime Environment (build 1.8.0-ea-langtools-nightly-h5344-20130808-b103-b00)
        Java HotSpot(TM) Server VM (build 25.0-b44, mixed mode)


        Attachments

          1. Pack200Tests.java
            2 kB
            Amy Lu

          Issue Links

            Activity

              People

                weijun Weijun Wang
                amlu Amy Lu (Inactive)
                Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: