Loading...

Type: Bug
Resolution: Fixed
Priority: P3
Fix Version/s: 22
Affects Version/s: 7-pool, 8-pool, 11.0.20, 11-pool, 17.0.8, 17-pool, 20-pool, 21-pool
Component/s: security-libs
Labels:

Subcomponent:
java.security
Resolved In Build:
b09
CPU:

generic
OS:

generic
Verification:
Verified

Issue	Fix Version	Assignee	Priority	Status	Resolution	Resolved In Build
JDK-8319287	21.0.2	Nibedita Jena	P3	Resolved	Fixed	b05
JDK-8315388	21.0.1	Nibedita Jena	P3	Resolved	Fixed	b09
JDK-8315434	17.0.10-oracle	Nibedita Jena	P3	Resolved	Fixed	b01
JDK-8315551	17.0.10	Andrew Hughes	P3	Resolved	Fixed	b01
JDK-8319546	17.0.9.0.2-oracle	Nibedita Jena	P3	Closed	Fixed	b01
JDK-8315435	11.0.22-oracle	Nibedita Jena	P3	Resolved	Fixed	b01
JDK-8315725	11.0.22	Andrew Hughes	P3	Resolved	Fixed	b01
JDK-8319998	11.0.21.0.2-oracle	Nibedita Jena	P3	Closed	Fixed	b01
JDK-8320704	openjdk8u402	Andrew Hughes	P3	Resolved	Fixed	b04
JDK-8315577	8u401	Nibedita Jena	P3	Resolved	Fixed	b01
JDK-8319105	8u391	Nibedita Jena	P3	Closed	Fixed	b32
JDK-8316095	7u411	Nibedita Jena	P3	Resolved	Fixed	b01

After 8300596 (see https://github.com/openjdk/jdk/commit/ecd0bc1d6205d1d1eca67cbfb9d4deaeb65739aa) we run into a regression with WhiteSource/Mend jar from
https://github.com/whitesource/unified-agent-distribution/releases/latest/download/wss-unified-agent.jar

jdk-17.0.8\bin\java -jar wss-unified-agent.jar
Error: An unexpected error occurred while trying to open file wss-unified-agent.jar

jdk-17.0.8\bin\java -Xdiag -jar wss-unified-agent.jar
Error: An unexpected error occurred while trying to open file wss-unified-agent.jar
java.io.IOException: Unsupported size: 8576920 for JarEntry META-INF/MANIFEST.MF. Allowed max size: 8000000 bytes
        at java.base/java.util.jar.JarFile.getBytes(JarFile.java:804)
        at java.base/java.util.jar.JarFile.getManifestFromReference(JarFile.java:419)
        at java.base/java.util.jar.JarFile.getManifest(JarFile.java:406)
        at java.base/sun.launcher.LauncherHelper.getMainClassFromJar(LauncherHelper.java:553)
        at java.base/sun.launcher.LauncherHelper.loadMainClass(LauncherHelper.java:778)
        at java.base/sun.launcher.LauncherHelper.checkAndLoadMain(LauncherHelper.java:686)

Looks like the 8000000 default is too low, could we increase it e.g. to 12 or 16 million ?
Additionally the exception shown with -Xdiag should maybe contain the jdk.jar.maxSignatureFileSize property that can be used to set an own value.

backported by

JDK-8315388 Increase jdk.jar.maxSignatureFileSize default which is too low for JARs such as WhiteSource/Mend unified agent jar

Resolved

JDK-8315434 Increase jdk.jar.maxSignatureFileSize default which is too low for JARs such as WhiteSource/Mend unified agent jar

Resolved

JDK-8315435 Increase jdk.jar.maxSignatureFileSize default which is too low for JARs such as WhiteSource/Mend unified agent jar

Resolved

JDK-8315551 Increase jdk.jar.maxSignatureFileSize default which is too low for JARs such as WhiteSource/Mend unified agent jar

Resolved

JDK-8315577 Increase jdk.jar.maxSignatureFileSize default which is too low for JARs such as WhiteSource/Mend unified agent jar

Resolved

JDK-8315725 Increase jdk.jar.maxSignatureFileSize default which is too low for JARs such as WhiteSource/Mend unified agent jar

Resolved

JDK-8316095 Increase jdk.jar.maxSignatureFileSize default which is too low for JARs such as WhiteSource/Mend unified agent jar

Resolved

JDK-8319287 Increase jdk.jar.maxSignatureFileSize default which is too low for JARs such as WhiteSource/Mend unified agent jar

Resolved

JDK-8320704 Increase jdk.jar.maxSignatureFileSize default which is too low for JARs such as WhiteSource/Mend unified agent jar

Resolved

JDK-8319105 Increase jdk.jar.maxSignatureFileSize default which is too low for JARs such as WhiteSource/Mend unified agent jar

Closed

JDK-8319546 Increase jdk.jar.maxSignatureFileSize default which is too low for JARs such as WhiteSource/Mend unified agent jar

Closed

JDK-8319998 Increase jdk.jar.maxSignatureFileSize default which is too low for JARs such as WhiteSource/Mend unified agent jar

Closed

csr for

JDK-8313216 Increase jdk.jar.maxSignatureFileSize default which is too low for JARs such as WhiteSource/Mend unified agent jar

Closed

links to

Commit openjdk/jdk8u-dev/b372b4b5

Commit openjdk/jdk11u-dev/50074a04

Commit openjdk/jdk17u-dev/5b613e3e

Commit openjdk/jdk21u/c7cff818

Commit openjdk/jdk/e47a84f2

Review openjdk/jdk11u-dev/2116

Review openjdk/jdk17u-dev/1703

Review openjdk/jdk21u/76

Review openjdk/jdk/15072

Review(master) openjdk/jdk8u-dev/381

(7 backported by, 1 csr for, 10 links to)

1.	Release Note: Increase Default Value of the System Property `jdk.jar.maxSignatureFileSize`		Resolved	Haimay Chao
2.	Document system property jdk.jar.maxSignatureFileSize in the security guides		Resolved	Raymond Gallardo

Details

Backports

Description

Attachments

Issue Links

Sub-Tasks

Activity

People

Dates