src/share/classes/java/util/jar/JarVerifier.java

Print this page
rev 7885 : 8022761: regression: SecurityException is NOT thrown while trying to pack a wrongly signed Indexed Jar file

@@ -30,10 +30,11 @@
 import java.util.*;
 import java.security.*;
 import java.security.cert.CertificateException;
 import java.util.zip.ZipEntry;
 
+import sun.misc.JarIndex;
 import sun.security.util.ManifestDigester;
 import sun.security.util.ManifestEntryVerifier;
 import sun.security.util.SignatureFileVerifier;
 import sun.security.util.Debug;
 

@@ -137,11 +138,12 @@
                 if (je.isDirectory()) {
                     mev.setEntry(null, je);
                     return;
                 }
 
-                if (uname.equals(JarFile.MANIFEST_NAME)) {
+                if (uname.equals(JarFile.MANIFEST_NAME) ||
+                        uname.equals(JarIndex.INDEX_NAME)) {
                     return;
                 }
 
                 if (SignatureFileVerifier.isBlockOrSF(uname)) {
                     /* We parse only DSA, RSA or EC PKCS7 blocks. */