RFR: 8186334: JarFile throws ArrayIndexOutOfBoundsException when the manifest contains certain characters

Paul Sandoz paul.sandoz at oracle.com
Mon Aug 21 17:15:32 UTC 2017

> On 21 Aug 2017, at 02:53, Claes Redestad <claes.redestad at oracle.com> wrote:
> Hi,
> this patch addresses an unfortunate regression where backtick characters
> in a manifest can cause an AIOOBE.
> Webrev: http://cr.openjdk.java.net/~redestad/8186334/jdk.00/
> Bug: https://bugs.openjdk.java.net/browse/JDK-8186334
> Basically an off-by-one issue during certain steps in the search algorithm,
> meaning it is context dependent whether a backtick will trip on this issue
> or not.

Ooops, looks good.

I see a workaround has been pushed to Jackson, which reduced my urge to suggest a nine respin. But… being slightly paranoid testing JarFile on a local maven central mirror would give us a better sense of the impact.


> /Claes

More information about the core-libs-dev mailing list