On Sun, 9 Feb 2025 05:02:07 GMT, Hai-May Chao <hc...@openjdk.org> wrote:
> The jarsigner -verify command currently performs verification by reading from > JarFile to navigate the central directory (CEN) headers. It is now enhanced > to include cross-validation of entries between JarFile (CEN-based) and > JarInputStream (stream-based) representations of the JAR. It emits earnings > when detecting discrepancies between a JAR file’s central directory and its > local file entries. This pull request has now been integrated. Changeset: bbd5b174 Author: Hai-May Chao <hc...@openjdk.org> URL: https://git.openjdk.org/jdk/commit/bbd5b174c50346152a624317b6bd76ec48f7e551 Stats: 303 lines in 4 files changed: 303 ins; 0 del; 0 mod 8339280: jarsigner -verify performs cross-checking between CEN and LOC Reviewed-by: mullan, weijun, lancea ------------- PR: https://git.openjdk.org/jdk/pull/23532
