1. 17 Sep, 2015 1 commit
    • Neil Fuller's avatar
      Fixes and improvements for SerializationTest · 708f9f54
      Neil Fuller authored
      The tests were order-dependent and flawed: test support classes
      were used in multiple tests but each relied on it being possible
      to detect static initialization of those classes. There was an
      incorrect assertion.
      
      This change splits out unique test support classes for those
      that need them, adds more assertions and fixes the broken
      assertion. Also tidies up some warnings.
      
      Bug: 23031484
      Change-Id: Ia3bb32dd1dbd02a74931604cae424d7e9312c76d
      (cherry picked from commit 729d4eca)
      (cherry picked from commit 5f3b815a)
      708f9f54
  2. 22 Jul, 2015 2 commits
  3. 14 Jul, 2015 2 commits
  4. 13 Jul, 2015 1 commit
  5. 08 Jul, 2015 1 commit
  6. 28 May, 2015 3 commits
  7. 12 Dec, 2014 2 commits
  8. 11 Dec, 2014 1 commit
    • Neil Fuller's avatar
      Fix for TLS HTTP connections with GMS sockets · bfeba0c4
      Neil Fuller authored
      The logic was incorrect. If the socket is not the platform version all
      connection attempts would be treated as fallbacks.
      
      Bug: 18675956
      Change-Id: I7bb1f84127fbede75f12b0a8dec7d4a7374f0b22
      bfeba0c4
  9. 19 Nov, 2014 3 commits
  10. 10 Oct, 2014 2 commits
  11. 08 Oct, 2014 1 commit
    • Neil Fuller's avatar
      Add support for TLS_FALLBACK_SCSV · 6c9609af
      Neil Fuller authored
      Backport of commits:
      
      external/conscrypt: 8d7e23e117da591a8d48e6bcda9ed6f58ff1a375
      libcore: e6a6e935
      libcore: 957ec8b0
      
      Plus additional changes to:
      luni/src/main/java/org/apache/harmony/xnet/provider/jsse/OpenSSLServerSocketImpl.java
      luni/src/main/java/org/apache/harmony/xnet/provider/jsse/OpenSSLSocketImpl.java
      luni/src/test/java/libcore/java/net/URLConnectionTest.java
      luni/src/test/java/org/apache/harmony/xnet/provider/jsse/CipherSuiteTest.java
      support/src/test/java/libcore/java/security/StandardNames.java
      
      to account for KitKat differences.
      
      Bug: 17750026
      Change-Id: Ic6e9474275bc3ffec3b5c2d6df1f8d6ffe77bff8
      6c9609af
  12. 07 Oct, 2014 1 commit
    • Neil Fuller's avatar
      Add support for TLS_FALLBACK_SCSV · 865c83f8
      Neil Fuller authored
      Backport of commits:
      
      external/conscrypt: 8d7e23e117da591a8d48e6bcda9ed6f58ff1a375
      libcore: e6a6e935
      libcore: 957ec8b0
      
      Plus additional changes to:
      luni/src/main/java/libcore/net/http/HttpConnection.java
      luni/src/main/java/org/apache/harmony/xnet/provider/jsse/OpenSSLServerSocketImpl.java
      luni/src/main/java/org/apache/harmony/xnet/provider/jsse/OpenSSLSocketImpl.java
      luni/src/test/java/libcore/java/net/URLConnectionTest.java
      luni/src/test/java/org/apache/harmony/xnet/provider/jsse/CipherSuiteTest.java
      support/src/test/java/libcore/java/security/StandardNames.java
      
      to account for JellyBean differences.
      
      Bug: 17750026
      Change-Id: I7b60b1260fa0b275631ce9987168c7b5fc7ca138
      865c83f8
  13. 29 Aug, 2014 2 commits
  14. 28 Aug, 2014 1 commit
    • Neil Fuller's avatar
      Add additional field checks for deserialization. · 008b2de6
      Neil Fuller authored
      Check that a field is not static when deserializing.
      
      Contains some additional tests to confirm and document behavior
      and prevent regressions for field deserialization.
      
      (cherry picked from commit f4d72bcf)
      Bug: 17202597
      
      Change-Id: I72456a8b45ca0de1d3dd2b0f9515548b02e0a7be
      008b2de6
  15. 25 Jul, 2014 7 commits
  16. 21 Jul, 2014 8 commits
  17. 17 Jul, 2014 1 commit
    • Neil Fuller's avatar
      Add additional checks in ObjectInputStream · 47f0ec56
      Neil Fuller authored
      Thanks to Jann Horn for reporting a bug in ObjectInputStream
      and sending the initial patch.
      
      Add some checks that the class of an object
      being deserialized still conforms to the requirements
      for serialization.
      
      Add some checks that the class being deserialized matches
      the type information (enum, serializable, externalizable)
      held in the stream.
      
      Delayed static initialization of classes until the
      type of the class has been validated against the stream
      content in some cases.
      
      Added more tests.
      
      Bug: 15874291
      (cherry picked from commit 738c833d)
      
      Change-Id: I9f5437ed60936882de56589537176466624e631d
      47f0ec56
  18. 07 Jul, 2014 1 commit