Skip to content

GitLab

Switch branch/tag
  1. 28 May, 2015 1 commit
  3. 25 Jul, 2014 3 commits
  5. 21 Jul, 2014 4 commits
  7. 17 Jul, 2014 1 commit
    • Neil Fuller's avatar
      Add additional checks in ObjectInputStream · 47f0ec56
      Neil Fuller authored 
      Thanks to Jann Horn for reporting a bug in ObjectInputStream
and sending the initial patch.

Add some checks that the class of an object
being deserialized still conforms to the requirements
for serialization.

Add some checks that the class being deserialized matches
the type information (enum, serializable, externalizable)
held in the stream.

Delayed static initialization of classes until the
type of the class has been validated against the stream
content in some cases.

Added more tests.

Bug: 15874291
(cherry picked from commit 738c833d)

Change-Id: I9f5437ed60936882de56589537176466624e631d
      47f0ec56
  9. 07 Jul, 2014 1 commit
  11. 08 Jul, 2014 1 commit
    • Mathieu Chartier's avatar
      Fix race condition in WeakHashMapTest. · 23611d7f
      Mathieu Chartier authored 
      There was a race condition where the reference queue daemon wouldn't
necessarily have processed the cleared references by the time we
called WeakHashMap.size(). The race is fixed by doing a busy wait
with a 5 second timeout. This should't increase the test time in the
average case since the cleared weak references should be processed
shortly after induceFinalization finishes.

Bug: 15775475

Change-Id: Id5a532c2a9b3377641523aaed67f1b48a8ec632b

(cherry picked from commit 97afbd79)
      23611d7f
  13. 30 Apr, 2014 14 commits
  15. 29 Apr, 2014 2 commits
  17. 22 Apr, 2014 4 commits
  19. 18 Apr, 2014 5 commits
  21. 17 Apr, 2014 1 commit
    • Kenny Root's avatar
      Add API to check certificate chain signatures · f8986a98
      Kenny Root authored 
      Add hidden API to check certificate chain signatures when needed. The
getCertificates implementation returns a list of all the certificates and
chains and would expect any caller interested in verifying actual chains
to call getCodeSigners instead.

We add this hidden constructor as a stop-gap until we can switch callers
over to getCodeSigners.

Bug: 13678484
Change-Id: I6ad8a168adf6a33b9155f416ed22852ded221382
      f8986a98
  23. 06 Feb, 2014 3 commits