GitLab

* commit '1fe89b7b':
  Add additional checks in ObjectInputStream

* commit 'e0c6824f':
  Add additional checks in ObjectInputStream

Change-Id: I75aee3cb8a56197e6be60deb486c13e95f84644d

Thanks to Jann Horn for reporting a bug in ObjectInputStream
and sending the initial patch.

Add some checks that the class of an object
being deserialized still conforms to the requirements
for serialization.

Add some checks that the class being deserialized matches
the type information (enum, serializable, externalizable)
held in the stream.

Delayed static initialization of classes until the
type of the class has been validated against the stream
content in some cases.

Added more tests.

Bug: 15874291
(cherry picked from commit 738c833d)

Change-Id: I9f5437ed60936882de56589537176466624e631d

* commit '2b556603':
  Add API to check certificate chain signatures

* commit 'd3d58171':
  Add API to check certificate chain signatures

* commit '2bc5e811':
  Add API to check certificate chain signatures

* commit '4629f94a':
  JarFile: make test chain 3 long

* commit '50256449':
  Revert "Add API to check certificate chain signatures"

* commit 'e0350a80':
  JarFile: make test chain 3 long

* commit '9cd5caec':
  Revert "Add API to check certificate chain signatures"

* commit 'afd7d947':
  JarFile: make test chain 3 long

* commit '8c9ea691':
  Revert "Add API to check certificate chain signatures"

Add hidden API to check certificate chain signatures when needed. The
getCertificates implementation returns a list of all the certificates and
chains and would expect any caller interested in verifying actual chains
to call getCodeSigners instead.

We add this hidden constructor as a stop-gap until we can switch callers
over to getCodeSigners.

Bug: 13678484
Change-Id: I01cddef287767422454de4c5fd266c812a04d570

This reverts commit f8986a98.

Bug: 13678484
Change-Id: Ie2e44c60cc025a8a1e54aa7a6fb4b251ad363aae

Change-Id: I761f0a652a8502e28a4f9bb15ac9782d3ad42355

* commit '951aa4f4':
  Tests for API to check certificate chain signatures

* commit '531968cf':
  Tests for API to check certificate chain signatures

* commit 'cb11b9ff':
  Tests for API to check certificate chain signatures

* commit '928d0707':
  Add API to check certificate chain signatures

Bug: 13678484
Change-Id: Ibc14b3e9b1159c7b0b130d01fac933f71a99ad96

* commit '6640b107':
  Add API to check certificate chain signatures

* commit 'f8986a98':
  Add API to check certificate chain signatures

Add hidden API to check certificate chain signatures when needed. The
getCertificates implementation returns a list of all the certificates and
chains and would expect any caller interested in verifying actual chains
to call getCodeSigners instead.

We add this hidden constructor as a stop-gap until we can switch callers
over to getCodeSigners.

Bug: 13678484
Change-Id: I6ad8a168adf6a33b9155f416ed22852ded221382

* commit '62d722a2':
  Delete test that depends on an external server.

* commit '668ba674':
  Delete test that depends on an external server.

* commit '8ebfe8fb':
  Delete test that depends on an external server.

This is correctly tested in libcore.java.net.URLConnectionTest
so there's no need for a badly written duplicate test.

bug: 12864018

(cherry picked from commit 4dd52688)

Change-Id: I0016298b8970bb937900a8e39aca2f4f252a7a1c

am 23b3ea3a: am e496d90d: am cef32f3b: Merge "SSLEngine: Test that server params are verified" into jb-dev

* commit '23b3ea3a':
  SSLEngine: Test that server params are verified

* commit 'e496d90d':
  SSLEngine: Test that server params are verified

* commit 'cef32f3b':
  SSLEngine: Test that server params are verified

* commit '7f1b2d5d':
  SSLEngine: Verify server RSA params signature

* commit '6da3c4a6':
  SSLEngine: Verify server RSA params signature

* commit 'ef6e14e8':
  SSLEngine: Verify server RSA params signature

This CL adds tests that check that SSLEngine's handshake fails if the
signature of server params in ServerKeyExchange does not verify.

Bug: 11631299
Change-Id: I16dfa9c07a4f094adc17aadd6fb3fe9eac88103b

The client did not verify the signature of server's RSA params in
ServerKeyExchange.

Bug: 11631299
Change-Id: I64b93ea2caf6da100661303c4e7f7e7eff1ae536

* commit '74e97557':
  SSLEngine: verify DHE signature

* commit 'db219623':
  SSLEngine: verify DHE signature