diff options
| -rw-r--r-- | luni/src/main/java/java/util/jar/StrictJarFile.java | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/luni/src/main/java/java/util/jar/StrictJarFile.java b/luni/src/main/java/java/util/jar/StrictJarFile.java index 0a8eaa2..a73ca2a 100644 --- a/luni/src/main/java/java/util/jar/StrictJarFile.java +++ b/luni/src/main/java/java/util/jar/StrictJarFile.java @@ -24,6 +24,7 @@ import java.io.RandomAccessFile; import java.security.cert.Certificate; import java.util.HashMap; import java.util.Iterator; +import java.util.Set; import java.util.zip.Inflater; import java.util.zip.ZipEntry; import java.util.zip.ZipFile; @@ -64,6 +65,12 @@ public final class StrictJarFile { HashMap<String, byte[]> metaEntries = getMetaEntries(); this.manifest = new Manifest(metaEntries.get(JarFile.MANIFEST_NAME), true); this.verifier = new JarVerifier(fileName, manifest, metaEntries); + Set<String> files = this.manifest.getEntries().keySet(); + for (String file : files) { + if (findEntry(file) == null) { + throw new SecurityException(fileName + ": File " + file + " in manifest does not exist"); + } + } isSigned = verifier.readCertificates() && verifier.isSignedJar(); } catch (IOException | SecurityException e) { |