summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Add additional checks in ObjectInputStreamreplicant-4.2-0004replicant-4.2Neil Fuller2015-08-304-21/+349
| | | | | | | | | | | | | | | | | | | | | | | | | | | Thanks to Jann Horn for reporting a bug in ObjectInputStream and sending the initial patch. Add some checks that the class of an object being deserialized still conforms to the requirements for serialization. Add some checks that the class being deserialized matches the type information (enum, serializable, externalizable) held in the stream. Delayed static initialization of classes until the type of the class has been validated against the stream content in some cases. Added more tests. Bug: 15874291 (cherry picked from commit 738c833d38d41f8f76eb7e77ab39add82b1ae1e2) Change-Id: I9f5437ed60936882de56589537176466624e631d Signed-off-by: Neil Fuller <nfuller@google.com> Tested-by: Moritz Bandemer <replicant@posteo.mx>
* cacerts: CaCert Root CA and Class 3 CAreplicant-4.2-0003Paul Kocialkowski2014-11-292-0/+286
| | | | | Change-Id: I073e2d0d697093502dbb6e5813fc9a129b7cb7c1 Signed-off-by: Paul Kocialkowski <contact@paulk.fr>
* Add API to check certificate chain signaturesKenny Root2014-11-163-9/+63
| | | | | | | | | | | | | Add hidden API to check certificate chain signatures when needed. The getCertificates implementation returns a list of all the certificates and chains and would expect any caller interested in verifying actual chains to call getCodeSigners instead. We add this hidden constructor as a stop-gap until we can switch callers over to getCodeSigners. Bug: 13678484 Change-Id: I01cddef287767422454de4c5fd266c812a04d570
* Bumper ZipFile/ZipEntry backport.Elliott Hughes2014-11-163-31/+68
| | | | | | | | | | | | Bug: https://code.google.com/p/android/issues/detail?id=58465 Bug: 8219321 Bug: 8476102 Bug: 8617715 Bug: 9695860 Bug: 9950697 Bug: 10148349 Bug: 10227498 Change-Id: I94c3e9664a429c94c336115618a46283a13996e0
* Add a way to get all values of an attribute of DN.Alex Klyubin2014-11-161-0/+70
| | | | | | | | | This is needed to switch Apache HTTP hostname verification from its own Distinguished Name (DN) parsing code to this library's DistinguishedNameParser. Bug: 16510257 Change-Id: Iedd27cec162167dad11a4fe477d4eaa3eba004b7
* Should favor most specific CN when working with distinguished namesBrian Carlstrom2014-11-162-22/+24
| | | | | | | | | This reverts a regression introduced in commit 1331404bf45cb2f220ee9aa2c0c108ce59453a74 that was caught by tests.api.javax.net.ssl.HostnameVerifierTest.testVerify Bug: 7894348 Bug: http://code.google.com/p/android/issues/detail?id=41662 Change-Id: Iec8000b716e3d99ca7af4aa2c3fd7b43e22c68cd
* Should favor last CN when working with distinguished namesBrian Carlstrom2014-11-164-41/+68
| | | | | | Bug: 7894348 Bug: http://code.google.com/p/android/issues/detail?id=41662 Change-Id: I3814d653b628f6af12ce1ba59b39b1c7cc45e124
* Do not apply the PRNG workarounds if an explicit seed is givenRicardo Cerqueira2013-09-072-15/+34
| | | | | | | | | | If the caller seeds the engine, do NOT override that seed with another from urandom. This is a companion change to Ib6bf4478fc1ae3d16eefa4eb2ad90f1f3e9de021, and should be reverted along with it when the proper fix appears. Change-Id: I0a9ba35d74af89c91b6aafa35cc94001372794e1
* Apply a variation of the suggested app-level patch to SecureRandomRicardo Cerqueira2013-09-042-1/+203
| | | | | | | | http://android-developers.blogspot.pt/2013/08/some-securerandom-thoughts.html for more details. This isn't an ideal solution, but until a proper patch comes up it'll do Change-Id: Ib6bf4478fc1ae3d16eefa4eb2ad90f1f3e9de021
* Values in ZIP files are unsigned.Elliott Hughes2013-07-122-9/+9
| | | | | Bug: 9695860 Change-Id: I5c12dc5f3c70a9fe081adf5bf5b6b4b3a115e7e1
* Only enforce the encrypted bit in the GPBF, and ignore other unsupported bits.William Luh2013-07-123-5/+15
| | | | | | | (cherry-pick of 7a302a49a7c8b99e2f34fff660e199fb7c776bc1.) Bug: 8617715 Change-Id: Ibfe919d67fd17cee050d23811faa5aa64116dfb4
* Don't install APK files with unsupported General Purpose Bit Flag bits.William Luh2013-07-123-6/+30
| | | | | | | | Bug: 8476102 Change-Id: I764c2aec944558129c8ac04ee0593fb3de82870e Conflicts: luni/src/main/java/java/util/zip/ZipFile.java
* Clean up ZipFile a little, fix a few bugs, and improve the documentation.Elliott Hughes2013-07-126-245/+471
| | | | | | | | | | | | | | | | | | | | The main bug fixed is fixing support for .zip files larger than 2GiB (where the central directory offset's top bit is set). We were checking character counts rather than byte counts in several places too, which could lead to corrupt zip files. I've also added a comment to readCentralDirectory because I keep coming back to this code, wanting to make it lazy, and never remember (until I've done half the work) why that's not possible. I've also clarified a lot of the documentation. Bug: http://code.google.com/p/android/issues/detail?id=36187 Change-Id: Iaa8eadc501ead7c70528bd9063d5893a325dcea1 Conflicts: luni/src/main/java/java/util/zip/ZipFile.java
* Add detail messages to all the easy IllegalArgumentException cases.Elliott Hughes2013-07-1257-193/+189
| | | | | | Noticed during my recent Matcher change. Change-Id: I415d911b26d0ee548ca04d56bba7fc3d4e6b3f88
* Revert "Values in ZIP files are unsigned."Ricardo Cerqueira2013-07-122-7/+7
| | | | This reverts commit fb94a6abf82e5822b492f7d6a49c5da8c3317aeb.
* Values in ZIP files are unsigned.Elliott Hughes2013-07-112-7/+7
| | | | | Bug: 9695860 Change-Id: I5c12dc5f3c70a9fe081adf5bf5b6b4b3a115e7e1
* Remove support for duplicate file entriesGeremy Condra2013-07-072-1/+68
| | | | | Bug: 8219321 Change-Id: Ibc56bea753917c38e1bb20df48aa45fdff39d364
* libcore: Better Enum fix for JDK 7Steve Kondik2013-03-201-2/+2
| | | | | | | * Jerome Pilliet suggests using a cast in the compareTo method instead of changing the field visibility. This is a much better fix. Change-Id: I334105e0922225512a4d0a2d4b6c9c6ec71b9c51
* GC triggering performance optimizationsWei Wang2013-02-221-0/+31
| | | | | | | Copy the correct starting heap size at process init. Interfaces to set GC/managed heap parameters. Change-Id: If0b1637291e77f9781ae6249c5d0257f659253ca
* Merge tag 'android-4.2.2_r1' of ↵Steve Kondik2013-02-121-19/+39
|\ | | | | | | | | | | https://android.googlesource.com/platform/libcore into 1.1 Android 4.2.2 release 1
| * merge in jb-mr1.1-release history after reset to jb-mr1.1-devThe Android Automerger2012-11-190-0/+0
| |\
| | * merge in jb-mr1.1-release history after reset to jb-mr1.1-devThe Android Automerger2012-11-060-0/+0
| | |\
| * | | Lazy parsing of zip files for Java resources.Narayan Kamath2012-11-131-19/+39
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Central directories of zip files should be read lazily. They are needed only to service calls to BaseDexClassLoader#findResouce(s). Most android processes don't use these methods since they use android resources. bug:6797061 Change-Id: I1a5b5d03572601707e1fb1fd4424c1ae2fd2217d
| | | |
| | \ \
| *-. \ \ Reconcile with jb-mr1-factory-release jb-mr1-release - do not mergeThe Android Open Source Project2012-11-060-0/+0
| |\ \ \ \ | | |_|/ / | |/| | | | | | | | Change-Id: I1e5f377e655f72b8d2e497e83cf4207f5b786e01
| | * | | merge in jb-mr1-factory-release history after reset to jb-mr1-devThe Android Automerger2012-10-150-0/+0
| | |\ \ \
| | | * \ \ merge in jb-mr1-factory-release history after reset to jb-mr1-devThe Android Automerger2012-10-120-0/+0
| | | |\ \ \
| | | | * \ \ merge in jb-mr1-factory-release history after reset to jb-mr1-devThe Android Automerger2012-10-110-0/+0
| | | | |\ \ \
* | | | | | | | Fix compilation of Enum on JDK 7Steve Kondik2013-01-091-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change-Id: I2e58b6a527e4ef1fc7ed3359b8aea88d01a031fb
* | | | | | | | Merge branch 'jb-mr1-release' of ↵Steve Kondik2012-11-18445-7465/+20324
|\ \ \ \ \ \ \ \ | | |_|_|_|_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | https://android.googlesource.com/platform/libcore into mr1 Change-Id: I19ebeda37b4c3efa42f91ceb5d366ddccd699249
| * | | | | | | merge in jb-mr1-release history after reset to jb-mr1-devThe Android Automerger2012-11-020-0/+0
| |\ \ \ \ \ \ \ | | |/ / / / / / | |/| | | | | / | | | |_|_|_|/ | | |/| | | |
| | * | | | | merge in jb-mr1-release history after reset to jb-mr1-devThe Android Automerger2012-11-010-0/+0
| | |\ \ \ \ \
| | | * \ \ \ \ merge in jb-mr1-release history after reset to jb-mr1-devThe Android Automerger2012-10-200-0/+0
| | | |\ \ \ \ \
| | | | * \ \ \ \ merge in jb-mr1-release history after reset to jb-mr1-devThe Android Automerger2012-10-170-0/+0
| | | | |\ \ \ \ \
| | | | | * \ \ \ \ merge in jb-mr1-release history after reset to jb-mr1-devThe Android Automerger2012-10-160-0/+0
| | | | | |\ \ \ \ \
| | | | | | * \ \ \ \ merge in jb-mr1-release history after reset to jb-mr1-devThe Android Automerger2012-10-160-0/+0
| | | | | | |\ \ \ \ \
| | | | | | | * \ \ \ \ merge in jb-mr1-release history after reset to jb-mr1-devThe Android Automerger2012-10-130-0/+0
| | | | | | | |\ \ \ \ \ | | | | | | | | |/ / / / | | | | | | | |/| | | |
| | | | | | | | * | | | merge in jb-mr1-release history after reset to jb-mr1-devThe Android Automerger2012-10-110-0/+0
| | | | | | | | |\ \ \ \ | | | | | | | | | |/ / / | | | | | | | | |/| | |
| | | | | | | | | * | | merge in jb-mr1-release history after reset to jb-mr1-devThe Android Automerger2012-10-110-0/+0
| | | | | | | | | |\ \ \ | | | | | | | | | | |/ / | | | | | | | | | |/| |
| | | | | | | | | | * | merge in jb-mr1-release history after reset to jb-mr1-devThe Android Automerger2012-10-100-0/+0
| | | | | | | | | | |\ \ | | | | | | | | | | | |/
| | | | | | | | | | | * merge in jb-mr1-release history after reset to jb-mr1-devThe Android Automerger2012-10-090-0/+0
| | | | | | | | | | | |\
| | | | | | | | | | | | * merge in jb-mr1-release history after reset to jb-mr1-devThe Android Automerger2012-10-070-0/+0
| | | | | | | | | | | | |\
| | | | | | | | | | | | | * merge in jb-mr1-release history after reset to jb-mr1-devThe Android Automerger2012-10-040-0/+0
| | | | | | | | | | | | | |\
| | | | | | | | | | | | | | * merge in jb-mr1-release history after reset to jb-mr1-devThe Android Automerger2012-10-010-0/+0
| | | | | | | | | | | | | | |\
| | | | | | | | | | | | | | | * merge in jb-mr1-release history after reset to jb-mr1-devThe Android Automerger2012-09-260-0/+0
| | | | | | | | | | | | | | | |\
| | | | | | | | | | | | | | | | * merge in jb-mr1-release history after reset to jb-mr1-devThe Android Automerger2012-09-250-0/+0
| | | | | | | | | | | | | | | | |\
| | | | | | | | | | | | | | | | | * merge in jb-mr1-release history after reset to jb-mr1-devThe Android Automerger2012-09-250-0/+0
| | | | | | | | | | | | | | | | | |\
| | | | | | | | | | | | | | | | | | * merge in jb-mr1-release history after reset to jb-mr1-devThe Android Automerger2012-09-230-0/+0
| | | | | | | | | | | | | | | | | | |\
| | | | | | | | | | | | | | | | | | | * merge in jb-mr1-release history after reset to jb-mr1-devThe Android Automerger2012-09-220-0/+0
| | | | | | | | | | | | | | | | | | | |\
| | | | | | | | | | | | | | | | | | | | * merge in jb-mr1-release history after reset to jb-mr1-devThe Android Automerger2012-09-210-0/+0
| | | | | | | | | | | | | | | | | | | | |\
| | | | | | | | | | | | | | | | | | | | | * merge in jb-mr1-release history after reset to jb-mr1-devThe Android Automerger2012-09-200-0/+0
| | | | | | | | | | | | | | | | | | | | | |\
generated by cgit v1.1 at 2024-05-14 13:14:12 +0000