ibmruntimes / openj9-openjdk-jdk11

Extensions for OpenJDK 11 for Eclipse OpenJ9
GNU General Public License v2.0
31 stars 112 forks source link

Ensure static fields set during signed jar process #809

Closed jasonkatonica closed 1 month ago

jasonkatonica commented 1 month ago

When loading a signed jar file that is on the classpath, such as the bouncy castle signed JCE jar file, it has been observed that the value of restrictedJarVerificationProviders and jarVerificationProviders are set to null. This causes a NullPointerException during the loading process.

This update moves the static declarations of both restrictedJarVerificationProviders and jarVerificationProviders to be prior to the method call RestrictedSecurity.checkHashValues() since this method call needs both of these fields to be initialized to work correctly.

Signed-off-by: Jason Katonica katonica@us.ibm.com