Nested and Inner Type Summary

Modifier and Type	Class and Description
pack-priv static class	JarVerifier.VerifierStream

Field Summary

Modifier and Type	Field and Description
private boolean	anyToVerify
private ByteArrayOutputStream	baos
pack-priv static final Debug	debug
private volatile ManifestDigester	manDig The ManifestDigester object
private List<Object>	manifestDigests collect -DIGEST-MANIFEST values for deny list
pack-priv final String	manifestName the manifest name this JarVerifier is created upon
pack-priv byte[]	manifestRawBytes the bytes for the manDig object
public static final String	MULTIPLE_MANIFEST_WARNING
private boolean	parsingBlockOrSF
private boolean	parsingMeta
private ArrayList<SignatureFileVerifier>	pendingBlocks "queue" of pending PKCS7 blocks that we couldn't parse until we parsed the .SF file
private Hashtable<String, byte[]>	sigFileData
private Hashtable<String, CodeSigner[]>	sigFileSigners
private List<CodeSigner[]>	signerCache
private Map<CodeSigner[], Map<String, Boolean>>	signersToAlgs
private Hashtable<String, CodeSigner[]>	verifiedSigners

Access	Constructor and Description
public	JarVerifier(String name, byte[] rawBytes)

Method Summary

Modifier and Type	Method and Description
public void	beginEntry(JarEntry je, ManifestEntryVerifier mev) This method scans to see which entry we're parsing and keeps various state information depending on what type of file is being parsed.
pack-priv void	doneWithMeta() called to let us know we have processed all the META-INF entries, and if we re-read one of them, don't re-process it.
public Certificate[]	getCerts(JarEntry entry) Return an array of Certificate objects for the given file in the jar.
public CodeSigner[]	getCodeSigners(JarEntry entry) return an array of CodeSigner objects for the given file in the jar.
pack-priv boolean	isTrustedManifestEntry(String name) Returns whether the name is trusted.
private static Certificate[]	mapSignersToCertArray(CodeSigner[] signers)
pack-priv boolean	nothingToVerify() returns true if there no files to verify.
private void	processEntry(ManifestEntryVerifier mev) called when we reach the end of entry in one of the read() methods.
public void	update(int b, ManifestEntryVerifier mev) update a single byte.
public void	update(int n, byte[] b, int off, int len, ManifestEntryVerifier mev) update an array of bytes.

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

anyToVerify	back to summary
private boolean anyToVerify

baos	back to summary
private ByteArrayOutputStream baos

debug	back to summary
pack-priv static final Debug debug

manDig	back to summary
private volatile ManifestDigester manDig The ManifestDigester object

manifestDigests	back to summary
private List<Object> manifestDigests collect -DIGEST-MANIFEST values for deny list

manifestName	back to summary
pack-priv final String manifestName the manifest name this JarVerifier is created upon

manifestRawBytes	back to summary
pack-priv byte[] manifestRawBytes the bytes for the manDig object

MULTIPLE_MANIFEST_WARNING	back to summary
public static final String MULTIPLE_MANIFEST_WARNING

parsingBlockOrSF	back to summary
private boolean parsingBlockOrSF

parsingMeta	back to summary
private boolean parsingMeta

pendingBlocks	back to summary
private ArrayList<SignatureFileVerifier> pendingBlocks "queue" of pending PKCS7 blocks that we couldn't parse until we parsed the .SF file

sigFileData	back to summary
private Hashtable<String, byte[]> sigFileData

sigFileSigners	back to summary
private Hashtable<String, CodeSigner[]> sigFileSigners

signerCache	back to summary
private List<CodeSigner[]> signerCache

signersToAlgs	back to summary
private Map<CodeSigner[], Map<String, Boolean>> signersToAlgs

verifiedSigners	back to summary
private Hashtable<String, CodeSigner[]> verifiedSigners

JarVerifier	back to summary
public JarVerifier(String name, byte[] rawBytes)

Method Detail

beginEntry	back to summary
public void beginEntry(JarEntry je, ManifestEntryVerifier mev) throws IOException This method scans to see which entry we're parsing and keeps various state information depending on what type of file is being parsed.

doneWithMeta	back to summary
pack-priv void doneWithMeta() called to let us know we have processed all the META-INF entries, and if we re-read one of them, don't re-process it. Also gets rid of any data structures we needed when parsing META-INF entries.

getCerts	back to summary
public Certificate[] getCerts(JarEntry entry) Return an array of Certificate objects for the given file in the jar.

getCodeSigners	back to summary
public CodeSigner[] getCodeSigners(JarEntry entry) return an array of CodeSigner objects for the given file in the jar. this array is not cloned.

isTrustedManifestEntry	back to summary
pack-priv boolean isTrustedManifestEntry(String name) Returns whether the name is trusted. Used by `Manifest#getTrustedAttributes(String)`.

mapSignersToCertArray	back to summary
private static Certificate[] mapSignersToCertArray(CodeSigner[] signers)

nothingToVerify	back to summary
pack-priv boolean nothingToVerify() returns true if there no files to verify. should only be called after all the META-INF entries have been processed.

processEntry	back to summary
private void processEntry(ManifestEntryVerifier mev) throws IOException called when we reach the end of entry in one of the read() methods.

update	back to summary
public void update(int b, ManifestEntryVerifier mev) throws IOException update a single byte.

update	back to summary
public void update(int n, byte[] b, int off, int len, ManifestEntryVerifier mev) throws IOException update an array of bytes.

java.util.jar back to summary

pack-priv Class JarVerifier.VerifierStream

Class Inheritance

extends InputStream

java.lang.Object
java.io.InputStream
java.util.jar.JarVerifier.VerifierStream

Field Summary

Modifier and Type	Field and Description
private InputStream	is
private JarVerifier	jv
private ManifestEntryVerifier	mev
private long	numLeft

Constructor Summary

Access	Constructor and Description
pack-priv	VerifierStream(Manifest man, JarEntry je, InputStream is, JarVerifier jv)

Method Summary

Modifier and Type	Method and Description
public int	available() Overrides java.io.InputStream.available. Returns an estimate of the number of bytes that can be read (or skipped over) from this input stream without blocking, which may be 0, or 0 when end of stream is detected.
public void	close() Overrides java.io.InputStream.close. Implements java.io.Closeable.close. Closes this input stream and releases any system resources associated with the stream.
private void	ensureOpen()
public int	read() Implements abstract java.io.InputStream.read. Reads the next byte of data from the input stream.
public int	read(byte[] b, int off, int len) Overrides java.io.InputStream.read. Reads up to `len` bytes of data from the input stream into an array of bytes.

Inherited from java.io.InputStream:: mark markSupported nullInputStream read readAllBytes readNBytes readNBytes reset skip skipNBytes transferTo

Field Detail

is	back to summary
private InputStream is

jv	back to summary
private JarVerifier jv

mev	back to summary
private ManifestEntryVerifier mev

numLeft	back to summary
private long numLeft

Constructor Detail

VerifierStream	back to summary
pack-priv VerifierStream(Manifest man, JarEntry je, InputStream is, JarVerifier jv) throws IOException

Method Detail

available back to summary

available	back to summary
public int available() throws IOException Overrides java.io.InputStream.available. Doc from java.io.InputStream.available. Returns an estimate of the number of bytes that can be read (or skipped over) from this input stream without blocking, which may be 0, or 0 when end of stream is detected. The read might be on the same thread or another thread. A single read or skip of this many bytes will not block, but may read or skip fewer bytes. Note that while some implementations of `InputStream` will return the total number of bytes in the stream, many will not. It is never correct to use the return value of this method to allocate a buffer intended to hold all data in this stream. A subclass's implementation of this method may choose to throw an `IOException` if this input stream has been closed by invoking the `close()` method. Exceptions IOException: if an I/O error occurs.

public int available() throws IOException

Overrides java.io.InputStream.available.

Doc from java.io.InputStream.available.

Returns an estimate of the number of bytes that can be read (or skipped over) from this input stream without blocking, which may be 0, or 0 when end of stream is detected. The read might be on the same thread or another thread. A single read or skip of this many bytes will not block, but may read or skip fewer bytes.

Note that while some implementations of InputStream will return the total number of bytes in the stream, many will not. It is never correct to use the return value of this method to allocate a buffer intended to hold all data in this stream.

A subclass's implementation of this method may choose to throw an IOException if this input stream has been closed by invoking the close() method.

Exceptions

IOException:: if an I/O error occurs.

close	back to summary
public void close() throws IOException Overrides java.io.InputStream.close. Implements java.io.Closeable.close. Doc from java.io.InputStream.close. Closes this input stream and releases any system resources associated with the stream. Exceptions IOException: if an I/O error occurs.

back to summary

public void close() throws IOException

Overrides java.io.InputStream.close.

Implements java.io.Closeable.close.

Doc from java.io.InputStream.close.

Closes this input stream and releases any system resources associated with the stream.

Exceptions

IOException:: if an I/O error occurs.

ensureOpen	back to summary
private void ensureOpen() throws IOException

read back to summary

read	back to summary
public int read() throws IOException Implements abstract java.io.InputStream.read. Doc from java.io.InputStream.read. Reads the next byte of data from the input stream. The value byte is returned as an `int` in the range `0` to `255`. If no byte is available because the end of the stream has been reached, the value `-1` is returned. This method blocks until input data is available, the end of the stream is detected, or an exception is thrown. Exceptions IOException: if an I/O error occurs.

public int read() throws IOException

Implements abstract java.io.InputStream.read.

Doc from java.io.InputStream.read.

Reads the next byte of data from the input stream. The value byte is returned as an int in the range 0 to 255. If no byte is available because the end of the stream has been reached, the value -1 is returned. This method blocks until input data is available, the end of the stream is detected, or an exception is thrown.

Exceptions

IOException:: if an I/O error occurs.

read back to summary

read	back to summary
public int read(byte[] b, int off, int len) throws IOException Overrides java.io.InputStream.read. Doc from java.io.InputStream.read. Reads up to `len` bytes of data from the input stream into an array of bytes. An attempt is made to read as many as `len` bytes, but a smaller number may be read. The number of bytes actually read is returned as an integer. This method blocks until input data is available, end of file is detected, or an exception is thrown. If `len` is zero, then no bytes are read and `0` is returned; otherwise, there is an attempt to read at least one byte. If no byte is available because the stream is at end of file, the value `-1` is returned; otherwise, at least one byte is read and stored into `b`. The first byte read is stored into element `b[off]`, the next one into `b[off+1]`, and so on. The number of bytes read is, at most, equal to `len`. Let k be the number of bytes actually read; these bytes will be stored in elements `b[off]` through `b[off+`k`-1]`, leaving elements `b[off+`k`]` through `b[off+len-1]` unaffected. In every case, elements `b[0]` through `b[off-1]` and elements `b[off+len]` through `b[b.length-1]` are unaffected. Exceptions IOException: If the first byte cannot be read for any reason other than end of file, or if the input stream has been closed, or if some other I/O error occurs.

public int read(byte[] b, int off, int len) throws IOException

Overrides java.io.InputStream.read.

Doc from java.io.InputStream.read.

Reads up to len bytes of data from the input stream into an array of bytes. An attempt is made to read as many as len bytes, but a smaller number may be read. The number of bytes actually read is returned as an integer.

This method blocks until input data is available, end of file is detected, or an exception is thrown.

If len is zero, then no bytes are read and 0 is returned; otherwise, there is an attempt to read at least one byte. If no byte is available because the stream is at end of file, the value -1 is returned; otherwise, at least one byte is read and stored into b.

The first byte read is stored into element b[off], the next one into b[off+1], and so on. The number of bytes read is, at most, equal to len. Let k be the number of bytes actually read; these bytes will be stored in elements b[off] through b[off+k-1], leaving elements b[off+k] through b[off+len-1] unaffected.

In every case, elements b[0] through b[off-1] and elements b[off+len] through b[b.length-1] are unaffected.

Exceptions

IOException:: If the first byte cannot be read for any reason other than end of file, or if the input stream has been closed, or if some other I/O error occurs.