diff options
| author | Tobias Thierer <tobiast@google.com> | 2017-06-07 16:21:48 +0100 |
|---|---|---|
| committer | Tobias Thierer <tobiast@google.com> | 2017-06-07 17:24:24 +0100 |
| commit | 3d880200d1507c7691931356efaf83f125a6c6e5 (patch) | |
| tree | 9d03336342f5c960341d08bd7a44e88976e98b60 /annotations/generate_annotated_java_files.py | |
| parent | f9c3731a47547a43693f650b4238607a22a08ac9 (diff) | |
Un-stub CodeSource.getLocation().
CodeSource is part of legacy security code that is stubbed on Android.
However, since Android N, internal code (JarVerifier, URLClassLoader,
JceSecurity) calls CodeSource.getLocation().
That code comes from OpenJDK and was written under the assumption that
getLocation() returns the URL passed to the constructor, as opposed to
null. While no concrete bug is known to be a result of this, it seems
more likely that the stubbed behavior than the upstream behavior will
trigger (unknown) bugs.
This CL changes the implementation of CodeSource.getLocation() to be
consistent with upstream. The remainder of the class (getCertificates(),
getCodeSigners(), serialVersionUID, equals() and hashCode()) are not
currently used by the Android platform and remain stubbed.
The documentation warning against use of the class remains in place.
Bug: 37380202
Test: CtsLibcoreTestCases
Change-Id: Ib82e9e48e76a036f3eb3011b8f1cdf0a55979ab5
Diffstat (limited to 'annotations/generate_annotated_java_files.py')
0 files changed, 0 insertions, 0 deletions