Re: broken references in jar manifests

[julien lepiller]

Le 2018-03-20 11:28, Danny Milosavljevic a écrit :
> (1) How about adding another file to the META-INF directory which is 
> just
> like manifest - just without the line breaks?
>
> That could even be automated.
>
> (2) Also, "jar -i" calculates an index for where which package is
> ("INDEX.LIST").
> Is that also hard-word-wrapped?  The specification
> https://docs.oracle.com/javase/7/docs/technotes/guides/jar/jar.html#JAR%20Index
> only mentions the 72 Byte limit for "manifest and signature files" and
> then specifies
> Index File Specification separately.
>
> Either would be good enough for the GC retaining the deps, right?

The issue is with grafts here: the plain file with full reference to the 
store
gets grafted and contains the new entry. The Manifest will not be 
updated because
of line breaks, and Java will still look for the version in the 
manifest. The GC
will collect it because it doesn't see any reference to the old version 
in any
file (because of line breaks), and the package is broken.