0006495: classloader cannot lookup directories within some jars - Mantis

Mantis Bugtracker

Viewing Issue Simple Details [ Jump to Notes ]

[ View Advanced ] [ Issue History ] [ Print ]

ID

Category

Severity

Reproducibility

Date Submitted

Last Update

0006495

[Resin]

minor

always

02-21-25 17:26

02-21-25 17:44

Reporter

nam

View Status

public

Assigned To

nam

Priority

normal

Resolution

open

Status

assigned

Product Version

4.0.67

Summary

0006495: classloader cannot lookup directories within some jars

Description

(rep by Y. Suzuki)

The following would return null for certain JARs:

Thread.currentThread().getContextClassLoader().getResources("META-INF")

It would fail if the 29th byte from the end of the jar is the value 'P'. This means there is a 1/256 chance that the jar would be affected.

Additional Information

Relationships

Notes
(0007339) nam 02-21-25 17:44	This bug happens when Resin is checking for PACK200 header bytes. Resin thinks it's a bad jar so it falls back to Java's jar reader. But when falling back, Resin fails to normalize and remove the trailing slash from the directory names. PACK200 is deprecated per https://openjdk.org/jeps/367. [^] The following snapshot build removes PACK200 checking from Resin's internal jar reader: https://www.caucho.com/download/snapshot/resin-pro-4.0.s250221.tar.gz [^] https://www.caucho.com/download/snapshot/resin-pro-4.0.s250221.zip [^] The snapshot fixes the bug for regular jars, but PACK200 jars should still have this issue.

Issue History
Date Modified	Username	Field	Change
02-21-25 17:26	nam	New Issue
02-21-25 17:26	nam	Status	new => assigned
02-21-25 17:26	nam	Assigned To	=> nam
02-21-25 17:44	nam	Note Added: 0007339

Mantis 1.0.0rc3[^]

Copyright © 2000 - 2005 Mantis Group

28 total queries executed.
25 unique queries executed.