1. 28 Apr, 2020 1 commit
    • Phillip Webb's avatar
      Backport "Attempt to prevent JarFiles from being left open" · 50e96746
      Phillip Webb authored
      Update `JarFile` so that `super.close()` is called early so that the
      file is not left open. Since we re-implement `JarFile` methods to work
      directly on the underlying `RandomAccessDataFile`, it should be safe
      to close immediately.
      
      Closes gh-21177
      50e96746
  2. 27 Apr, 2020 32 commits
  3. 23 Apr, 2020 3 commits
  4. 22 Apr, 2020 3 commits
  5. 21 Apr, 2020 1 commit
    • Phillip Webb's avatar
      Create new JarFile instance for URL connections · c85918b8
      Phillip Webb authored
      Update `JarURLConnection` to ensure that when connections are opened
      a new copy of the JarFile is provided.
      
      Prior to this commit, a single `JarFile` instance was shared which meant
      that it could be accidental closed if accessed via
      `JarURLConnection.getJarFile()`. If the underlying jar file is closed
      then it's possible for a `NoClassDefFoundError` to be thrown if running
      on JDK 11 with an active `SecurityManager`.
      
      Closes gh-17796
      c85918b8