JDK-8225748 : Use SHA-256 for javap classfile checksum
  • Type: Bug
  • Component: tools
  • Sub-Component: javap
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2019-06-13
  • Updated: 2020-06-01
  • Resolved: 2019-06-18
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 13 JDK 14
13Fixed 14 b02Fixed
Related Reports
CSR :  
Sub Tasks
JDK-8225811 :  
Description
javap uses MD5 as a checksum for some classfile information. Since this is just a file checksum it should not be a security issue, but it is better to use something stronger and more modern like SHA-256.
Comments
Similar occurrence in javac
14-06-2019