[Android-tools-devel] Bug#925320: Bug#925320: Acknowledgement (android-platform-tools-apksig: apksigner fails to run on OpenJDK 8 due to UnsupportedClassVersionError)

[Tiago Daitx]

On Thu, Mar 28, 2019 at 7:24 AM Hans-Christoph Steiner <hans at eds.org> wrote:
>
>
> The "--release 8" fix seems fine, my only concern is that someone needs
> to test this, since it is different than what upstream does.  I suppose
> that the autopkgtest is complete enough to test this.  I'm not really
> aware of whether there are security concerns of compiling with different
> source/target/release versions.  Do you know?
>
> .hc

I am also not aware of any security issues related to providing
backwards compatibility for compiled java classes. The --release flag
(and the -source/-target pair) is and has been used on other packages
for quite some time so there are no known drawbacks of using it, on
the contrary, they are required so we can provide java 8 bytecode when
compiling with a java 9+ compiler.

Regards,
Tiago