RFR: 8253829: Wrong length compared in SSPI bridge
Valerie Peng
valeriep at openjdk.java.net
Wed Sep 30 17:16:28 UTC 2020
On Wed, 30 Sep 2020 02:59:40 GMT, Weijun Wang <weijun at openjdk.org> wrote:
> For two principals to be the same, they are either all "user at R", or one is "user" and the other is "user at R". The check
> here wants to fail early if the length are different. "l" is the whole length and "r" is the length of the name
> (without realm). The comparison should be reflective but there is a typo. For example, for "user at R" and "user", l1 =
> 6, l2 = 4, r1 = 4, r2 = 4, the check will succeed and the names are treated as different. This is not the expected
> behavior. No regression test because we don't support SSPI testing in the OpenJDK repo now.
Marked as reviewed by valeriep (Reviewer).
-------------
PR: https://git.openjdk.java.net/jdk/pull/419
More information about the core-libs-dev
mailing list