hg: jdk/sandbox: Add bounds check for output length in HKDF expand operation

jamil.j.nimeh at oracle.com jamil.j.nimeh at oracle.com
Wed May 30 18:37:10 UTC 2018


Changeset: d66751750b72
Author:    jnimeh
Date:      2018-05-30 11:36 -0700
URL:       http://hg.openjdk.java.net/jdk/sandbox/rev/d66751750b72

Add bounds check for output length in HKDF expand operation
Summary: Make the HKDF expand operation conform to the specification by limiting the allowed output length.

! src/java.base/share/classes/sun/security/ssl/HKDF.java



More information about the jdk-sandbox-changes mailing list