code review request, CR 7166487 checkSequenceNumber method never called within readRecord of SSLEngineImpl

Xuelei Fan xuelei.fan at oracle.com
Sat May 5 15:06:05 UTC 2012


Hi,

Please review the fix for JSSE TLS/SSL records' sequence number wrap issue.

webrev: http://javaweb.us.oracle.com/~xufan/bugbios/7166487/webrev.00/

Cause of the issue: did not update the handshaking status before the
sequence number checking.

Thanks,
Xuelei



More information about the security-dev mailing list