RFR 8068720: ArrayIndexOutOfBoundsException in JSSE with NetscapeCertType "SSL client"

Michael StJohns mstjohns at comcast.net
Wed Jan 28 21:24:01 UTC 2015


Not critical and more work, but maybe just update this to use java.util.BitSet?

Mike


At 04:04 PM 1/28/2015, Ivan Gerasimov wrote:
>Hello!
>
>Behavior of sun.security.x509.NetscapeCertTypeExtension turns out to be inconsistent.
>It greatly depends on the order in which the entries are set/retrieved.
>
>The inconsistency is illustrated in the regression test:
>
>While these two lines work fine,
>
>  38         ext1.set(SSL_SERVER, true);
>  39         ext1.get(SSL_CLIENT);
>
>next two lines result in AIOOBEx:
>
>  43         ext2.set(SSL_CLIENT, true);
>  44         ext2.get(SSL_SERVER);
>
>
>
>The fix is trivial.
>Would you please help review it?
>
>BUGURL: https://bugs.openjdk.java.net/browse/JDK-8068720
>WEBREV: http://cr.openjdk.java.net/~igerasim/8068720/0/webrev/
>
>
>Sincerely yours,
>Ivan





More information about the security-dev mailing list