[jdk9] RFR: 8163896: Finalizing one key of a KeyPair invalidates the other key
Seán Coffey
sean.coffey at oracle.com
Mon Aug 15 10:04:11 UTC 2016
Not sure how you end up finding such issues Ivan!
The fix looks good. One suggestion on the testcase. Could you make it
more generic ? i.e. don't just test the MSCAPI provider. Let's cycle
through all providers available for KeyPairGenerator and ensure no other
provider suffers (or introduces) the same issue.
Regards,
Sean.
On 13/08/16 02:15, Ivan Gerasimov wrote:
> Hello!
>
> It was noticed, that SunMSCAPI implementation of a KeyPair has a
> problem: The public and the private keys share the same native handles.
>
> As the result, when one of the keys is finalized, and its resources
> are freed, the second key becomes invalid.
>
> Would you please help review the fix?
>
> BUGURL: https://bugs.openjdk.java.net/browse/JDK-8163896
> WEBREV: http://cr.openjdk.java.net/~igerasim/8163896/00/webrev/
>
> With kind regards,
> Ivan
>
More information about the security-dev
mailing list