[jdk9] RFR: 8163896: Finalizing one key of a KeyPair invalidates the other key

Seán Coffey sean.coffey at oracle.com
Mon Aug 15 10:04:11 UTC 2016


Not sure how you end up finding such issues Ivan!

The fix looks good. One suggestion on the testcase. Could you make it 
more generic ? i.e. don't just test the MSCAPI provider. Let's cycle 
through all providers available for KeyPairGenerator and ensure no other 
provider suffers (or introduces) the same issue.

Regards,
Sean.

On 13/08/16 02:15, Ivan Gerasimov wrote:
> Hello!
>
> It was noticed, that SunMSCAPI implementation of a KeyPair has a 
> problem: The public and the private keys share the same native handles.
>
> As the result, when one of the keys is finalized, and its resources 
> are freed, the second key becomes invalid.
>
> Would you please help review the fix?
>
> BUGURL: https://bugs.openjdk.java.net/browse/JDK-8163896
> WEBREV: http://cr.openjdk.java.net/~igerasim/8163896/00/webrev/
>
> With kind regards,
> Ivan
>




More information about the security-dev mailing list