[jdk9] RFR: 8163896: Finalizing one key of a KeyPair invalidates the other key
Ivan Gerasimov
ivan.gerasimov at oracle.com
Mon Aug 15 10:50:35 UTC 2016
Thank you Seán for review!
It's a good point about making the testcase more generic; I'll modify it
as you suggest.
With kind regards,
Ivan
On 15.08.2016 13:04, Seán Coffey wrote:
> Not sure how you end up finding such issues Ivan!
>
> The fix looks good. One suggestion on the testcase. Could you make it
> more generic ? i.e. don't just test the MSCAPI provider. Let's cycle
> through all providers available for KeyPairGenerator and ensure no
> other provider suffers (or introduces) the same issue.
>
> Regards,
> Sean.
>
> On 13/08/16 02:15, Ivan Gerasimov wrote:
>> Hello!
>>
>> It was noticed, that SunMSCAPI implementation of a KeyPair has a
>> problem: The public and the private keys share the same native handles.
>>
>> As the result, when one of the keys is finalized, and its resources
>> are freed, the second key becomes invalid.
>>
>> Would you please help review the fix?
>>
>> BUGURL: https://bugs.openjdk.java.net/browse/JDK-8163896
>> WEBREV: http://cr.openjdk.java.net/~igerasim/8163896/00/webrev/
>>
>> With kind regards,
>> Ivan
>>
>
>
More information about the security-dev
mailing list