[jdk9] RFR: 8163896: Finalizing one key of a KeyPair invalidates the other key

Ivan Gerasimov ivan.gerasimov at oracle.com
Mon Aug 15 10:50:35 UTC 2016


Thank you Seán for review!

It's a good point about making the testcase more generic; I'll modify it 
as you suggest.

With kind regards,
Ivan

On 15.08.2016 13:04, Seán Coffey wrote:
> Not sure how you end up finding such issues Ivan!
>
> The fix looks good. One suggestion on the testcase. Could you make it 
> more generic ? i.e. don't just test the MSCAPI provider. Let's cycle 
> through all providers available for KeyPairGenerator and ensure no 
> other provider suffers (or introduces) the same issue.
>
> Regards,
> Sean.
>
> On 13/08/16 02:15, Ivan Gerasimov wrote:
>> Hello!
>>
>> It was noticed, that SunMSCAPI implementation of a KeyPair has a 
>> problem: The public and the private keys share the same native handles.
>>
>> As the result, when one of the keys is finalized, and its resources 
>> are freed, the second key becomes invalid.
>>
>> Would you please help review the fix?
>>
>> BUGURL: https://bugs.openjdk.java.net/browse/JDK-8163896
>> WEBREV: http://cr.openjdk.java.net/~igerasim/8163896/00/webrev/
>>
>> With kind regards,
>> Ivan
>>
>
>




More information about the security-dev mailing list