RFR: 8161527: NPE is thrown if exempt application is bundled with	specific cryptoPerms
    Bradford Wetmore 
    bradford.wetmore at oracle.com
       
    Thu Jul 28 00:39:16 UTC 2016
    
    
  
This bug has been around since JDK 5 and likely before. :(
If you bundle a specific length cryptoPerms, calls to Cipher with an 
illegal size key will NPE.  The fix in CryptoPermissions is almost 
exactly the same as what is in java.security.Permissions.
I took the liberty of doing a little syntactic cleanup in the file.  The 
only change of note is in the implies() code.
https://bugs.openjdk.java.net/browse/JDK-8161527
http://cr.openjdk.java.net/~wetmore/8161527/webrev.00/
Thanks,
Brad
    
    
More information about the security-dev
mailing list