RFR: 8161527: NPE is thrown if exempt application is bundled with specific cryptoPerms

Xuelei Fan xuelei.fan at oracle.com
Thu Jul 28 01:17:20 UTC 2016


Looks fine to me.

I like the update to use braces.

Thanks,
Xuelei

On 7/28/2016 8:39 AM, Bradford Wetmore wrote:
> 
> This bug has been around since JDK 5 and likely before. :(
> 
> If you bundle a specific length cryptoPerms, calls to Cipher with an
> illegal size key will NPE.  The fix in CryptoPermissions is almost
> exactly the same as what is in java.security.Permissions.
> 
> I took the liberty of doing a little syntactic cleanup in the file.  The
> only change of note is in the implies() code.
> 
> https://bugs.openjdk.java.net/browse/JDK-8161527
> http://cr.openjdk.java.net/~wetmore/8161527/webrev.00/
> 
> Thanks,
> 
> Brad
> 




More information about the security-dev mailing list