Code Review Request, JDK-8146600 AVA Normalizer.Form issue

Xuelei Fan at
Thu Sep 15 00:09:42 UTC 2016


Please review this fix:

The Normalizer.Form.NFKD is used to normalize attribute-value assertion 
in X.509 certificate processing.  The normalizer may convert some UTF-8 
character into ASCII code.  For example, ","(two bytes) will be 
converted to ","(one byte), and "Hello, world!" is normalize to "Hello, 
world!".  However, "Hello, world!" and "Hello, world!" should be 
different because of the comma code.  This conversion may result in 
unexpected weird behaviors for name comparing and conversions.

This fix will update to use "Normalizer.Form.NFD".


More information about the security-dev mailing list