RFR 8172244: AIOOBE in KeyStore.getCertificateAlias on Windows

Adam Petcher adam.petcher at oracle.com
Mon May 22 19:57:41 UTC 2017


This is a bug fix related to keys without certificates in the Windows 
key store. When a key doesn't have a certificate, the native code will 
set the list of certificates to an empty list. Some of the Java code for 
the MSCAPI provider doesn't handle this case correctly and throws an 
AIOOBE. The regression test reproduces the same circumstances in the 
Java code by bypassing some checks in the KeyStore interface, allowing 
us to test this without upsetting the test environment.

JBS: https://bugs.openjdk.java.net/browse/JDK-8172244
Webrev: http://cr.openjdk.java.net/~apetcher/8172244/webrev.00/




More information about the security-dev mailing list