RFR (XS) 8209851 : Algorithm name is compared via reference identity
Ivan Gerasimov
ivan.gerasimov at oracle.com
Wed Aug 22 19:21:44 UTC 2018
Hello!
In sun.security.provider.DSA.engineInitSign() a check for the key size
is meant to be skipped if the MessageDigest is NullDigest20.
However, the check for the algorithm's name is done via comparing with a
String literal, which is not guaranteed to be accurate.
Would you please help review the trivial fix?
BUGURL: https://bugs.openjdk.java.net/browse/JDK-8209851
WEBREV: http://cr.openjdk.java.net/~igerasim/8209851/00/webrev/
--
With kind regards,
Ivan Gerasimov
More information about the security-dev
mailing list