JDK-8215102 (Follow-up)

Severin Gehwolf sgehwolf at redhat.com
Fri Jan 25 13:41:23 UTC 2019


Hi Jaikiran,

On Fri, 2019-01-25 at 09:47 +0530, Jaikiran Pai wrote:
> Hello Severin,
> 
> Thank you for spending time on this. Although that JIRA was raised for
> in context of MySQL driver, having watched this discussion and looked a
> bit into the exception stacktrace, I think it's not really specific to
> MySQL.
> 
> So I decided to reproduce this with just plain Java SSLSocket APIs and
> was able to reproduce this. I have attached a very simple jtreg test
> case which fails against the latest upstream jdk source repo. The test
> case has details about what it does, but in short, the test creates a
> SSLServerSocket (server) and a SSLSocket (client) and the client sends
> some random data to the server and then calls SSLSocket.shutdownInput().
> That call triggers the exception that's being discussed here. Reading
> the javadoc of SSLSocket.shutdownInput() I don't think the usage of this
> API is incorrect (this is of course based on my limited knowledge of
> that API).
> 
> -Jaikiran

Thanks, I've added that info to the bug and re-opened it:
https://bugs.openjdk.java.net/browse/JDK-8215102?focusedCommentId=14240050&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-14240050

It's still not entirely clear to me whether this is wrong API usage or
a JDK bug.

Thanks,
Severin



More information about the security-dev mailing list