RFR: 8258833: Cancel multi-part cipher operations in SunPKCS11 after failures [v7]
Valerie Peng
valeriep at openjdk.java.net
Fri Jan 22 02:16:01 UTC 2021
On Wed, 20 Jan 2021 13:51:56 GMT, Martin Balao <mbalao at openjdk.org> wrote:
>> Martin Balao has updated the pull request incrementally with two additional commits since the last revision:
>>
>> - Align doCancel pattern in 'P11Cipher::implDoFinal(byte[]..' to 'P11Cipher::implDoFinal(ByteBuffer..'. Better documentation in P11Cipher. Copyright date updated.
>> - Copyright dates updated to 2021 on modified files
>
> src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11Cipher.java line 793:
>
>> 791: // only after this point. See JDK-8258833 for further
>> 792: // information.
>> 793: doCancel = false;
>
> @valeriepeng I made a code change here so I'd like you to have a final look and validate. I'm just aligning the 'P11Cipher::implDoFinal(byte[]..' function to 'P11Cipher::implDoFinal(ByteBuffer..'. The rationale is that 'doFalse = false' can be placed before the C_EncryptFinal call because any error on it does not require a cancel (it already cancels the operation)
Yes, aligning them is better.
-------------
PR: https://git.openjdk.java.net/jdk/pull/1901
More information about the security-dev
mailing list