Integrated: 8258833: Cancel multi-part cipher operations in SunPKCS11 after failures

Martin Balao mbalao at openjdk.java.net
Mon Jan 25 18:05:46 UTC 2021


On Mon, 28 Dec 2020 16:24:43 GMT, Martin Balao <mbalao at openjdk.org> wrote:

> When a multi-part cipher operation fails in SunPKCS11 (i.e. because of an invalid block size), we now cancel the operation before returning the underlying Session to the Session Manager. This allows to use the returned Session for a different purpose. Otherwise, an CKR_OPERATION_ACTIVE error would be raised from the PKCS#11 library.
> 
> The jdk/sun/security/pkcs11/Cipher/CancelMultipart.java regression test is introduced as part of this PR.
> 
> No regressions found in jdk/sun/security/pkcs11.

This pull request has now been integrated.

Changeset: 47c7dc77
Author:    Martin Balao <mbalao at openjdk.org>
URL:       https://git.openjdk.java.net/jdk/commit/47c7dc77
Stats:     301 lines in 6 files changed: 286 ins; 8 del; 7 mod

8258833: Cancel multi-part cipher operations in SunPKCS11 after failures

Reviewed-by: valeriep

-------------

PR: https://git.openjdk.java.net/jdk/pull/1901


More information about the security-dev mailing list