[Internet]JDK-8221218 - Insufficient buffer remaining for AEAD cipher fragment (2). Needs to be more than tag size (16)

[xueleifan(XueleiFan)]

Hi Thomas,

Did you have a reproducing code that I would play with?

Thanks,

Xuelei

On Apr 24, 2022, at 2:01 PM, Thomas Lußnig <openjdk at suche.org<mailto:openjdk at suche.org>> wrote:

Hi,

i like to inform you that this problem is not yet fixed. I Use java 18.0.1 and the problem still popup.
OS: Win 11
openjdk 18 2022-03-22
OpenJDK Runtime Environment (build 18+36-2087)
OpenJDK 64-Bit Server VM (build 18+36-2087, mixed mode, sharing)

Espacialy under larger load.

Gruß Thomas

java.io.IOException: javax.net.ssl.SSLException: Insufficient buffer remaining for AEAD cipher fragment (2). Needs to be more than tag size (16)

        at org.eclipse.jetty.util.FutureCallback.block(FutureCallback.java:163)
        at org.eclipse.jetty.websocket.common.JettyWebSocketRemoteEndpoint.sendBlocking(JettyWebSocketRemoteEndpoint.java:224)
        at org.eclipse.jetty.websocket.common.JettyWebSocketRemoteEndpoint.sendString(JettyWebSocketRemoteEndpoint.java:85)
       ...
Caused by: javax.net.ssl.SSLException: Insufficient buffer remaining for AEAD cipher fragment (2). Needs to be more than tag size (16)
        at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:133)
        at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:371)
        at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:314)
        at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:309)
        at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:134)
        at java.base/sun.security.ssl.SSLEngineImpl.decode(SSLEngineImpl.java:736)
        at java.base/sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:691)
        at java.base/sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:506)
        at java.base/sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:482)
        at java.base/javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:679)
        at org.eclipse.jetty.io.ssl.SslConnection.unwrap(SslConnection.java:406)
        at org.eclipse.jetty.io.ssl.SslConnection$DecryptedEndPoint.fill(SslConnection.java:701)
        at org.eclipse.jetty.websocket.core.internal.WebSocketConnection.fillAndParse(WebSocketConnection.java:470)
        ... 16 more
        Suppressed: java.io.IOException: Broken pipe
                at org.eclipse.jetty.io.ssl.SslConnection$DecryptedEndPoint.flush(SslConnection.java:1118)
                at org.eclipse.jetty.io.WriteFlusher.flush(WriteFlusher.java:417)
                at org.eclipse.jetty.io.WriteFlusher.write(WriteFlusher.java:272)
                at org.eclipse.jetty.io.AbstractEndPoint.write(AbstractEndPoint.java:418)
                at org.eclipse.jetty.websocket.core.internal.FrameFlusher.process(FrameFlusher.java:329)
                at org.eclipse.jetty.util.IteratingCallback.processing(IteratingCallback.java:232)
                at org.eclipse.jetty.util.IteratingCallback.succeeded(IteratingCallback.java:350)
                at org.eclipse.jetty.util.Callback$Nested.succeeded(Callback.java:314)
                at org.eclipse.jetty.io.WriteFlusher.completeWrite(WriteFlusher.java:389)
                at org.eclipse.jetty.io.ssl.SslConnection$DecryptedEndPoint$IncompleteWriteCallback.succeeded(SslConnection.java:1562)
                at org.eclipse.jetty.io.WriteFlusher.completeWrite(WriteFlusher.java:389)
                at org.eclipse.jetty.io.SocketChannelEndPoint$2.run(SocketChannelEndPoint.java:116)
                ... 8 more

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20220425/7e8377ee/attachment.htm>