RFR: 8285516: clearPassword should be called in a finally try block
Sean Mullan
mullan at openjdk.java.net
Mon Apr 25 13:21:29 UTC 2022
On Sun, 24 Apr 2022 05:13:36 GMT, Xue-Lei Andrew Fan <xuelei at openjdk.org> wrote:
> Hi,
>
> Could I have the simple update reviewed?
>
> In the PKCS12 key store implementation, the PBEKeySpec.clearPassword() should be called in a finally try block. Otherwise, the password cleanup could be interrupted by exceptions.
>
> Thanks,
> Xuelei
Marked as reviewed by mullan (Reviewer).
-------------
PR: https://git.openjdk.java.net/jdk/pull/8377
More information about the security-dev
mailing list