RFR: 8285516: clearPassword should be called in a finally try block

Sean Mullan mullan at openjdk.java.net
Mon Apr 25 13:21:29 UTC 2022


On Sun, 24 Apr 2022 05:13:36 GMT, Xue-Lei Andrew Fan <xuelei at openjdk.org> wrote:

> Hi,
> 
> Could I have the simple update reviewed?
> 
> In the PKCS12 key store implementation, the PBEKeySpec.clearPassword() should be called in a finally try block.  Otherwise, the password cleanup could be interrupted by exceptions.
> 
> Thanks,
> Xuelei

Marked as reviewed by mullan (Reviewer).

-------------

PR: https://git.openjdk.java.net/jdk/pull/8377



More information about the security-dev mailing list