[Internet]JDK-8221218 - Insufficient buffer remaining for AEAD cipher fragment (2). Needs to be more than tag size (16)

[Thomas Lußnig]

Hi,

i does not have an reproducing right now. But after an deeper look i 
found out that it is not or not only load dependend.
I was able to "reproduce" the error in te full system repeating with the 
same data over the websocket. Next i will do an TCP-Dump

Gruß Thomas

Am 25.04.2022 um 07:20 schrieb xueleifan(XueleiFan):
>
> Hi Thomas,
>
> Did you have a reproducing code that I would play with?
>
> Thanks,
>
> Xuelei
>
>
>> On Apr 24, 2022, at 2:01 PM, Thomas Lußnig <openjdk at suche.org> wrote:
>>
>> Hi,
>>
>> i like to inform you that this problem is not yet fixed. I Use java 
>> 18.0.1 and the problem still popup.
>> OS: Win 11
>> openjdk 18 2022-03-22
>> OpenJDK Runtime Environment (build 18+36-2087)
>> OpenJDK 64-Bit Server VM (build 18+36-2087, mixed mode, sharing)
>>
>> Espacialy under larger load.
>>
>> Gruß Thomas
>>
>> java.io.IOException: javax.net.ssl.SSLException: Insufficient buffer 
>> remaining for AEAD cipher fragment (2). Needs to be more than tag 
>> size (16)
>>
>>         at 
>> org.eclipse.jetty.util.FutureCallback.block(FutureCallback.java:163)
>>         at 
>> org.eclipse.jetty.websocket.common.JettyWebSocketRemoteEndpoint.sendBlocking(JettyWebSocketRemoteEndpoint.java:224)
>>         at 
>> org.eclipse.jetty.websocket.common.JettyWebSocketRemoteEndpoint.sendString(JettyWebSocketRemoteEndpoint.java:85)
>>        ...
>> Caused by: javax.net.ssl.SSLException: Insufficient buffer remaining 
>> for AEAD cipher fragment (2). Needs to be more than tag size (16)
>>         at 
>> java.base/sun.security.ssl.Alert.createSSLException(Alert.java:133)
>>         at 
>> java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:371)
>>         at 
>> java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:314)
>>         at 
>> java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:309)
>>         at 
>> java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:134)
>>         at 
>> java.base/sun.security.ssl.SSLEngineImpl.decode(SSLEngineImpl.java:736)
>>         at 
>> java.base/sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:691)
>>         at 
>> java.base/sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:506)
>>         at 
>> java.base/sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:482)
>>         at java.base/javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:679)
>>         at 
>> org.eclipse.jetty.io.ssl.SslConnection.unwrap(SslConnection.java:406)
>>         at 
>> org.eclipse.jetty.io.ssl.SslConnection$DecryptedEndPoint.fill(SslConnection.java:701)
>>         at 
>> org.eclipse.jetty.websocket.core.internal.WebSocketConnection.fillAndParse(WebSocketConnection.java:470)
>>         ... 16 more
>>         Suppressed: java.io.IOException: Broken pipe
>>                 at 
>> org.eclipse.jetty.io.ssl.SslConnection$DecryptedEndPoint.flush(SslConnection.java:1118)
>>                 at 
>> org.eclipse.jetty.io.WriteFlusher.flush(WriteFlusher.java:417)
>>                 at 
>> org.eclipse.jetty.io.WriteFlusher.write(WriteFlusher.java:272)
>>                 at 
>> org.eclipse.jetty.io.AbstractEndPoint.write(AbstractEndPoint.java:418)
>>                 at 
>> org.eclipse.jetty.websocket.core.internal.FrameFlusher.process(FrameFlusher.java:329)
>>                 at 
>> org.eclipse.jetty.util.IteratingCallback.processing(IteratingCallback.java:232)
>>                 at 
>> org.eclipse.jetty.util.IteratingCallback.succeeded(IteratingCallback.java:350)
>>                 at 
>> org.eclipse.jetty.util.Callback$Nested.succeeded(Callback.java:314)
>>                 at 
>> org.eclipse.jetty.io.WriteFlusher.completeWrite(WriteFlusher.java:389)
>>                 at 
>> org.eclipse.jetty.io.ssl.SslConnection$DecryptedEndPoint$IncompleteWriteCallback.succeeded(SslConnection.java:1562)
>>                 at 
>> org.eclipse.jetty.io.WriteFlusher.completeWrite(WriteFlusher.java:389)
>>                 at 
>> org.eclipse.jetty.io.SocketChannelEndPoint$2.run(SocketChannelEndPoint.java:116)
>>                 ... 8 more
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20220426/8f1d684f/attachment.htm>