RFR: 8267617: Certificate's IP x509 NameConstraints raises ArrayIndexOutOfBoundsException

Daniel Jeliński djelinski at openjdk.org
Thu Dec 1 16:57:51 UTC 2022


This patch fixes the exceptions that may occur when merging IP address NameConstraints from different certificates in a chain.

The included test reports 3 exceptions without the fix, passes with the fix applied.

Tiers 1-3 continue to pass.

-------------

Commit messages:
 - Add test
 - Fix name constraint comparison

Changes: https://git.openjdk.org/jdk/pull/11459/files
 Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=11459&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8267617
  Stats: 86 lines in 2 files changed: 81 ins; 0 del; 5 mod
  Patch: https://git.openjdk.org/jdk/pull/11459.diff
  Fetch: git fetch https://git.openjdk.org/jdk pull/11459/head:pull/11459

PR: https://git.openjdk.org/jdk/pull/11459



More information about the security-dev mailing list