RFR: 8267617: Certificate's IP x509 NameConstraints raises ArrayIndexOutOfBoundsException
Daniel Jeliński
djelinski at openjdk.org
Thu Dec 1 16:57:51 UTC 2022
This patch fixes the exceptions that may occur when merging IP address NameConstraints from different certificates in a chain.
The included test reports 3 exceptions without the fix, passes with the fix applied.
Tiers 1-3 continue to pass.
-------------
Commit messages:
- Add test
- Fix name constraint comparison
Changes: https://git.openjdk.org/jdk/pull/11459/files
Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=11459&range=00
Issue: https://bugs.openjdk.org/browse/JDK-8267617
Stats: 86 lines in 2 files changed: 81 ins; 0 del; 5 mod
Patch: https://git.openjdk.org/jdk/pull/11459.diff
Fetch: git fetch https://git.openjdk.org/jdk pull/11459/head:pull/11459
PR: https://git.openjdk.org/jdk/pull/11459
More information about the security-dev
mailing list