RFR: 8267617: Certificate's IP x509 NameConstraints raises ArrayIndexOutOfBoundsException

Sean Mullan mullan at openjdk.org
Mon Dec 5 15:24:04 UTC 2022


On Thu, 1 Dec 2022 16:37:48 GMT, Daniel Jeliński <djelinski at openjdk.org> wrote:

> This patch fixes the exceptions that may occur when merging IP address NameConstraints from different certificates in a chain.
> 
> The included test reports 3 exceptions without the fix, passes with the fix applied.
> 
> Tiers 1-3 continue to pass.

Looks good.

-------------

Marked as reviewed by mullan (Reviewer).

PR: https://git.openjdk.org/jdk/pull/11459


More information about the security-dev mailing list