RFR: 8286259: Password cleanup after KeyStore.PasswordProtection in P11KeyStore

Valerie Peng valeriep at openjdk.org
Thu Jun 23 19:13:53 UTC 2022


On Thu, 23 Jun 2022 00:41:07 GMT, Hai-May Chao <hchao at openjdk.org> wrote:

> Please review the small update for JDK-8286259.

src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11KeyStore.java line 469:

> 467:                 // ignore
> 468:             }
> 469:         }

This particular change looks fine. 
However, I noticed that there is another local PasswordProtection object inside the KeyStoreLoadParameter class in Secmod.java. Is that also subject to the same issue?

-------------

PR: https://git.openjdk.org/jdk/pull/9254



More information about the security-dev mailing list