Integrated: 8285516: clearPassword should be called in a finally try block

Xue-Lei Andrew Fan xuelei at openjdk.java.net
Mon May 9 14:18:47 UTC 2022


On Sun, 24 Apr 2022 05:13:36 GMT, Xue-Lei Andrew Fan <xuelei at openjdk.org> wrote:

> Hi,
> 
> Could I have the simple update reviewed?
> 
> In the PKCS12 key store implementation, the PBEKeySpec.clearPassword() should be called in a finally try block.  Otherwise, the password cleanup could be interrupted by exceptions.
> 
> Thanks,
> Xuelei

This pull request has now been integrated.

Changeset: 36e4df9d
Author:    Xue-Lei Andrew Fan <xuelei at openjdk.org>
URL:       https://git.openjdk.java.net/jdk/commit/36e4df9d66134ef160bbba0e59d0e3dbb183ba4b
Stats:     6 lines in 1 file changed: 2 ins; 2 del; 2 mod

8285516: clearPassword should be called in a finally try block

Reviewed-by: mullan, hchao

-------------

PR: https://git.openjdk.java.net/jdk/pull/8377



More information about the security-dev mailing list