Integrated: 8285516: clearPassword should be called in a finally try block
Xue-Lei Andrew Fan
xuelei at openjdk.java.net
Mon May 9 14:18:47 UTC 2022
On Sun, 24 Apr 2022 05:13:36 GMT, Xue-Lei Andrew Fan <xuelei at openjdk.org> wrote:
> Hi,
>
> Could I have the simple update reviewed?
>
> In the PKCS12 key store implementation, the PBEKeySpec.clearPassword() should be called in a finally try block. Otherwise, the password cleanup could be interrupted by exceptions.
>
> Thanks,
> Xuelei
This pull request has now been integrated.
Changeset: 36e4df9d
Author: Xue-Lei Andrew Fan <xuelei at openjdk.org>
URL: https://git.openjdk.java.net/jdk/commit/36e4df9d66134ef160bbba0e59d0e3dbb183ba4b
Stats: 6 lines in 1 file changed: 2 ins; 2 del; 2 mod
8285516: clearPassword should be called in a finally try block
Reviewed-by: mullan, hchao
-------------
PR: https://git.openjdk.java.net/jdk/pull/8377
More information about the security-dev
mailing list