RFR: 8283577: SSLEngine.unwrap on read-only input ByteBuffer
Anthony Scarpino
ascarpino at openjdk.java.net
Wed May 11 22:28:56 UTC 2022
On Mon, 9 May 2022 23:15:40 GMT, Bradford Wetmore <wetmore at openjdk.org> wrote:
>> Hi,
>>
>> I need a review of this fix to allow a read-only 'src' buffer to be used with SSLEngine.unwrap(). A temporary read-write buffer is created in the SSLCipher operation when a read-only buffer is passed. If the 'src' is read-write, there is no effect on the current operation
>>
>> The PR also includes a CSR for an API implementation note to the SSLEngine.unwrap. The 'src' buffer may be modified during the decryption operation. 'unwrap()' has had this behavior forever, so there is no compatibility issue with this note. Using the 'src' buffer for in-place decryption was a performance decision.
>>
>> Tony
>
> test/jdk/javax/net/ssl/SSLSession/ReadOnlyEngine.java line 1:
>
>> 1: /*
>
> Wondering why this is in javax/net/ssl/SSLSession instead of sun/security/ssl/SSLCipher.
I can move it.. I created it from another test which happen to be in that directory
-------------
PR: https://git.openjdk.java.net/jdk/pull/8462
More information about the security-dev
mailing list