RFR: JDK-8300416 java.security.MessageDigestSpi clone can result in thread-unsafe clones [v2]

Mark Powers mpowers at openjdk.org
Thu Feb 2 22:27:52 UTC 2023


On Thu, 2 Feb 2023 22:06:42 GMT, Sean Mullan <mullan at openjdk.org> wrote:

>> In the case where ByteBuffer has allocated a direct buffer, a new internal byte array gets allocated. This is the shared memory that's causing the problem. See MessageDigestSpi.java line 220.
>> 
>> Oops got to update the copyright.
>
> I think you mean line 126? :
> 
> `                tempArray = new byte[n];  `

You are correct. How did I come up with 220?

-------------

PR: https://git.openjdk.org/jdk/pull/12348



More information about the security-dev mailing list