RFR: 8299870: TLS record version check allows invalid records

Matthew Donovan duke at openjdk.org
Tue Jan 10 19:07:43 UTC 2023


- Updated ProtocolVersion.isNegotiable() to check a bounded range of version numbers.
- Removed IllegalRecordVersion.java from ProblemList.txt 

Tested with jdk_security and jdk_security3 test groups.

-------------

Commit messages:
 - 8299870: TLS record version check allows invalid records

Changes: https://git.openjdk.org/jdk/pull/11929/files
 Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=11929&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8299870
  Stats: 8 lines in 2 files changed: 5 ins; 2 del; 1 mod
  Patch: https://git.openjdk.org/jdk/pull/11929.diff
  Fetch: git fetch https://git.openjdk.org/jdk pull/11929/head:pull/11929

PR: https://git.openjdk.org/jdk/pull/11929



More information about the security-dev mailing list