RFR: 8155191: SunPKCS11's SecureRandom#nextBytes(byte[]) accepts null argument

Valerie Peng valeriep at openjdk.org
Thu May 4 19:01:17 UTC 2023


On Thu, 4 May 2023 12:59:21 GMT, Sean Mullan <mullan at openjdk.org> wrote:

> I suggest the title of this issue should be changed to better reflect the proposed change: "Specify that SecureRandom.nextBytes(byte[]) throws NullPointerException when byte array is null".

Ok.

> Also, would you consider making the same change to `SecureRandom.setSeed(byte[])` as part of this change? I'm pretty sure all JDK SR impls throw NPE if the array is null.

Hmm, let me try it out. If the behavior is consistent NPE, I can include that as part of this PR/CSR as well.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/13788#issuecomment-1535256656



More information about the security-dev mailing list