RFR: 8308010: X509Key and PKCS8Key allows garbage bytes at the end [v2]
Sean Mullan
mullan at openjdk.org
Thu May 18 21:22:51 UTC 2023
On Thu, 18 May 2023 14:48:58 GMT, Weijun Wang <weijun at openjdk.org> wrote:
>> When parsing a byte array to a private or public key, it's now converted to a `ByteArrayInputStream` and the parser does not report an error if there are extra bytes at the end.
>
> Weijun Wang has updated the pull request incrementally with one additional commit since the last revision:
>
> add reasons
Marked as reviewed by mullan (Reviewer).
-------------
PR Review: https://git.openjdk.org/jdk/pull/13958#pullrequestreview-1433473416
More information about the security-dev
mailing list