Integrated: 8308010: X509Key and PKCS8Key allows garbage bytes at the end
Weijun Wang
weijun at openjdk.org
Thu May 18 21:27:02 UTC 2023
On Fri, 12 May 2023 16:23:53 GMT, Weijun Wang <weijun at openjdk.org> wrote:
> When parsing a byte array to a private or public key, it's now converted to a `ByteArrayInputStream` and the parser does not report an error if there are extra bytes at the end.
This pull request has now been integrated.
Changeset: 148df533
Author: Weijun Wang <weijun at openjdk.org>
URL: https://git.openjdk.org/jdk/commit/148df533af618a959ca2f3601d9ab897c3515d77
Stats: 86 lines in 3 files changed: 60 ins; 13 del; 13 mod
8308010: X509Key and PKCS8Key allows garbage bytes at the end
Reviewed-by: mullan
-------------
PR: https://git.openjdk.org/jdk/pull/13958
More information about the security-dev
mailing list