HttpURLConnection cache issues leading to crashes in JGSS w/ native GSS introduced by 8303809

Nico Williams Nico.Williams at twosigma.com
Thu Oct 19 22:57:37 UTC 2023


I failed to include the reproducer, which is:

import java.net.*;

public class Test {
    public static void main(String[] args) {
        for (int i = 0; i < 500; i++) {
            new Thread(() -> {
                    try {
                        URL url = new URL(args[0]);
                        var huc = url.openConnection();
                        huc.getInputStream().readAllBytes();
                    } catch (Exception e) {
                        e.printStackTrace();
                    }
            }).start();
        }
        System.out.print(".");
    }
}


More information about the security-dev mailing list