RFR: 8335288: SunPKCS11 initialization will call C_GetMechanismInfo on unsupported mechanisms

Valerie Peng valeriep at openjdk.org
Wed Jul 17 00:54:16 UTC 2024


Can someone help review this fix? Changed the required-mechanism check by checking if the particular mechanism is inside the list of enabled supported mechanisms. This should be more reliable than calling C_GetMechanismInfo(..) on the required mechanism given vendors may return various sorts of error codes.

Thanks,
Valerie

-------------

Commit messages:
 - 8335288: SunPKCS11 initialization will call C_GetMechanismInfo on usupported mechanisms

Changes: https://git.openjdk.org/jdk/pull/20207/files
  Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=20207&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8335288
  Stats: 163 lines in 4 files changed: 150 ins; 3 del; 10 mod
  Patch: https://git.openjdk.org/jdk/pull/20207.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/20207/head:pull/20207

PR: https://git.openjdk.org/jdk/pull/20207



More information about the security-dev mailing list