RFR: 8336667: IAE in DerInputStream.toByteArray

Weijun Wang weijun at openjdk.org
Mon Jul 22 21:45:48 UTC 2024


When reading an indefinite BER `DerValue` from a `DerInputStream`, the current position of the stream must be placed right after the BER. There is a bug in the calculation.

-------------

Commit messages:
 - the fix

Changes: https://git.openjdk.org/jdk/pull/20283/files
  Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=20283&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8336667
  Stats: 113 lines in 3 files changed: 111 ins; 0 del; 2 mod
  Patch: https://git.openjdk.org/jdk/pull/20283.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/20283/head:pull/20283

PR: https://git.openjdk.org/jdk/pull/20283



More information about the security-dev mailing list