RFR: 8336667: IAE in DerInputStream.toByteArray

Valerie Peng valeriep at openjdk.org
Wed Jul 24 16:54:33 UTC 2024


On Mon, 22 Jul 2024 21:28:07 GMT, Weijun Wang <weijun at openjdk.org> wrote:

> When reading an indefinite BER `DerValue` from a `DerInputStream`, the current position of the stream must be placed right after the BER. There is a bug in the calculation.

I will take a look.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/20283#issuecomment-2248483455



More information about the security-dev mailing list