RFR: 8336667: IAE in DerInputStream.toByteArray
Valerie Peng
valeriep at openjdk.org
Wed Jul 24 16:54:33 UTC 2024
On Mon, 22 Jul 2024 21:28:07 GMT, Weijun Wang <weijun at openjdk.org> wrote:
> When reading an indefinite BER `DerValue` from a `DerInputStream`, the current position of the stream must be placed right after the BER. There is a bug in the calculation.
I will take a look.
-------------
PR Comment: https://git.openjdk.org/jdk/pull/20283#issuecomment-2248483455
More information about the security-dev
mailing list