RFR: 8336667: IAE in DerInputStream.toByteArray
Valerie Peng
valeriep at openjdk.org
Thu Jul 25 16:46:32 UTC 2024
On Mon, 22 Jul 2024 21:28:07 GMT, Weijun Wang <weijun at openjdk.org> wrote:
> When reading an indefinite BER `DerValue` from a `DerInputStream`, the current position of the stream must be placed right after the BER. There is a bug in the calculation.
Look good. Thanks~
-------------
Marked as reviewed by valeriep (Reviewer).
PR Review: https://git.openjdk.org/jdk/pull/20283#pullrequestreview-2199864021
More information about the security-dev
mailing list