RFR: 8336667: IAE in DerInputStream.toByteArray

Valerie Peng valeriep at openjdk.org
Thu Jul 25 16:46:32 UTC 2024


On Mon, 22 Jul 2024 21:28:07 GMT, Weijun Wang <weijun at openjdk.org> wrote:

> When reading an indefinite BER `DerValue` from a `DerInputStream`, the current position of the stream must be placed right after the BER. There is a bug in the calculation.

Look good. Thanks~

-------------

Marked as reviewed by valeriep (Reviewer).

PR Review: https://git.openjdk.org/jdk/pull/20283#pullrequestreview-2199864021



More information about the security-dev mailing list