Integrated: 8336667: IAE in DerInputStream.toByteArray

Weijun Wang weijun at openjdk.org
Thu Jul 25 17:14:44 UTC 2024


On Mon, 22 Jul 2024 21:28:07 GMT, Weijun Wang <weijun at openjdk.org> wrote:

> When reading an indefinite BER `DerValue` from a `DerInputStream`, the current position of the stream must be placed right after the BER. There is a bug in the calculation.

This pull request has now been integrated.

Changeset: b5b5a5b8
Author:    Weijun Wang <weijun at openjdk.org>
URL:       https://git.openjdk.org/jdk/commit/b5b5a5b8e54ebd766456d2a4781a806ff97816a8
Stats:     113 lines in 3 files changed: 111 ins; 0 del; 2 mod

8336667: IAE in DerInputStream.toByteArray

Reviewed-by: valeriep

-------------

PR: https://git.openjdk.org/jdk/pull/20283



More information about the security-dev mailing list