RFR: 8335288: SunPKCS11 initialization will call C_GetMechanismInfo on unsupported mechanisms [v2]
Kåre Fiedler Christiansen
duke at openjdk.org
Mon Oct 7 08:11:44 UTC 2024
On Wed, 21 Aug 2024 00:09:25 GMT, Valerie Peng <valeriep at openjdk.org> wrote:
>> Can someone help review this fix? Changed the required-mechanism check by checking if the particular mechanism is inside the list of enabled supported mechanisms. This should be more reliable than calling C_GetMechanismInfo(..) on the required mechanism given vendors may return various sorts of error codes.
>>
>> Thanks,
>> Valerie
>
> Valerie Peng has updated the pull request incrementally with one additional commit since the last revision:
>
> Address review comments and reverted back to iterating through all available
> mechanisms.
Hi. I'm the original reporter of this issue.
Thanks for the work done on this bug.
I see the the fix has been targeted at only Java 24.
Are there any plans to back port this to Java 21, which is the current LTS version, and where the regression was introduced?
-------------
PR Comment: https://git.openjdk.org/jdk/pull/20207#issuecomment-2396016409
More information about the security-dev
mailing list