RFR: 8336665: CCE in X509CRLImpl$TBSCertList.getCertIssuer [v6]

Mark Powers mpowers at openjdk.org
Tue Oct 22 15:48:54 UTC 2024


On Tue, 22 Oct 2024 14:27:19 GMT, Sean Mullan <mullan at openjdk.org> wrote:

>> The CRL is being constructed from a fuzzed data input stream. All I know is that the name in the CertificateIssuerExtension looks like an x509.OIDName in the first test, and in the second test it looks like an x509.X400Address.
>> 
>> I can add these two comments to the test:
>> "Fuzzed data input stream looks like an x509.OIDName." and
>> "Fuzzed data input stream looks like an x509.X400Address.".
>
> Yes, I think that would be helpful, but also say that these are in the CertificateIssuerExtension so it is more clear what part of the CRL is being tested for parsing issues.

Fixed.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/20528#discussion_r1810981558


More information about the security-dev mailing list