RFR: 8359388: Stricter checking for cipher transformations [v4]
Valerie Peng
valeriep at openjdk.org
Wed Jul 2 07:44:43 UTC 2025
On Tue, 1 Jul 2025 22:42:11 GMT, Sean Mullan <mullan at openjdk.org> wrote:
>> Valerie Peng has updated the pull request incrementally with one additional commit since the last revision:
>>
>> Updated test per 2nd round of Mikhail's review comments.
>
> src/java.base/share/classes/javax/crypto/Cipher.java line 479:
>
>> 477: list.add(new Transform(parts[0], "//" + parts[2], parts[1], null));
>> 478: list.add(new Transform(parts[0], "", parts[1], parts[2]));
>> 479: return list;
>
> Does this need to be immutable or does it not matter?
It's only used internally within the Cipher class, so I don't think it matters, but we can use the `List.of()` to construct it as well for consistency.
-------------
PR Review Comment: https://git.openjdk.org/jdk/pull/25808#discussion_r2179357215
More information about the security-dev
mailing list