RFR: 8367024: JNI exception pending in Java_sun_security_pkcs11_wrapper_PKCS11_C_1DeriveKey of p11_keymgmt.c:950 [v2]

Koushik Muthukrishnan Thirupattur duke at openjdk.org
Wed Jan 7 21:05:55 UTC 2026


> The method ckAssertReturnValueOK will invoke ckAssertReturnValueOK2 which makes multiple calls to JNI functions, such as FindClass or GetMethodID. These calls would be unsafe as there may be a pending exception at this time.
> So adding exception check to return immediately and do not call any further JNI functions when there is exception pending.

Koushik Muthukrishnan Thirupattur has updated the pull request incrementally with one additional commit since the last revision:

  8367024: Addressing review comments

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/29054/files
  - new: https://git.openjdk.org/jdk/pull/29054/files/5540f9d4..c0eba306

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=29054&range=01
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=29054&range=00-01

  Stats: 10 lines in 1 file changed: 6 ins; 3 del; 1 mod
  Patch: https://git.openjdk.org/jdk/pull/29054.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/29054/head:pull/29054

PR: https://git.openjdk.org/jdk/pull/29054


More information about the security-dev mailing list