Integrated: 8367024: JNI exception pending in Java_sun_security_pkcs11_wrapper_PKCS11_C_1DeriveKey of p11_keymgmt.c:950

Koushik Muthukrishnan Thirupattur duke at openjdk.org
Thu Jan 15 19:05:09 UTC 2026


On Tue, 6 Jan 2026 04:20:18 GMT, Koushik Muthukrishnan Thirupattur <duke at openjdk.org> wrote:

> The method ckAssertReturnValueOK will invoke ckAssertReturnValueOK2 which makes multiple calls to JNI functions, such as FindClass or GetMethodID. These calls would be unsafe as there may be a pending exception at this time.
> So adding exception check to return immediately and do not call any further JNI functions when there is exception pending.

This pull request has now been integrated.

Changeset: e97fb0e2
Author:    Koushik Thirupattur <koushik.thirupattur at oracle.com>
Committer: Valerie Peng <valeriep at openjdk.org>
URL:       https://git.openjdk.org/jdk/commit/e97fb0e2072a16c59014599719b64e8ea52a4976
Stats:     9 lines in 1 file changed: 6 ins; 0 del; 3 mod

8367024: JNI exception pending in Java_sun_security_pkcs11_wrapper_PKCS11_C_1DeriveKey of p11_keymgmt.c:950

Reviewed-by: valeriep, hchao, djelinski

-------------

PR: https://git.openjdk.org/jdk/pull/29054


More information about the security-dev mailing list