RFR 8246193: Possible NPE in ENC-PA-REP search in AS-REQ

Martin Balao mbalao at redhat.com
Sun May 31 00:34:22 UTC 2020


On 5/30/20 8:54 AM, Weijun Wang wrote:
> Please take a review at
> 
>    http://cr.openjdk.java.net/~weijun/8246193/webrev.00/
> 
> While searching for ENC-PA-REP in the PA-DATA list of AS-REQ, it's possible there is no PA-DATA at all. This could happen when preauth is turned off.
> 

I'm not a JDK main line reviewer BUT I've analyzed this problem and the
fix looks good to me.

Regards,
Martin.-



More information about the security-dev mailing list