[JDK-8217344] Make comparison overflow-aware in ECDHKeyAgreement.engineGenerateSecret() - Java Bug System

XML

Word

Printable

Details

Type: Bug
Status: Resolved
Priority: P4
Resolution: Fixed
Affects Version/s: 8, 11, 12
Fix Version/s: 13
Component/s: security-libs
Labels:
- noreg-cleanup
- noreg-hard

Subcomponent:
javax.crypto
Resolved In Build:
b05

Description

This is analogous to what was done in XDHKeyAgreement::engineGenerateSecret via ~~JDK-8201317~~.

- if (offset + secretLen > sharedSecret.length) {
+ if (secretLen > sharedSecret.length - offset) {

Attachments

Activity

People

Assignee:

Ivan Gerasimov

Reporter:

Ivan Gerasimov

Votes:

0 Vote for this issue

Watchers:

1 Start watching this issue

Dates

Created:

2019-01-17 13:22

Updated:

2019-01-28 12:44

Resolved:

2019-01-18 15:47