Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-7024767

Some unquoted special character are allowed by X500Principal constructor

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: P4 P4
    • 8
    • 6
    • security-libs
    • None

      BNF RFC 2253 introduces concewpt of special characters that can occur in the attribute value only if they are escaped by "\".

      Special characters are following: "," / "=" / "+" / "<" / ">" / "#" / ";"

      However following constructor calls:

      new X500Principal("CN=<");
      new X500Principal("CN=>");
      new X500Principal("CN==");

      do not cause IAE

      Note, that subsequent gerName() call returns escaped special characters.

      For example, (new X500Principal("CN==")).getName() returns "CN=\\="

            mullan Sean Mullan
            sreznick Sergey Reznick (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: