Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-7166661

Inproper compare of sequence number in sun.security.ssl.MAC class

XMLWordPrintable

      FULL PRODUCT VERSION :
      java version "1.7.0_02"
      Java(TM) SE Runtime Environment (build 1.7.0_02-b13)
      Java HotSpot(TM) Client VM (build 22.0-b10, mixed mode)

      A DESCRIPTION OF THE PROBLEM :
      Sequence number(signed byte array) is directly compared to 0xFF value which is out of signed byte interval.

      This problem causes "seqNumOverflow" and "seqNumIsHuge" functions of MAC class to never return true. So re-handshake is never triggered.

      REGRESSION. Last worked in version 7


      REPRODUCIBILITY :
      This bug can be reproduced always.

            wetmore Bradford Wetmore
            webbuggrp Webbug Group
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: