Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8013855

DigestMD5Client has not checked RealmChoiceCallback value

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • P4
    • 8
    • 5.0, 6, 7, 8
    • security-libs
    • None
    • 5.0
    • b91
    • Verified

    Description

      In DigestMD5Client.java, we just use the return value of a RealmChoiceCallback directly without validating it

         negotiatedRealm = realmTokens[ccb.getSelectedIndexes()[0]];

      an NPE or ArrayIndexOOBE might be thrown.

      Attachments

        Activity

          People

            weijun Weijun Wang
            weijun Weijun Wang
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: