-
Type:
Bug
-
Resolution: Fixed
-
Priority:
P4
-
Affects Version/s: 7, 8
-
Component/s: security-libs
-
b06
-
generic
-
generic
-
Verified
| Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
|---|---|---|---|---|---|---|
| JDK-8245700 | openjdk8u262 | Andrew Hughes | P4 | Resolved | Fixed | b04 |
| JDK-8238462 | 8u261 | Sean Coffey | P4 | Resolved | Fixed | b01 |
| JDK-8246945 | emb-8u261 | Sean Coffey | P4 | Resolved | Fixed | team |
| JDK-8238464 | 7u271 | Sean Coffey | P4 | Resolved | Fixed | b01 |
| JDK-8250698 | openjdk7u | Andrew Hughes | P4 | Resolved | Fixed | master |
sun.security.util.DerInputStream.getUnalignedBitString() tries to read DER-encoded bit string, but it does not check that length tag is zero or negative. As a result, NegativeArraySizeException can be thrown.
- backported by
-
JDK-8238462 NegativeArraySizeException in sun.security.util.DerInputStream.getUnalignedBitString()
-
- Resolved
-
-
-
- Resolved
-
-
-
- Resolved
-
-
-
- Resolved
-
-
-
- Resolved
-