Loading...

XML

Word

Printable

Type: Bug
Resolution: Fixed
Priority: P3
Fix Version/s: 15
Affects Version/s: 8, 11, 15
Component/s: security-libs
Labels:

Subcomponent:
javax.security
Resolved In Build:
b19
Verification:
Verified

Issue	Fix Version	Assignee	Priority	Status	Resolution	Resolved In Build
JDK-8317296	11.0.22	Yuri Nesterenko	P3	Resolved	Fixed	b01
JDK-8318359	11.0.21	Yuri Nesterenko	P3	Resolved	Fixed	master
JDK-8317321	openjdk8u402	Yuri Nesterenko	P3	Resolved	Fixed	b01
JDK-8318373	openjdk8u392	Yuri Nesterenko	P3	Resolved	Fixed	b08

In JAAS ChoiceCallback and ConfirmationCallback, arrays are not cloned when passed into a constructor or returned. This allows an external program to get access to internal fields of these classes.

backported by

JDK-8317296 Arrays should be cloned in several JAAS Callback classes

Resolved

JDK-8317321 Arrays should be cloned in several JAAS Callback classes

Resolved

JDK-8318359 Arrays should be cloned in several JAAS Callback classes

Resolved

JDK-8318373 Arrays should be cloned in several JAAS Callback classes

Resolved

csr for

JDK-8242488 Arrays should be cloned in several JAAS Callback classes

Closed

links to

Commit openjdk/jdk8u-dev/27608e1e

Commit openjdk/jdk11u-dev/059f73cf

Review openjdk/jdk8u-dev/380

Review openjdk/jdk11u-dev/2157

(4 links to)

Assignee:: Weijun Wang

Reporter:: Weijun Wang

Votes:: 0 Vote for this issue

Watchers:: 5 Start watching this issue

Created:: 2020-04-07 19:39

Updated:: 2023-10-17 15:54

Resolved:: 2020-04-13 19:05

Details

Backports

Description

Attachments

Issue Links

Activity

People

Dates