-
Type:
Bug
-
Resolution: Fixed
-
Priority:
P4
-
Affects Version/s: None
-
Component/s: security-libs
-
b15
| Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
|---|---|---|---|---|---|---|
| JDK-8310963 | 11.0.21 | Goetz Lindenmaier | P4 | Resolved | Fixed | b01 |
| JDK-8303065 | 11.0.20-oracle | Dukebot | P4 | Resolved | Fixed | b01 |
SHA1PRNGReseed.java has a bug. It should not call "sr.setSeed(0)" because 0 means no-op (that is, 0x0000000000000000 0 adds no entropy). If a non-zero value is used it won't read system entropy.
- backported by
-
JDK-8303065 SHA1PRNGReseed.java is calling setSeed(0)
-
- Resolved
-
-
JDK-8310963 SHA1PRNGReseed.java is calling setSeed(0)
-
- Resolved
-
- relates to
-
JDK-8247359 SecureRandom tests timeout on aarch64
-
- Closed
-
- links to
-
Commit
openjdk/jdk11u-dev/dccbde75
-
Commit
openjdk/jdk/5a51d709
-
Review
openjdk/jdk11u-dev/1987
-
Review
openjdk/jdk/3114
(2 links to)