Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8294983

SSLEngine throws ClassCastException during handshake

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: P4 P4
    • 21
    • 19
    • security-libs
    • b22
    • generic
    • generic
    • Verified

      A fuzzed client hello request causes a CCE being thrown:

      Exception in thread "main" java.lang.ClassCastException: class sun.security.ssl.ServerHandshakeContext cannot be cast to class sun.security.ssl.ClientHandshakeContext (sun.security.ssl.ServerHandshakeContext and sun.security.ssl.ClientHandshakeContext are in module java.base of loader 'bootstrap')
      at java.base/sun.security.ssl.HelloRequest$HelloRequestConsumer.consume(HelloRequest.java:174)
      at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:396)
      at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:480)
      at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1273)
      at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1260)
      at java.base/java.security.AccessController.doPrivileged(AccessController.java:712)
      at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask.run(SSLEngineImpl.java:1205)
      at SSLEngineServerReadFile.runDelegatedTasks(SSLEngineServerReadFile.java:123)
      at SSLEngineServerReadFile.runDemo(SSLEngineServerReadFile.java:94)
      at SSLEngineServerReadFile.main(SSLEngineServerReadFile.java:46)

        1. ssl19_handshake_CCE
          0.5 kB
          Marc Schönefeld
        2. SSLEngineServerReadFile.java
          4 kB
          Marc Schönefeld
        3. testkeys
          4 kB
          Marc Schönefeld

            kdriver Kevin Driver
            mschoene Marc Schönefeld
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

              Created:
              Updated:
              Resolved: