archive/jdk
1
0
Fork 0
mirror of https://github.com/openjdk/jdk.git synced 2025-08-28 23:34:52 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

8285404: RSA signature verification should reject non-DER OCTET STRING

Browse source 
Reviewed-by: valeriep
This commit is contained in:
Weijun Wang 2022-04-26 20:47:59 +00:00
parent 110edd9999
commit 14e7d91199
2 changed files with 7 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
src/java.base/share/classes/sun/security/rsa/RSAUtil.java
View file

@ -200,6 +200,9 @@ public class RSAUtil {
if (algId.getEncodedParams() != null) {
throw new IOException("Unexpected AlgorithmId parameters");
}
if (values[1].isConstructed()) {
throw new IOException("Unexpected constructed digest value");
}
byte[] digest = values[1].getOctetString();
return digest;
}