TKSS-835: Backport JDK-8336667: IAE in DerInputStream.toByteArray

Tencent · Jul 31, 2024 · b206ad6 · b206ad6
1 parent fb86ebe
commit b206ad6
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/kona-crypto/src/main/java/com/tencent/kona/sun/security/util/DerInputStream.java b/kona-crypto/src/main/java/com/tencent/kona/sun/security/util/DerInputStream.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 1996, 2023, Oracle and/or its affiliates. All rights reserved.
+ * Copyright (c) 1996, 2024, Oracle and/or its affiliates. All rights reserved.
  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
  *
  * This code is free software; you can redistribute it and/or modify it
@@ -114,7 +114,7 @@ public DerValue getDerValue() throws IOException {
             // to the end of return value by DerIndefLenConverter::convertBytes
             // and stay inside result.buffer.
             int unused = result.buffer.length - result.end;
-            this.pos = this.data.length - unused;
+            this.pos = this.end - unused;
         } else {
             this.pos = result.end;
         }