From b206ad6787df7e342fee8aed43d54ba12a3527f6 Mon Sep 17 00:00:00 2001 From: John Jiang Date: Wed, 31 Jul 2024 10:37:26 +0800 Subject: [PATCH] TKSS-835: Backport JDK-8336667: IAE in DerInputStream.toByteArray --- .../com/tencent/kona/sun/security/util/DerInputStream.java | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/kona-crypto/src/main/java/com/tencent/kona/sun/security/util/DerInputStream.java b/kona-crypto/src/main/java/com/tencent/kona/sun/security/util/DerInputStream.java index 55b46a4d..ad42ab57 100644 --- a/kona-crypto/src/main/java/com/tencent/kona/sun/security/util/DerInputStream.java +++ b/kona-crypto/src/main/java/com/tencent/kona/sun/security/util/DerInputStream.java @@ -1,5 +1,5 @@ /* - * Copyright (c) 1996, 2023, Oracle and/or its affiliates. All rights reserved. + * Copyright (c) 1996, 2024, Oracle and/or its affiliates. All rights reserved. * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. * * This code is free software; you can redistribute it and/or modify it @@ -114,7 +114,7 @@ public DerValue getDerValue() throws IOException { // to the end of return value by DerIndefLenConverter::convertBytes // and stay inside result.buffer. int unused = result.buffer.length - result.end; - this.pos = this.data.length - unused; + this.pos = this.end - unused; } else { this.pos = result.end; }