8286533: Key X509 usages

Reviewed-by: yan
openjdk · Oct 18, 2022 · 96e3fe3 · 96e3fe3
1 parent 907ded0
commit 96e3fe3
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/java.base/share/classes/sun/security/util/DerInputStream.java b/src/java.base/share/classes/sun/security/util/DerInputStream.java
@@ -275,6 +275,9 @@ public byte[] getOctetString() throws IOException {
             throw new IOException("DER input not an octet string");
 
         int length = getDefiniteLength(buffer);
+        if (length > buffer.available())
+            throw new IOException("short read of an octet string");
+
         byte[] retval = new byte[length];
         if ((length != 0) && (buffer.read(retval) != length))
             throw new IOException("Short read of DER octet string");
@@ -499,6 +502,10 @@ private String readString(byte stringTag, String stringName,
                                   stringName + " string");
 
         int length = getDefiniteLength(buffer);
+        if (length > buffer.available())
+            throw new IOException("short read of " +
+                                  stringName + " string");
+
         byte[] retval = new byte[length];
         if ((length != 0) && (buffer.read(retval) != length))
             throw new IOException("Short read of DER " +