Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-9741

Elytron, ensure BSDUnixDESCryptPasswordImpl doesn't suffer with sign-extension bug

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • 7.1.0.DR17
    • 7.1.0.DR14
    • Security
    • None

    Description

      shifts += keyShifts[i];
      

      should be also ensured by

      shifts += keyShifts[i] & 0xff;
      

      True is array keyShifts does not contain any negative value, but it doesn't neither IP or keyPerm, which are ensured ?

      This follow up https://issues.jboss.org/browse/JBEAP-8505

      Attachments

        Issue Links

          Activity

            People

              rhn-support-ivassile Ilia Vassilev
              mchoma@redhat.com Martin Choma
              Martin Choma Martin Choma
              Martin Choma Martin Choma
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: