Fridrich Strba 2023-05-11 13:30:12 +00:00 committed by Git OBS Bridge
parent 7ae320ff41
commit e63b91e736
3 changed files with 23 additions and 0 deletions

View File

@ -1,3 +1,11 @@
-------------------------------------------------------------------
Thu May 11 12:52:16 UTC 2023 - jsilva@suse.com
- Fix for SG#65673, bsc#1210392:
* unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
length of SNIServerName as an unsigned byte so that it can
have length up to 255 rather than 127.
-------------------------------------------------------------------
Thu May 11 07:26:21 UTC 2023 - Fridrich Strba <fstrba@suse.com>

View File

@ -176,6 +176,7 @@ Patch300: JDK-8282944.patch
Patch301: JDK-8303509.patch
Patch302: disable-doclint-by-default.patch
Patch303: alternative-tzdb_dat.patch
Patch304: unsigned-sni-server-name.patch
#
BuildRequires: alsa-lib-devel
BuildRequires: autoconf
@ -416,6 +417,7 @@ rm -rvf src/java.desktop/share/native/liblcms/lcms2*
%patch301 -p1
%patch302 -p1
%patch303 -p1
%patch304 -p1
# Extract systemtap tapsets

View File

@ -0,0 +1,13 @@
Index: jdk17u-jdk-17.0.6-10/src/java.base/share/classes/sun/security/ssl/SSLSessionImpl.java
===================================================================
--- jdk17u-jdk-17.0.6-10.orig/src/java.base/share/classes/sun/security/ssl/SSLSessionImpl.java
+++ jdk17u-jdk-17.0.6-10/src/java.base/share/classes/sun/security/ssl/SSLSessionImpl.java
@@ -408,7 +408,7 @@ final class SSLSessionImpl extends Exten
} else {
requestedServerNames = new ArrayList<>();
while (len > 0) {
- int l = buf.get();
+ int l = Byte.toUnsignedInt(buf.get());
b = new byte[l];
buf.get(b, 0, l);
requestedServerNames.add(new SNIHostName(new String(b)));