This is an automated email from the ASF dual-hosted git repository.
markt-asf pushed a commit to branch 9.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/9.0.x by this push:
new 102a9e7c3a Use correct length for OID when parsing OCSP URLs
102a9e7c3a is described below
commit 102a9e7c3af9887b6793ed18b6c91f39762ab7c2
Author: Mark Thomas <[email protected]>
AuthorDate: Wed Sep 2 18:38:11 2026 +0100
Use correct length for OID when parsing OCSP URLs
---
java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
index 5b969886ea..f8d88beec2 100644
--- a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
+++ b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
@@ -1298,7 +1298,7 @@ public final class OpenSSLEngine extends SSLEngine
implements SSLUtil.ProtocolIn
int oidLen = parser.parseLength();
byte[] oid = new byte[oidLen];
parser.parseBytes(oid);
- if (Arrays.compareUnsigned(oid, 0, OCSP_OID.length, OCSP_OID,
0, OCSP_OID.length) == 0) {
+ if (Arrays.compareUnsigned(oid, 0, oidLen, OCSP_OID, 0,
OCSP_OID.length) == 0) {
parser.parseTag(ASN1_STRING);
int urlLen = parser.parseLength();
byte[] url = new byte[urlLen];
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
