This is an automated email from the ASF dual-hosted git repository.
markt-asf pushed a commit to branch 11.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/11.0.x by this push:
new 3b35393849 Use correct length for OID when parsing OCSP URLs
3b35393849 is described below
commit 3b3539384960f62ea6a7fee89dd7dbf631070c51
Author: Mark Thomas <[email protected]>
AuthorDate: Wed Sep 2 18:38:11 2026 +0100
Use correct length for OID when parsing OCSP URLs
---
java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
index 37eb0aab94..0c3dd2c46a 100644
--- a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
+++ b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
@@ -1298,7 +1298,7 @@ public final class OpenSSLEngine extends SSLEngine
implements SSLUtil.ProtocolIn
int oidLen = parser.parseLength();
byte[] oid = new byte[oidLen];
parser.parseBytes(oid);
- if (Arrays.compareUnsigned(oid, 0, OCSP_OID.length, OCSP_OID,
0, OCSP_OID.length) == 0) {
+ if (Arrays.compareUnsigned(oid, 0, oidLen, OCSP_OID, 0,
OCSP_OID.length) == 0) {
parser.parseTag(ASN1_STRING);
int urlLen = parser.parseLength();
byte[] url = new byte[urlLen];
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
