[geronimo-security] FileCertificateRequestStore inappropriately uses
InputStream.available()
--------------------------------------------------------------------------------------------
Key: GERONIMO-4978
URL: https://issues.apache.org/jira/browse/GERONIMO-4978
Project: Geronimo
Issue Type: Bug
Security Level: public (Regular issues)
Components: security
Affects Versions: 3.0
Reporter: Nathan Beyer
The FileCertificateRequestStore.getRequest(String) method assumes that the
value returned by FileInputStream.available() is the entire length of the
stream. This is not guaranteed to be true.
Additionally, the method constructs a String from a byte[] without defining a
character encoding, which means that the default encoding of the OS is used.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
