This is an automated email from the ASF dual-hosted git repository. markt-asf pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git
commit af1d2938447acb653ca64c701024a711c39426f9 Author: Mark Thomas <[email protected]> AuthorDate: Wed Sep 2 18:38:11 2026 +0100 Use correct length for OID when parsing OCSP URLs --- java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java index 8ab17fc5e6..cf9d38f19b 100644 --- a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java +++ b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java @@ -1298,7 +1298,7 @@ public final class OpenSSLEngine extends SSLEngine implements SSLUtil.ProtocolIn int oidLen = parser.parseLength(); byte[] oid = new byte[oidLen]; parser.parseBytes(oid); - if (Arrays.compareUnsigned(oid, 0, OCSP_OID.length, OCSP_OID, 0, OCSP_OID.length) == 0) { + if (Arrays.compareUnsigned(oid, 0, oidLen, OCSP_OID, 0, OCSP_OID.length) == 0) { parser.parseTag(ASN1_STRING); int urlLen = parser.parseLength(); byte[] url = new byte[urlLen]; --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
