This is an automated email from the ASF dual-hosted git repository.
markt-asf pushed a commit to branch 10.1.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/10.1.x by this push:
new 548da47e5f Use correct length for OID when parsing OCSP URLs
548da47e5f is described below
commit 548da47e5f6d0295f62218e5a904b60729a39463
Author: Mark Thomas <[email protected]>
AuthorDate: Wed Sep 2 18:38:11 2026 +0100
Use correct length for OID when parsing OCSP URLs
---
java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
index 2039b301b7..535e32d7da 100644
--- a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
+++ b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
@@ -1298,7 +1298,7 @@ public final class OpenSSLEngine extends SSLEngine
implements SSLUtil.ProtocolIn
int oidLen = parser.parseLength();
byte[] oid = new byte[oidLen];
parser.parseBytes(oid);
- if (Arrays.compareUnsigned(oid, 0, OCSP_OID.length, OCSP_OID,
0, OCSP_OID.length) == 0) {
+ if (Arrays.compareUnsigned(oid, 0, oidLen, OCSP_OID, 0,
OCSP_OID.length) == 0) {
parser.parseTag(ASN1_STRING);
int urlLen = parser.parseLength();
byte[] url = new byte[urlLen];
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
