hutiefang76 commented on PR #4396:
URL: https://github.com/apache/hertzbeat/pull/4396#issuecomment-5943594163

   The remaining AES failure is reproducible on the unchanged upstream 
implementation. AesUtil.java and AesUtilTest.java are byte-identical to current 
master (b09616e). Running the exact default-key compatibility test 10,000 times 
produced 51 failures: a wrong AES key occasionally yields valid PKCS5 padding, 
so decryption returns garbage without throwing and never tries the default key. 
A fixed IV also reproduces this deterministically. The other four AES tests 
passed.
   
   This is outside the PostgreSQL transaction change, whose full startup suite 
already passed. I cannot rerun the upstream workflow with my current 
permissions; could a maintainer rerun backend-maven-e2e? This diagnosis does 
not mark the failed CI as passed.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to