`sun.security.util.DerIndefLenConverter#convertBytes` does not perform sufficient checks after calling `#parseValue`, which can overflow `dataPos` or make it exceed `dataSize`. This can lead to an `ArrayIndexOutOfBoundsException`.
The fix is to ensure `dataPos` is in the valid range `[0,dataSize]` after the call to `parseValue`. ------------- Commit messages: - 8267086: Fix ArrayIndexOutOfBoundsException in DerIndefLenConverter Changes: https://git.openjdk.java.net/jdk/pull/4058/files Webrev: https://webrevs.openjdk.java.net/?repo=jdk&pr=4058&range=00 Issue: https://bugs.openjdk.java.net/browse/JDK-8267086 Stats: 4 lines in 1 file changed: 4 ins; 0 del; 0 mod Patch: https://git.openjdk.java.net/jdk/pull/4058.diff Fetch: git fetch https://git.openjdk.java.net/jdk pull/4058/head:pull/4058 PR: https://git.openjdk.java.net/jdk/pull/4058
