On Mon, 3 Apr 2023 18:13:19 GMT, Matthew Donovan <d...@openjdk.org> wrote:
> Added code similar to the suggested patches for empty Handshake messages. I > also implemented tests to verify empty Handshake, Alert, and ChangeCipherSpec > messages result in expected behavior: for SSLEngineImpl, exceptions are > thrown, for SSLSockets the connection is closed. This pull request has now been integrated. Changeset: 39398075 Author: Matthew Donovan <matthew.p.dono...@oracle.com> Committer: Xue-Lei Andrew Fan <xue...@openjdk.org> URL: https://git.openjdk.org/jdk/commit/39398075b719739513b7610286e19735a8b478b1 Stats: 648 lines in 4 files changed: 646 ins; 0 del; 2 mod 8182621: JSSE should reject empty TLS plaintexts Reviewed-by: xuelei ------------- PR: https://git.openjdk.org/jdk/pull/13306
