On Fri, 30 Oct 2026 06:12:01 GMT, Timofei Fedotov <[email protected]> wrote:
> EdDSAPublicKeyImpl(byte[]) reads the last byte of the encoded point before > invoking checkLength(). An empty subjectPublicKey BIT STRING produces a > zero-length array and causes an access at index -1. > > The error is reachable through KeyFactory.generatePublic() with an > X509EncodedKeySpec and through certificate parsing that decodes an EdDSA > SubjectPublicKeyInfo. A minimal Ed25519 SubjectPublicKeyInfo reproducer is > the DER byte sequence 300a300506032b6570030100. > > A malformed encoded key must be rejected with the normal checked key-parsing > exception rather than an array indexing exception. > > --------- > - [x] I confirm that I make this contribution in accordance with the [OpenJDK > Interim AI Policy](https://openjdk.org/legal/ai). Done. ------------- PR Comment: https://git.openjdk.org/jdk/pull/33641#issuecomment-6523138447
