JDK-8228835 : Memory leak in PKCS11 provider when using AES GCM
- Type: Bug
- Component: security-libs
- Sub-Component: javax.crypto:pkcs11
- Affected Version: 8,11,13,14
- Priority: P3
- Status: Resolved
- Resolution: Fixed
- OS: generic
- CPU: generic
- Submitted: 2019-07-30
- Updated: 2020-08-31
- Resolved: 2019-08-14
The Version table provides details related to the release that this issue/RFE will be addressed.
Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.
To download the current JDK release, click here.
Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.
To download the current JDK release, click here.
| JDK 11 | JDK 13 | JDK 14 | JDK 8 | Other |
|---|---|---|---|---|
| 11.0.6-oracleFixed | 13.0.3Fixed | 14 b10Fixed  |
8u241Fixed |
openjdk8u272Fixed |
Related Reports
|
Relates :
|
Description
When using AES GCM encryption/decryption impl from SunPKCS11 provider, its native parameter structure contains Iv and AAD byte arrays which should be explicitly freed after use. Current impl only frees the mechanism structure and its generic parameter pointer. It should also free the algorithm specific pointers, i.e. iv and aad, inside the memory pointed to by the parameter pointer.
Comments
|