mirror of
https://github.com/openjdk/jdk.git
synced 2026-05-11 22:19:43 +00:00
8285516: clearPassword should be called in a finally try block
Reviewed-by: mullan, hchao
This commit is contained in:
parent
b849efdf15
commit
36e4df9d66
@ -867,14 +867,14 @@ public final class PKCS12KeyStore extends KeyStoreSpi {
|
||||
{
|
||||
SecretKey skey = null;
|
||||
|
||||
PBEKeySpec keySpec = new PBEKeySpec(password);
|
||||
try {
|
||||
PBEKeySpec keySpec = new PBEKeySpec(password);
|
||||
SecretKeyFactory skFac = SecretKeyFactory.getInstance("PBE");
|
||||
skey = skFac.generateSecret(keySpec);
|
||||
keySpec.clearPassword();
|
||||
} catch (Exception e) {
|
||||
throw new IOException("getSecretKey failed: " +
|
||||
e.getMessage(), e);
|
||||
throw new IOException("getSecretKey failed: " + e.getMessage(), e);
|
||||
} finally {
|
||||
keySpec.clearPassword();
|
||||
}
|
||||
return skey;
|
||||
}
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user