[Bug crypto/28204] New: PBEKeySpec incorrectly deletes the originally passed password array

[mwringe at redhat dot com]

Within javax.crypto.spec.PBEKeySpec, the password attribute references the
passed password array. As such, when the clear password method is called in
PBEKeySpec, the original password array is also cleared.

For Example:

char[] password = "foobar".toCharArray();
PBEKeySpec keySpec = new PBEKeySpec(password); 
keySpec.clearPassword();
System.out.println (password);

The char array printed will be empty, when it should still contain 'foobar'.


-- 
           Summary: PBEKeySpec incorrectly deletes the originally passed
                    password array
           Product: classpath
           Version: 0.92
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: crypto
        AssignedTo: csm at gnu dot org
        ReportedBy: mwringe at redhat dot com


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28204