Cwikius-Spring/spring-security
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-security.git synced 2025-06-22 20:12:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

Correct input validation for 31 rounds

Browse Source 
Closes gh-11470
This commit is contained in:
Josh Cummings 2022-07-11 14:04:39 -06:00
parent a7d21f1b34
commit 28424f8ae5
No known key found for this signature in database
GPG Key ID: A306A51F43B8E5A5
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
crypto/src/main/java/org/springframework/security/crypto/bcrypt/BCrypt.java
View File

@ -543,7 +543,7 @@ public class BCrypt {
} }
else { else {
rounds = roundsForLogRounds(log_rounds); rounds = roundsForLogRounds(log_rounds);
if (rounds < 16 || rounds > Integer.MAX_VALUE) { if (rounds < 16 || rounds > 2147483648L) {
throw new IllegalArgumentException("Bad number of rounds"); throw new IllegalArgumentException("Bad number of rounds");
} }
} }