Cwikius-Spring/spring-security
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-security.git synced 2025-02-26 01:14:58 +00:00
Code Issues Packages Projects Releases Wiki Activity

Correct input validation for 31 rounds

Browse Source 
Closes gh-11470
This commit is contained in:
Josh Cummings 2022-07-11 14:04:39 -06:00
parent 3f13fa0285
commit ba0f8ec3ef
No known key found for this signature in database
GPG Key ID: A306A51F43B8E5A5
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
crypto/src/main/java/org/springframework/security/crypto/bcrypt/BCrypt.java
View File

@ -543,7 +543,7 @@ public class BCrypt {
}
else {
rounds = roundsForLogRounds(log_rounds);
if (rounds < 16 || rounds > Integer.MAX_VALUE) {
if (rounds < 16 || rounds > 2147483648L) {
throw new IllegalArgumentException("Bad number of rounds");
}
}