IZ92411: DERINDEFLENCONVERTER.JAVA.CONVERTINDEFTODEF( ) FAILURE

APAR status

• Closed as program error.

Error description

• Error Message: The following exception occurs in ContentInfo
  parsing for EnvelopedData containing indefinite length encoding:
  
  java.lang.RuntimeException: java.io.IOException:
  DerIndefLenConverter.convertIndefToDef failed
          at
  com.ibm.security.util.DerInputStream.init(DerInputStream.java:11
  8)
          at
  com.ibm.security.util.DerInputStream.<init>(DerInputStream.java:
  85)
          at
  com.ibm.security.pkcsutil.PKCSDerObject.decode(PKCSDerObject.jav
  a:249
  )
          at
  com.ibm.security.pkcsutil.PKCSDerObject.read(PKCSDerObject.java:
  297)
          at
  com.ibm.security.pkcsutil.PKCSDerObject.<init>(PKCSDerObject.jav
  a:129
  )
          at
  com.ibm.security.pkcs7.ContentInfo.<init>(ContentInfo.java:392)
          at pkcs.ParsingTest.main(ParsingTest.java:8)
  Caused by: java.io.IOException:
  DerIndefLenConverter.convertIndefToDef failed
          ... 7 more
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• The while loop which processes the buffer containing the
  ContentInfo object never checks if the buffer has available data
  to read. When it comes to the end of the buffer, it keeps
  reading, and the exception occurs.
  

Problem conclusion

• This defect will be fixed in:
  6.0.0 SR10
  5.0.0 SR12 FP5
  1.4.2 SR14
  .
  The while loop has been modified to check for available data
  before reading, and to test the encoded data for
  "end-of-content".
  .
  To obtain the fix:
  Install build 20110308 or later
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  IZ92283

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA 5 SECURITY

• Fixed component ID

  620500125

Applicable component levels

• R500 PSN

     UP