[jboss-cvs] Picketbox SVN: r173 - trunk/security-jboss-sx/jbosssx/src/main/java/org/jboss/resource/security.

[jboss-cvs-commits at lists.jboss.org]

Author: mmoyses
Date: 2011-02-04 07:34:07 -0500 (Fri, 04 Feb 2011)
New Revision: 173

Modified:
   trunk/security-jboss-sx/jbosssx/src/main/java/org/jboss/resource/security/SecureIdentityLoginModule.java
Log:
SECURITY-563: fix for negative numbers

Modified: trunk/security-jboss-sx/jbosssx/src/main/java/org/jboss/resource/security/SecureIdentityLoginModule.java
===================================================================
--- trunk/security-jboss-sx/jbosssx/src/main/java/org/jboss/resource/security/SecureIdentityLoginModule.java	2011-02-03 20:48:53 UTC (rev 172)
+++ trunk/security-jboss-sx/jbosssx/src/main/java/org/jboss/resource/security/SecureIdentityLoginModule.java	2011-02-04 12:34:07 UTC (rev 173)
@@ -187,6 +187,14 @@
          {
             encoding[i + pad] = old[i];
          }
+         //SECURITY-563: handle negative numbers
+         if (n.signum() == -1)
+         {
+            for (int i = 0; i < newLength - length; i++)
+            {
+               encoding[i] = (byte) -1;
+            }
+         }
       }
       
       Cipher cipher = Cipher.getInstance("Blowfish");