Details
-
Bug
-
Status: Closed
-
Critical
-
Resolution: Fixed
-
2.6.0
-
Reviewed
Description
A common optimization in the io classes for Input/Output Streams is to save a single length-1 byte array to use in single byte read/write calls.
CryptoInputStream and CryptoOutputStream both attempt to follow this practice but mistakenly mark the array as static. That means that only a single instance of each can be present in a JVM safely.