eclipse-ee4j#23424 ejb30/sec TCK failures

Copy the OID to buffer excluding the name Signed-off-by: hussainnm <hussain.nm@cognizant.com>
hussainnm · Mar 20, 2021 · 82104e6 · 82104e6
1 parent 3ac0020
commit 82104e6
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/appserver/security/ejb.security/src/main/java/com/sun/enterprise/iiop/security/GSSUtils.java b/appserver/security/ejb.security/src/main/java/com/sun/enterprise/iiop/security/GSSUtils.java
@@ -376,9 +376,11 @@ private static int verifyTokenHeader(Oid oid, byte[] token) throws GSSException
         if (token[index] != 0x06)
             throw new GSSException(GSSException.DEFECTIVE_TOKEN);
 
-        byte[] buf = new byte[token.length - index];
+        // add first two bytes to the MECH_OID_LEN
+        int oidlen = token[index+1] + 2;
+        byte[] buf = new byte[oidlen];
 
-        System.arraycopy(token, index, buf, 0, token.length - index);
+        System.arraycopy(token, index, buf, 0, oidlen);
 
         Oid mechoid = getOID(buf);