Thanks again for review Tony. I think you raise a good point and should give some performance gain.

for line 676: maybe this :

                 byte[] copy = Arrays.copyOf(output, len);
                 if (decrypting) {
                     Arrays.fill(output, (byte) 0x00);
                 }
                 return copy;


perhaps the same again for around line 852 :
                 byte[] copy = Arrays.copyOf(output, len);
                 if (decrypting) {
                     Arrays.fill(output, (byte) 0x00);
                 }
                 return copy;

==

Any other reviews/comments from folks before I submit final build/test & webrev ?

Regards,
Sean.

On 01/08/18 15:55, Anthony Scarpino wrote:


My only comment is if it makes sense to have the change at 676 to also only null out on decrypt?

Otherwise I'm fine with the changes

Tony

On 07/31/2018 02:04 AM, Seán Coffey wrote:
Thanks for review Tony. Comments inline..

On 27/07/18 21:02, Anthony Scarpino wrote:
If we are going to add more, here are two more ton consider:

- It looks like there is another Arrays.copyOf() on doFinal() line 851
Good point.
- doFinal()
at line 897 there might be something that should be done with 'buffer'. In particular as a result of line 963's arraycopy().
Yes - I've identified two areas where we can be proactive about nulling out 'buffer' contents. That's around the same time where we reset 'buffered' to 0. See lines 777 and 967

http://cr.openjdk.java.net/~coffeys/webrev.8207775.v3/webrev/

regards,
Sean.

Tony


On 07/27/2018 08:29 AM, Seán Coffey wrote:
Thanks Tony. If it's alright with you, I'd like to make one more edit for this change.

http://cr.openjdk.java.net/~coffeys/webrev.8207775.v2/webrev/

There's a condition where we can null out an array early if we're returning a copy. See lines 671-683

Regards,
Sean.

On 26/07/18 17:42, Anthony Scarpino wrote:
On 07/26/2018 07:36 AM, Seán Coffey wrote:
https://bugs.openjdk.java.net/browse/JDK-8207775

Simple enough fix to null out some internal buffers once they're no longer required.

webrev : http://cr.openjdk.java.net/~coffeys/webrev.8207775/webrev/

regards,
Sean.


that looks fine..

Tony





Reply via email to