瀏覽代碼

Correct input validation for 31 rounds

Closes gh-11470
Josh Cummings 3 年之前
父節點
當前提交
37d856dca4
共有 1 個文件被更改,包括 1 次插入1 次删除
  1. 1 1
      crypto/src/main/java/org/springframework/security/crypto/bcrypt/BCrypt.java

+ 1 - 1
crypto/src/main/java/org/springframework/security/crypto/bcrypt/BCrypt.java

@@ -543,7 +543,7 @@ public class BCrypt {
 		}
 		else {
 			rounds = roundsForLogRounds(log_rounds);
-			if (rounds < 16 || rounds > Integer.MAX_VALUE) {
+			if (rounds < 16 || rounds > 2147483648L) {
 				throw new IllegalArgumentException("Bad number of rounds");
 			}
 		}