Pārlūkot izejas kodu

Correct input validation for 31 rounds

Closes gh-11470
Josh Cummings 3 gadi atpakaļ
vecāks
revīzija
bc6f494af8

+ 1 - 1
crypto/src/main/java/org/springframework/security/crypto/bcrypt/BCrypt.java

@@ -543,7 +543,7 @@ public class BCrypt {
 		}
 		else {
 			rounds = roundsForLogRounds(log_rounds);
-			if (rounds < 16 || rounds > Integer.MAX_VALUE) {
+			if (rounds < 16 || rounds > 2147483648L) {
 				throw new IllegalArgumentException("Bad number of rounds");
 			}
 		}