When using HttpClient to make requests to HTTPS resources, there is an issue 
where the entire file is being downloaded into memory without the ability to 
limit the buffer size.
If the SSLEngine cannot decode the entire buffer due to the algorithm's 
blocking nature, it returns a decoded chunk of data and BUFFER_UNDERFLOW 
status, which leads to SSLFlowDelegate.Reader requesting more data despite the 
output queue being full.

-------------

Commit messages:
 - 8308144: HttpClient - uncontrolled memory consumption in 
SSLFlowDelegate.Reader

Changes: https://git.openjdk.org/jdk/pull/14159/files
 Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=14159&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8308144
  Stats: 190 lines in 2 files changed: 188 ins; 0 del; 2 mod
  Patch: https://git.openjdk.org/jdk/pull/14159.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/14159/head:pull/14159

PR: https://git.openjdk.org/jdk/pull/14159

Reply via email to