On Thu, 31 Jul 2025 07:06:04 GMT, Valerie Peng <valer...@openjdk.org> wrote:
>> src/java.base/share/classes/sun/security/util/CryptoAlgorithmConstraints.java >> line 83: >> >>> 81: } >>> 82: String service = dk.substring(0, idx); >>> 83: String algo = dk.substring(idx + 1); >> >> You should check for invalid syntax such as ".algo" or "service." > > Definitely, thanks for the good catch~ This would throw `IndexOutOfBoundsException` on `.` ------------- PR Review Comment: https://git.openjdk.org/jdk/pull/26377#discussion_r2267063161