1 /*
2 * Copyright (c) 2014, Oracle and/or its affiliates. All rights reserved.
3 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
4 *
5 * This code is free software; you can redistribute it and/or modify it
6 * under the terms of the GNU General Public License version 2 only, as
7 * published by the Free Software Foundation.
8 *
9 * This code is distributed in the hope that it will be useful, but WITHOUT
10 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
11 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
12 * version 2 for more details (a copy is included in the LICENSE file that
13 * accompanied this code).
14 *
15 * You should have received a copy of the GNU General Public License version
16 * 2 along with this work; if not, write to the Free Software Foundation,
17 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
18 *
19 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
20 * or visit www.oracle.com if you need additional information or have any
21 * questions.
22 */
23
24 /*
25 * @test
26 * @bug 8048073
27 * @summary Cannot read ccache entry with a realm-less service name
28 * @modules java.security.jgss/sun.security.krb5
29 * java.security.jgss/sun.security.krb5.internal.ccache
30 * @compile -XDignore.symbol.file EmptyRealmCC.java
31 * @run main EmptyRealmCC
32 */
33 import java.nio.file.Files;
34 import java.nio.file.Paths;
35
36 import sun.security.krb5.internal.ccache.CredentialsCache;
37
38 public class EmptyRealmCC {
39 public static void main(String[] args) throws Exception {
40 byte[] ccache = TimeInCCache.ccache;
41
42 // The service name starts at 0x52:
43 //
44 // 0050: 00 00 00 02 00 00 00 0A 4D 41 58 49 2E 4C
45 // ----------- -----------
46 // 0060: 4F 43 41 4C 00 00 00 06 6B 72 62 74 67 74 00 00
47 // ----------- -----
48 // 0070: 00 0A 4D 41 58 49 2E 4C 4F 43 41 4C
49 // -----
50 //
51 // which contains 2 (the length of names), a 10-byte realm, a 6-byte
52 // name[0], and a 10-byte name[1].
53
54 // We will empty the realm, and pack the realm string to another
55 // name (6-byte ".LOCAL"). Finally "krbtgt/MAXI.LOCAL@MAXI.LOCAL"
56 // becomes ".LOCAL/krbtgt/MAXI.LOCAL@".
57
58 // length of names is now 3
59 ccache[0x55] = 3;
60 // The empty realm
61 System.arraycopy(new byte[4], 0, ccache, 0x56, 4);
62 // Length of inserted name is 6
63 System.arraycopy(new byte[]{0,0,0,6}, 0, ccache, 0x5A, 4);
64
65 Files.write(Paths.get("tmpcc"), TimeInCCache.ccache);
66 if (CredentialsCache.getInstance("tmpcc").getCredsList() != null) {
67 throw new Exception("Nothing should be there");
68 }
69 }
70 }