Skip to content

[JENKINS-47500] Secret.decrypt launches ArrayIndexOutOfBoundsException when data is "{}" #22373

Closed

Description

@jenkins-infra-bot

Since Jenkins LTS 2.32.2

There is no array length check so an ArrayIndexOutOfBoundsException is launched when data is "{}".

https://github.com/jenkinsci/jenkins/blob/jenkins-2.32.2/core/src/main/java/hudson/util/Secret.java#L170-L177


Originally reported by escoem, imported from: Secret.decrypt launches ArrayIndexOutOfBoundsException when data is "{}"
  • assignee: escoem
  • status: Resolved
  • priority: Minor
  • component(s): core
  • label(s): robustness
  • resolution: Fixed
  • resolved: 2017-10-23T10:20:28+00:00
  • votes: 0
  • watchers: 2
  • imported: 2025-11-24
Raw content of original issue

Since Jenkins LTS 2.32.2

There is no array length check so an ArrayIndexOutOfBoundsException is launched when data is "{}".

https://github.com/jenkinsci/jenkins/blob/jenkins-2.32.2/core/src/main/java/hudson/util/Secret.java#L170-L177

Activity

  1. jenkins-infra-bot commented on Oct 18, 2017

    @jenkins-infra-bot
    Author
  2. jenkins-infra-bot commented on Oct 23, 2017

    @jenkins-infra-bot
    Author
    escoem:

    The PR has been merged

    #3097

  3. jenkins-infra-bot commented on Oct 23, 2017

    @jenkins-infra-bot
    Author
    jglick:
    • Original comment link
    • Raw content of original comment:

      Do not see any particular need for something like this to be backported; there should be no user impact under normal conditions IIUC.

    Do not see any particular need for something like this to be backported; there should be no user impact under normal conditions IIUC.

  4. removed
    bugFor changelog: Minor bug. Will be listed after features
    on Nov 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions