8297972: Poly1305 Endianness on ByteBuffer not enforced

Reviewed-by: jnimeh

Author: vpaprotsk

src/java.base/share/classes/sun/security/util/math/intpoly/IntegerPolynomial1305.java

@@ -127,13 +127,16 @@ protected void square(long[] a, long[] r) {
     @Override
     protected void encode(ByteBuffer buf, int length, byte highByte,
                           long[] result) {
+        ByteOrder currOrder = buf.order();
+        buf.order(ByteOrder.LITTLE_ENDIAN);
         if (length == 16) {
             long low = buf.getLong();
             long high = buf.getLong();
             encode(high, low, highByte, result);
         } else {
             super.encode(buf, length, highByte, result);
         }
+        buf.order(currOrder);
     }
 
     protected void encode(long high, long low, byte highByte, long[] result) {

test/jdk/com/sun/crypto/provider/Cipher/ChaCha20/unittest/java.base/com/sun/crypto/provider/Poly1305IntrinsicFuzzTest.java

@@ -103,20 +103,17 @@ static void fastUpdate(Poly1305 authenticator, Random rnd, byte[] message, int o
                                 authenticator.engineUpdate(message, offset, len);
                                 break;
                         case 1: // ByteArray with backing array
-                                buf = ByteBuffer.wrap(message, offset, len)
-                                                .order(java.nio.ByteOrder.LITTLE_ENDIAN);
+                                buf = ByteBuffer.wrap(message, offset, len);
                                 authenticator.engineUpdate(buf);
                                 break;
                         case 2: // ByteArray with backing array (non-zero position)
                                 buf = ByteBuffer.wrap(message, 0, len+offset)
-                                                .order(java.nio.ByteOrder.LITTLE_ENDIAN)
                                                 .position(offset);
                                 authenticator.engineUpdate(buf);
                                 break;
                         case 3: // ByteArray without backing array (wont be sent to intrinsic)
                                 buf = ByteBuffer.wrap(message, offset, len)
-                                                .asReadOnlyBuffer()
-                                                .order(java.nio.ByteOrder.LITTLE_ENDIAN);
+                                                .asReadOnlyBuffer();
                                 authenticator.engineUpdate(buf);
                                 break;
                 }