GHSA-f659-372h-6x3x
netty-incubator-codec-ohttp's HPKEContext operations may produce empty byte[] on failures
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | io.netty.incubator:netty-incubator-codec-ohttp | < 0.0.21.Final | 0.0.21.Final |
Details
As written in the advisory (Markdown source, shown as plain text).
HKDF_expand: returns non-NULL on failure. The byte[] is filled with zeros and has no way to distinguish success from failure. Since this output is used as HKDF key material for the response AEAD, a failure silently produces an all-zero key.
When EVP_HPKE_CTX_export fails it also returns an empty byte[] array filled with zeros. This byte[] feeds directly into OHttpCrypto.createResponseAEAD(...). A silent all-zero export secret would produce a deterministic, attacker-predictable AEAD key.
References
External links from the advisory. They lead to third-party sites.