Fixes #4547 - ELFlash ArrayIndexOutOfBoundsException on invalid Cookie value

Author: jasonex7

impl/src/main/java/com/sun/faces/util/ByteArrayGuardAESCTR.java

@@ -130,6 +130,11 @@ public String decrypt(String value) throws InvalidKeyException {
 
         try {
             byte[] iv = new byte[16];
+
+            if (bytes.length < iv.length) {
+                throw new InvalidKeyException("Invalid characters in decrypted value");
+            }
+
             System.arraycopy(bytes, 0, iv, 0, iv.length);
             IvParameterSpec ivspec = new IvParameterSpec(iv);
 

impl/src/test/java/com/sun/faces/util/ByteArrayGuardAESCTRTest.java

@@ -16,10 +16,12 @@
 
 package com.sun.faces.util;
 
+import java.security.InvalidKeyException;
+import javax.xml.bind.DatatypeConverter;
 import org.junit.Test;
 
-import static org.junit.Assert.assertTrue;
 import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertTrue;
 
 
 public class ByteArrayGuardAESCTRTest {
@@ -39,5 +41,16 @@ public void testSmallerSizeBytes() throws Exception {
 
     }
 
+    @Test(expected = InvalidKeyException.class)
+    public void testDecryptValueWithoutIvBytes() throws InvalidKeyException {
+        ByteArrayGuardAESCTR sut = new ByteArrayGuardAESCTR();
+        
+        String value = "noIV";
+        byte[] bytes = DatatypeConverter.parseBase64Binary(value);
+        assertTrue(bytes.length < 16);
+
+        sut.decrypt(value);
+    }
+
 }