8275151: Improved Object Identification

Reviewed-by: rhalade, jnimeh

src/java.base/share/classes/sun/security/util/ObjectIdentifier.java

@@ -684,6 +684,10 @@ public final class ObjectIdentifier implements Serializable {
     }
 
     private static void checkOidSize(int oidLength) throws IOException {
+        if (oidLength < 0) {
+            throw new IOException("ObjectIdentifier encoded length was " +
+                    "negative: " + oidLength);
+        }
         if (oidLength > MAXIMUM_OID_SIZE) {
             throw new IOException(
                     "ObjectIdentifier encoded length exceeds " +