8234267: DelegationPermission implementation doesn't completely follow the updated specification

Reviewed-by: xuelei

src/java.security.jgss/share/classes/javax/security/auth/kerberos/DelegationPermission.java

@@ -109,29 +109,39 @@ public final class DelegationPermission extends BasicPermission
      */
     private void init(String target) {
 
-        StringTokenizer t = null;
+        // 7 tokens in a string:
-        if (!target.startsWith("\"")) {
+        //    "subordinate@R1" "service@R2"
-            throw new IllegalArgumentException
+        //    1<------2----->345<----6--->7
-                ("service principal [" + target +
+        StringTokenizer t = new StringTokenizer(target, "\"", true);
-                 "] syntax invalid: " +
+        try {
-                 "improperly quoted");
+            if (!t.nextToken().equals("\"")) { // 1
-        } else {
+                throw new IllegalArgumentException("Illegal input [" + target
-            t = new StringTokenizer(target, "\"", false);
+                        + "]: improperly quoted");
-            subordinate = t.nextToken();
-            switch (t.countTokens()) {
-                case 2:
-                    t.nextToken();  // bypass whitespace
-                    service = t.nextToken();
-                    break;
-                case 0:
-                    throw new IllegalArgumentException
-                            ("service principal not provided");
-                default:
-                    throw new IllegalArgumentException
-                            ("service principal [" + t.nextToken() +
-                            "] syntax invalid: " +
-                            "improperly quoted");
             }
+            subordinate = t.nextToken(); // 2
+            if (subordinate.equals("\"")) {
+                throw new IllegalArgumentException("Illegal input [" + target
+                        + "]: bad subordinate name");
+            }
+            t.nextToken(); // 3
+            if (!t.nextToken().trim().isEmpty()) { // 4
+                throw new IllegalArgumentException("Illegal input [" + target
+                        + "]: improperly separated");
+            }
+            t.nextToken(); // 5
+            service = t.nextToken(); // 6
+            if (service.equals("\"")) {
+                throw new IllegalArgumentException("Illegal input [" + target
+                        + "]: bad service name");
+            }
+            t.nextToken(); // 7
+        } catch (NoSuchElementException e) {
+            throw new IllegalArgumentException("Illegal input [" + target
+                    + "]: not enough input");
+        }
+        if (t.hasMoreTokens()) {
+            throw new IllegalArgumentException("Illegal input [" + target
+                    + "]: extra input");
         }
     }
 

test/jdk/javax/security/auth/kerberos/DelegationPermissionInit.java

@@ -22,15 +22,60 @@
  */
 
 import javax.security.auth.kerberos.DelegationPermission;
+import java.util.List;
 
 /*
  * @test
- * @bug 8231196
+ * @bug 8231196 8234267
- * @summary DelegationPermission allows to create an instance that thows NPE on ::equals call
+ * @summary DelegationPermission input check
- * @run main/fail DelegationPermissionInit
  */
 public class DelegationPermissionInit {
-    public static void main(String[] args) {
+    public static void main(String[] args) throws Exception {
-        new DelegationPermission("\"user@REALM\"");
+        var goodOnes = List.of(
+                "\"aaa\" \"bbb\"",
+                "\"aaa\"  \"bbb\""
+        );
+        var badOnes = List.of(
+                "\"user@REALM\"",
+                "\"\"\" \"bbb\"",
+                "\"aaa\" \"\"\"",
+                "\"\"\" \"\"\"",
+                "\"aaa\" \"bbb",
+                "\"\"aaa\"\" \"\"bbb\"\"",
+                "\"aaa\" \"bbb\"\"\"",
+                "\"aaa\"-\"bbb\"",
+                "\"aaa\" - \"bbb\"",
+                "\"aaa\"- \"bbb\"",
+                "\"aaa\" \"bbb\"  ",
+                "aaa\" \"bbb\"  "
+        );
+        boolean failed = false;
+        for (var good : goodOnes) {
+            System.out.println(">>> " + good);
+            try {
+                new DelegationPermission(good);
+            } catch (Exception e) {
+                e.printStackTrace(System.out);
+                System.out.println("Failed");
+                failed = true;
+            }
+        }
+        for (var bad : badOnes) {
+            System.out.println(">>> " + bad);
+            try {
+                new DelegationPermission(bad);
+                System.out.println("Failed");
+                failed = true;
+            } catch (IllegalArgumentException e) {
+                e.printStackTrace(System.out);
+            } catch (Exception e) {
+                e.printStackTrace(System.out);
+                System.out.println("Failed");
+                failed = true;
+            }
+        }
+        if (failed) {
+            throw new Exception("Failed");
+        }
     }
 }