fix(739) SignatureECDSAN destroying private key

mwiede · Jan 7, 2025 · ba66084 · ba66084
1 parent 323a82a
commit ba66084
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/main/java/com/jcraft/jsch/KeyPairECDSA.java b/src/main/java/com/jcraft/jsch/KeyPairECDSA.java
@@ -351,7 +351,8 @@ public byte[] getSignature(byte[] data) {
               .asSubclass(SignatureECDSA.class);
       SignatureECDSA ecdsa = c.getDeclaredConstructor().newInstance();
       ecdsa.init();
-      ecdsa.setPrvKey(prv_array);
+      // issue 739: prv_array could be destroyed by ecdsa signing process if its first bit is 1
+      ecdsa.setPrvKey(Arrays.copyOf(prv_array, prv_array.length));
 
       ecdsa.update(data);
       byte[] sig = ecdsa.sign();