jglobus/JGlobus — pull request #49 by kofemann (2012-11-27 14:07:48+00:00)
Title: validate ssl record length 

in some cases we get proxy certificates which produces too big SSL records resulting to:

java.lang.NegativeArraySizeException: null
at org.globus.gsi.gssapi.net.impl.GSIGssInputStream.readToken(GSIGssInputStream.java:79) ~[cog-jglobus-1.8.0-1.jar:na]
at org.globus.gsi.gssapi.net.impl.GSIGssInputStream.readHandshakeToken(GSIGssInputStream.java:59) ~[cog-jglobus-1.8.0-1.jar:na]
at org.globus.gsi.gssapi.net.impl.GSIGssSocket.readToken(GSIGssSocket.java:65) ~[cog-jglobus-1.8.0-1.jar:na]
at org.globus.gsi.gssapi.net.GssSocket.authenticateServer(GssSocket.java:127) ~[cog-jglobus-1.8.0-1.jar:na]
at org.globus.gsi.gssapi.net.GssSocket.startHandshake(GssSocket.java:147) ~[cog-jglobus-1.8.0-1.jar:na]

While problem observed with jglobus-1.8 it still exist in 2.0.
This simple fix validated record size and throws IOException allowed size is excided.