Merge "bouncycastle: upgrade to version 1.56" am: ae9dc88d85 am: ed012da722

am: 07a37e800c

Change-Id: Ie6a51b57d83037f0f7f1acecedc16da1c1bd6820

1 files changed, 5 insertions, 4 deletions

diff --git a/bcprov/src/main/java/org/bouncycastle/asn1/x509/SubjectKeyIdentifier.java b/bcprov/src/main/java/org/bouncycastle/asn1/x509/SubjectKeyIdentifier.java
index 5f0cd079..52e35a15 100644
--- a/bcprov/src/main/java/org/bouncycastle/asn1/x509/SubjectKeyIdentifier.java
+++ b/bcprov/src/main/java/org/bouncycastle/asn1/x509/SubjectKeyIdentifier.java
@@ -5,6 +5,7 @@ import org.bouncycastle.asn1.ASN1OctetString;
 import org.bouncycastle.asn1.ASN1Primitive;
 import org.bouncycastle.asn1.ASN1TaggedObject;
 import org.bouncycastle.asn1.DEROctetString;
+import org.bouncycastle.util.Arrays;
 
 /**
  * The SubjectKeyIdentifier object.
@@ -47,22 +48,22 @@ public class SubjectKeyIdentifier
     public SubjectKeyIdentifier(
         byte[] keyid)
     {
-        this.keyidentifier = keyid;
+        this.keyidentifier = Arrays.clone(keyid);
     }
 
     protected SubjectKeyIdentifier(
         ASN1OctetString keyid)
     {
-        this.keyidentifier = keyid.getOctets();
+        this(keyid.getOctets());
     }
 
     public byte[] getKeyIdentifier()
     {
-        return keyidentifier;
+        return Arrays.clone(keyidentifier);
     }
 
     public ASN1Primitive toASN1Primitive()
     {
-        return new DEROctetString(keyidentifier);
+        return new DEROctetString(getKeyIdentifier());
     }
 }