fix: EgovARIA·EgovGeneralCryptoServiceImpl setBlockSize 0·음수 입력 검증

Foundation/org.egovframe.rte.fdl.crypto/src/main/java/org/egovframe/rte/fdl/crypto/impl/EgovARIACryptoServiceImpl.java

@@ -45,6 +45,11 @@ public void setPasswordEncoder(EgovPasswordEncoder passwordEncoder) {
     }
 
     public void setBlockSize(int blockSize) {
+        // blockSize가 0이면 encrypt(File)의 read 루프가 종료되지 않아 무한 루프에 빠지고(CWE-835),
+        // 음수이면 버퍼 할당에서 예외가 발생하므로 양수만 허용한다.
+        if (blockSize <= 0) {
+            throw new IllegalArgumentException("blockSize must be a positive number: " + blockSize);
+        }
         if (blockSize % BLOCKSIZE_MODULAR != 0) {
             blockSize += (BLOCKSIZE_MODULAR - blockSize % BLOCKSIZE_MODULAR);
         }

Foundation/org.egovframe.rte.fdl.crypto/src/main/java/org/egovframe/rte/fdl/crypto/impl/EgovGeneralCryptoServiceImpl.java

@@ -53,6 +53,11 @@ public void setPasswordEncoder(EgovPasswordEncoder passwordEncoder) {
     }
 
     public void setBlockSize(int blockSize) {
+        // blockSize가 0이면 encrypt(File)의 read 루프가 종료되지 않아 무한 루프에 빠지고(CWE-835),
+        // 음수이면 버퍼 할당에서 NegativeArraySizeException이 발생하므로 양수만 허용한다.
+        if (blockSize <= 0) {
+            throw new IllegalArgumentException("blockSize must be a positive number: " + blockSize);
+        }
         this.blockSize = blockSize;
     }
 

Foundation/org.egovframe.rte.fdl.crypto/src/test/java/org/egovframe/rte/fdl/crypto/impl/EgovCryptoBlockSizeValidationTest.java

@@ -0,0 +1,36 @@
+package org.egovframe.rte.fdl.crypto.impl;
+
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+
+import static org.junit.jupiter.api.Assertions.assertDoesNotThrow;
+import static org.junit.jupiter.api.Assertions.assertThrows;
+
+/**
+ * {@link EgovARIACryptoServiceImpl}·{@link EgovGeneralCryptoServiceImpl}의 setBlockSize가
+ * 0/음수를 거부하는지 검증한다.
+ *
+ * <p>blockSize가 0이면 encrypt(File)의 read 루프가 종료되지 않아 무한 루프(CWE-835)에 빠지고,
+ * 음수이면 버퍼 할당에서 예외가 발생한다. setBlockSize에서 양수만 허용하도록 입력을 검증한다.</p>
+ */
+class EgovCryptoBlockSizeValidationTest {
+
+    @Test
+    @DisplayName("ARIA: blockSize 0·음수는 IllegalArgumentException으로 거부한다")
+    void ariaRejectsNonPositiveBlockSize() {
+        EgovARIACryptoServiceImpl service = new EgovARIACryptoServiceImpl();
+        assertThrows(IllegalArgumentException.class, () -> service.setBlockSize(0));
+        assertThrows(IllegalArgumentException.class, () -> service.setBlockSize(-16));
+        // 양수는 정상(내부적으로 BLOCKSIZE_MODULAR 배수로 정규화)
+        assertDoesNotThrow(() -> service.setBlockSize(512));
+    }
+
+    @Test
+    @DisplayName("General: blockSize 0·음수는 IllegalArgumentException으로 거부한다")
+    void generalRejectsNonPositiveBlockSize() {
+        EgovGeneralCryptoServiceImpl service = new EgovGeneralCryptoServiceImpl();
+        assertThrows(IllegalArgumentException.class, () -> service.setBlockSize(0));
+        assertThrows(IllegalArgumentException.class, () -> service.setBlockSize(-1));
+        assertDoesNotThrow(() -> service.setBlockSize(1024));
+    }
+}

Foundation/org.egovframe.rte.fdl.logging/logs/daily/dailyRollingSample.log.2026-07-05-14-15-29

@@ -0,0 +1 @@
+2026-07-05 14:15:29,370 DEBUG [dailyLogger] DailyRollingFileAppender test