[bertman]

It's literally what the whole bug is about. From OP's article:

>This is why the very first check in the ECDSA verification algorithm is to ensure that r and s are both >= 1. Guess which check Java forgot?

[MrBuddyCasino]

Yes I just think it’s insane they fixed it without adding a test or comment.