8219775: Certificate validation improvements

Reviewed-by: ascarpino, ssahoo, skoivu

src/share/classes/sun/security/util/DerIndefLenConverter.java

@@ -92,6 +92,7 @@ class DerIndefLenConverter {
     private void parseTag() throws IOException {
         if (dataPos == dataSize)
             return;
+        try {
             if (isEOC(data[dataPos]) && (data[dataPos + 1] == 0)) {
                 int numOfEncapsulatedLenBytes = 0;
                 Object elem = null;
@@ -123,6 +124,9 @@ class DerIndefLenConverter {
                 numOfTotalLenBytes += (sectionLenBytes.length - 3);
             }
             dataPos++;
+        } catch (IndexOutOfBoundsException iobe) {
+            throw new IOException(iobe);
+        }
     }
 
     /**