ELFlash ArrayIndexOutOfBoundsException on invalid Cookie value

[codylerum]

From: https://github.com/javaserverfaces/mojarra/issues/4386

This can easily reproduced by sending a csfcfc cooke with value 7aXBAow%3D

[codylerum]

@arjantijms should I port in the version from 2.4 here as well? It appears the encrypt and decrypt methods in https://github.com/eclipse-ee4j/mojarra/blob/master/impl/src/main/java/com/sun/faces/util/ByteArrayGuardAESCTR.java have been simplified.

[jasonex7]

This is fixed with PR #4668

[didiez]

We are using 2.3.14 and the bug is still there.
Are there any plans to release another version in the 2.3 branch? The bugfix seems backported to 2.3 in 7144ebc

Please fix on 3.0 and master as well