FISH-5540 #23424 ejb30/sec TCK failures

Copy the OID to buffer excluding the name

Signed-off-by: hussainnm <[email protected]>

appserver/security/ejb.security/src/main/java/com/sun/enterprise/iiop/security/GSSUtils.java

@@ -385,9 +385,11 @@ private static int verifyTokenHeader(Oid oid, byte[] token) throws GSSException
         if (token[index] != 0x06)
             throw new GSSException(GSSException.DEFECTIVE_TOKEN);
 
-        byte[] buf = new byte[token.length - index];
+        // add first two bytes to the MECH_OID_LEN
+        int oidlen = token[index+1] + 2;
+        byte[] buf = new byte[oidlen];
 
-        System.arraycopy(token, index, buf, 0, token.length - index);
+        System.arraycopy(token, index, buf, 0, oidlen);
 
         Oid mechoid = getOID(buf);