RFR 8071643: sun.security.krb5.KrbApReq.authenticate() is not thread safe
Weijun Wang
weijun.wang at oracle.com
Mon Feb 2 13:47:36 UTC 2015
Hi All
Please review the code change at
http://cr.openjdk.java.net/~weijun/8071643/webrev.00/
The static field is removed and a local MessageDigest is used. The
getInstance() method might spend some time but since there are already
quite some cipher and checksum operations during an AP-REQ receive, this
change does not make much difference.
No reg, could be -hard and -trivial.
Thanks
Max
More information about the security-dev
mailing list