RFR 8071643: sun.security.krb5.KrbApReq.authenticate() is not thread safe

Sean Mullan sean.mullan at oracle.com
Wed Feb 4 21:49:04 UTC 2015


Looks fine to me.

--Sean

On 02/02/2015 08:47 AM, Weijun Wang wrote:
> Hi All
>
> Please review the code change at
>
>    http://cr.openjdk.java.net/~weijun/8071643/webrev.00/
>
> The static field is removed and a local MessageDigest is used. The
> getInstance() method might spend some time but since there are already
> quite some cipher and checksum operations during an AP-REQ receive, this
> change does not make much difference.
>
> No reg, could be -hard and -trivial.
>
> Thanks
> Max


More information about the security-dev mailing list