[10] RFR: 8161973: PKIXRevocationChecker.getSoftFailExceptions() not working

Sean Mullan sean.mullan at oracle.com
Thu Apr 6 16:46:15 UTC 2017

Please review this fix to the getSoftFailExceptions method of 
PKIXRevocationChecker so that it does not always return an empty List. 
The problem was that the clone method of the PKIXRevocationChecker 
implementation was creating a new List each time it was called, and the 
Exceptions were not being added to the original List that is returned by 
getSoftFailException. The fix is to not override clone and make a copy 
of the List. This is still safe because the caller cannot modify its 
contents (the List returned by getSoftFailExceptions is unmodifiable).



More information about the security-dev mailing list