RFR[9] 8062731: Cipher object can be created without calling Cipher.getInstance

Bradford Wetmore bradford.wetmore at oracle.com
Thu Jan 26 01:15:57 UTC 2017


Looks ok.

One minor nit:

258:  indention problem.

Brad


On 1/23/2017 12:28 PM, Valerie Peng wrote:
> Hi Brad,
>
> Would you have time to review this? I changed the code to base the trust
> decision on the immediate caller of Cipher(CipherSpi, Provider, String).
> In addition, the specified Provider object is only taken into account
> when it shares the same origin (codebase or module) with the caller.
>
> Webrev: http://cr.openjdk.java.net/~valeriep/8062731/webrev.00/
>
> Thanks,
>
> Valerie
>


More information about the security-dev mailing list