RFR[9] 8062731: Cipher object can be created without calling Cipher.getInstance
Valerie Peng
valerie.peng at oracle.com
Thu Jan 26 02:12:34 UTC 2017
Fixed, thanks for the review!
Valerie
On 1/25/2017 5:15 PM, Bradford Wetmore wrote:
> Looks ok.
>
> One minor nit:
>
> 258: indention problem.
>
> Brad
>
>
> On 1/23/2017 12:28 PM, Valerie Peng wrote:
>> Hi Brad,
>>
>> Would you have time to review this? I changed the code to base the trust
>> decision on the immediate caller of Cipher(CipherSpi, Provider, String).
>> In addition, the specified Provider object is only taken into account
>> when it shares the same origin (codebase or module) with the caller.
>>
>> Webrev: http://cr.openjdk.java.net/~valeriep/8062731/webrev.00/
>>
>> Thanks,
>>
>> Valerie
>>
More information about the security-dev
mailing list