RFR JDK-7092821 "java.security.Provider.getService() is synchronized and became scalability bottleneck"

Valerie Peng valerie.peng at oracle.com
Thu Dec 13 23:53:24 UTC 2018


If I recall correctly, "initialized" and checkInitialized() method are 
meant to prevent unauthorized creation of Provider object either through 
inheritance or deserialization. Thus, they should not be removed unless 
we are sure that the original issue are no longer of concern.

Thanks,
Valerie


On 12/13/2018 9:02 AM, Nico Williams wrote:
> On Wed, Dec 12, 2018 at 11:48:26AM -0800, Valerie Peng wrote:
>> If anyone is still reviewing this and need more time, please let me know
>> soon. Otherwise, I will proceed with integration this afternoon.
> One comment:
>
>   - checkInitialized() in java.security.Provider seems pointless -- initialized
>     is always set to true in all the Provider the constructors
>
>     here's your chance to remove it.
>
> Nico



More information about the security-dev mailing list