12 RFR(M) 8214583: AccessController.getContext may return wrong value after JDK-8212605

dean.long at oracle.com dean.long at oracle.com
Mon Dec 17 06:28:40 UTC 2018


On 12/16/18 9:52 PM, Claes Redestad wrote:
> Fair enough, I wasn't aware EA was looking beyond the inlined code like
> this (which means it can't be "dead" or the JIT might see through the
> trick at some point). I've skimmed the existing usages in the JDK and
> can't find anything that seems to be dependent on DontInline defeating
> EA - maybe there was in the past, or I simply misremembered. 

Were you thinking of the pre-jdk11 implementation of 
Reference.reachabilityFence() perhaps?

dl



More information about the security-dev mailing list