RFR: 8296736: Some PKCS9Attribute can be created but cannot be encoded

Weijun Wang weijun at openjdk.org
Thu Nov 10 02:35:26 UTC 2022


On Thu, 10 Nov 2022 02:18:35 GMT, Xue-Lei Andrew Fan <xuelei at openjdk.org> wrote:

>> The whole class is only used in the same package at the moment. Making only one method package private is not fair.
>
> Hm, maybe making this class package private as well?  The returned array is not cloned.   It may not worthy of a clone as it is used just once in the package.  But if it is public, a lot of time would be costed in the future to check if is a potential issue.

Fair enough. I'll fix it.

-------------

PR: https://git.openjdk.org/jdk/pull/11070



More information about the security-dev mailing list