RFR: 8296736: Some PKCS9Attribute can be created but cannot be encoded
Weijun Wang
weijun at openjdk.org
Thu Nov 10 02:35:26 UTC 2022
On Thu, 10 Nov 2022 02:18:35 GMT, Xue-Lei Andrew Fan <xuelei at openjdk.org> wrote:
>> The whole class is only used in the same package at the moment. Making only one method package private is not fair.
>
> Hm, maybe making this class package private as well? The returned array is not cloned. It may not worthy of a clone as it is used just once in the package. But if it is public, a lot of time would be costed in the future to check if is a potential issue.
Fair enough. I'll fix it.
-------------
PR: https://git.openjdk.org/jdk/pull/11070
More information about the security-dev
mailing list