RFR: 8375549: ConcurrentModificationException if jdk.crypto.disabledAlgorithms has multiple entries with known oid
Sean Coffey
coffeys at openjdk.org
Wed Jan 21 12:12:15 UTC 2026
On Tue, 20 Jan 2026 22:59:54 GMT, Valerie Peng <valeriep at openjdk.org> wrote:
> Inside the CryptoAlgorithmConstraints constructor, there is a loop looking up the known oid. Iterating over the "disabledServices" set and inserting the found oid(s) into it leads to ConcurrentModificationException when the set contains multiple entries. The proposed fix is to iterating over the array converted from the set which is also used for debugging output instead of the "disabledServices" set itself.
>
> Thanks,
> Valerie
LGTM
-------------
Marked as reviewed by coffeys (Reviewer).
PR Review: https://git.openjdk.org/jdk/pull/29335#pullrequestreview-3686877495
More information about the security-dev
mailing list