RFR: 8375549: ConcurrentModificationException if jdk.crypto.disabledAlgorithms has multiple entries with known oid

Sean Coffey coffeys at openjdk.org
Wed Jan 21 12:12:15 UTC 2026


On Tue, 20 Jan 2026 22:59:54 GMT, Valerie Peng <valeriep at openjdk.org> wrote:

> Inside the CryptoAlgorithmConstraints constructor, there is a loop looking up the known oid. Iterating over the "disabledServices" set and inserting the found oid(s) into it leads to ConcurrentModificationException when the set contains multiple entries. The proposed fix is to iterating over the array converted from the set which is also used for debugging output instead of the "disabledServices" set itself.
> 
> Thanks,
> Valerie

LGTM

-------------

Marked as reviewed by coffeys (Reviewer).

PR Review: https://git.openjdk.org/jdk/pull/29335#pullrequestreview-3686877495


More information about the security-dev mailing list