JDK-8193488 : Newer fix for memory leak in ProtectionDomain cache
  • Type: Bug
  • Component: security-libs
  • Sub-Component: java.security
  • Affected Version: 7u161,8u172,9,10
  • Priority: P3
  • Status: Closed
  • Resolution: Won't Fix
  • Submitted: 2017-12-14
  • Updated: 2025-01-24
  • Resolved: 2025-01-24
Related Reports
Relates :  
Relates :  
Relates :  
Relates :  
Relates :  
Description
Need to create a more robust fix for the memory leak.

Previous attempts:
JDK-8058547 (Memory leak in ProtectionDomain cache) 
JDK-8085903 (New fix for memory leak in ProtectionDomain cache) 

Regression caused by the last attempt:
JDK-8191649 (StackOverFlow caused with custom security manager)

Related enhancement that was backed out:
JDK-8055753 (Use ConcurrentHashMap to map ProtectionDomain to PermissionCollection) 
Comments
Closing this as "Won't Fix". This is no longer an issue as of JDK 24 since the Security Manager (SM) has been permanently disabled (see JEP 486) and the ProtectionDomain cache has been removed since it is no longer needed. This may still be an issue in previous JDK releases where the SM is supported, so if necessary it could be re-opened at a later time and addressed for those previous releases.
24-01-2025