JDK-8281244 : javax.sql.rowset.serial.SerialJavaObject::getFields may throw NPE if caller is null
  • Type: Sub-task
  • Component: core-libs
  • Sub-Component: java.sql
  • Affected Version: 9
  • Priority: P4
  • Status: Closed
  • Resolution: Won't Fix
  • Submitted: 2022-02-04
  • Updated: 2022-02-04
  • Resolved: 2022-02-04
Description
javax.sql.rowset.serial.SerialJavaObject::getFields throws NPE when caller is null if the security manager is present.  The caller's class loader is used to determine if package access permission check is needed.

Since security manager is deprecated for removal (JEP 411) and setting the security manager is disallowed by default in Java 18, I'm inclined to propose do nothing for this issue.

This issue is created as a tracking purpose.
Comments
Since security manager will be removed in a future release and this has been a long-standing behavior, close this issue as will not fix. This API rarely will be called through JNI with no caller frame.
04-02-2022