On 11/17/2014 12:56 PM, Dawid Weiss wrote: > This is very minor, but java.net.Authenticator has the following > static field for the default authenticator: > > private static Authenticator theAuthenticator; > > This field is set from a synchronized method setDefault(..), but > accessed without proper sync from all other request* methods: > > Authenticator a = theAuthenticator; > if (a == null) { > return null; > }
Yes, theAuthenticator should be volatile. Filed: https://bugs.openjdk.java.net/browse/JDK-8065096 -Aleksey.