> On 23 Mar 2020, at 19:18, Alan Bateman <alan.bate...@oracle.com> wrote: > >> ... >> > Socket(SocketImpl) is only specified to do a permission check when the impl > is non-null. The socket adaptor in JDK 12 and older releases doesn't have a > dummy impl so the change should not be needed. If there is a security > exception thrownhere then it suggests something may be broken elsewhere, do > you have a stack trace?
I suspect that only the ServerSocketAdapter part of the change is needed, since ServerSocket(SocketImpl) does a security check regardless of the value of the given SocketImpl. -Chris.
