On 10/07/2017 03:28, Stephen Felts wrote:
:
com.sun.xml.bind.v2.runtime.reflect.opt.Injector
com.sun.xml.ws.model.Injector
From what I can tell, these two aren't using tryAccessible. Instead
they seem to use setAccessible to attempt to get at a non-public
ClassLoader.defineClass method. It succeeds, with a warning, because
java.lang is open. If it were to fail then they catch
InaccessibleObjectException and try the deprecated-for-removal
Unsafe.defineClass. These two seem like good candidates for
Lookup.defineClass.
-Alan
