On Wed, 12 Jan 2022 19:54:38 GMT, Valerie Peng <valer...@openjdk.org> wrote:
>> The check ensures casting always succeeds. The fact that this has not been >> noticed for such a long time means everyone is using the exact subclass type >> when calling the method. > > Right, I suppose so. PBEKeyFactory.java, PBKDF2Core.java and PBKDF2HmacSHA1Factory.java also have isAssignableFrom() calls which seem backward. Perhaps covering them as well? ------------- PR: https://git.openjdk.java.net/jdk/pull/7037
