On Wed, 21 Oct 2026 11:38:15 GMT, Artem Semenov <[email protected]> wrote:
> The sslConfig field is read without holding serverSocketLock in > accept(), while all other accesses are performed under the lock. > Wrap the SSLSocketImpl construction with the lock to make the access > consistent and avoid a potential data race. Use try/finally so the > lock is always released, even if the constructor throws. > > --------- > - [x] I confirm that I make this contribution in accordance with the [OpenJDK > Interim AI Policy](https://openjdk.org/legal/ai). This pull request has now been integrated. Changeset: 83790083 Author: Artem Semenov <[email protected]> URL: https://git.openjdk.org/jdk/commit/837900833481a91c3ee4da62c3b4fa3c4f1f39af Stats: 7 lines in 1 file changed: 6 ins; 0 del; 1 mod 8395367: SSLServerSocketImpl.accept() accesses sslConfig without holding serverSocketLock Reviewed-by: abarashev ------------- PR: https://git.openjdk.org/jdk/pull/33491
