From 86d527f987a27c22fae784812aad9d8f370d2e9c Mon Sep 17 00:00:00 2001 From: Sean Mullan Date: Tue, 26 Nov 2024 14:21:01 +0000 Subject: [PATCH] 8344949: javax.security.auth.Subject.SecureSet.writeObject does not do a security check anymore Reviewed-by: alanb --- .../share/classes/javax/security/auth/Subject.java | 6 ------ 1 file changed, 6 deletions(-) diff --git a/src/java.base/share/classes/javax/security/auth/Subject.java b/src/java.base/share/classes/javax/security/auth/Subject.java index 5c5726ca38f..303abe49538 100644 --- a/src/java.base/share/classes/javax/security/auth/Subject.java +++ b/src/java.base/share/classes/javax/security/auth/Subject.java @@ -1418,12 +1418,6 @@ public final class Subject implements java.io.Serializable { /** * Writes this object out to a stream (i.e., serializes it). * - * @serialData If this is a private credential set, - * a security check is performed to ensure that - * the caller has permission to access each credential - * in the set. If the security check passes, - * the set is serialized. - * * @param oos the {@code ObjectOutputStream} to which data is written * @throws IOException if an I/O error occurs */