to be fair the JGroups API was clear about this requirement even before, it simply was our code to be wrong and just work fine nevertheless because in practice it used to make a defensive copy of the correct boundaries. The defensive copy is now gone after we've been profiling it So my fault to break this.