Yeah, confirmed bug: * http://mail.openjdk.java.net/pipermail/security-dev/2008-October/000356.html * http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4140596 (remembered I've seen this before :-) Anil Saldhana wrote: > I agree that it is a JDK bug.