8028627: Unsynchronized code path from javax.crypto.Cipher to the WeakHashMap...

8028627: Unsynchronized code path from javax.crypto.Cipher to the WeakHashMap used by JceSecurity to store codebase mappings
Reviewed-by: mullan

src/share/classes/javax/crypto/JceSecurity.java

 /*
- * Copyright (c) 1997, 2011, Oracle and/or its affiliates. All rights reserved.
+ * Copyright (c) 1997, 2014, Oracle and/or its affiliates. All rights reserved.
  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
  *
  * This code is free software; you can redistribute it and/or modify it
@@ -216,9 +216,10 @@ final class JceSecurity {
             new WeakHashMap<>();
 
     /*
-     * Retuns the CodeBase for the given class.
+     * Returns the CodeBase for the given class.
      */
     static URL getCodeBase(final Class<?> clazz) {
+        synchronized (codeBaseCacheRef) {
             URL url = codeBaseCacheRef.get(clazz);
             if (url == null) {
                 url = AccessController.doPrivileged(new PrivilegedAction<URL>() {
@@ -237,6 +238,7 @@ final class JceSecurity {
             }
             return (url == NULL_URL) ? null : url;
         }
+    }
 
     private static void setupJurisdictionPolicies() throws Exception {
         String javaHomeDir = System.getProperty("java.home");