6686215: Some mutables not defensively copied when deserializing java.security.CodeSource & Timestamp objects
Reviewed-by: mullan

Reviewed-by: mullan

Reviewed-by: darcy, weijun