--- old/src/share/classes/javax/security/auth/login/LoginContext.java 2013-12-03 09:35:40.000000000 -0800 +++ new/src/share/classes/javax/security/auth/login/LoginContext.java 2013-12-03 09:35:40.000000000 -0800 @@ -101,11 +101,11 @@ *
  • If the constructor has a Subject * input parameter, the LoginContext uses the caller-specified * Subject object. - *

    + * *

  • If the caller specifies a {@code null} Subject * and a {@code null} value is permitted, * the LoginContext instantiates a new Subject. - *

    + * *

  • If the constructor does not have a Subject * input parameter, the LoginContext instantiates a new Subject. *

    @@ -132,7 +132,7 @@ * {@code getAppConfigurationEntry} with the name, "other" * (the default entry name). If there is no entry for "other", * then a {@code LoginException} is thrown. - *

    + * *

  • When LoginContext uses the installed Configuration, the caller * requires the createLoginContext.name and possibly * createLoginContext.other AuthPermissions. Furthermore, the @@ -141,7 +141,7 @@ * perform security-sensitive tasks (such as connecting to remote hosts, * and updating the Subject) will require the respective permissions, but * the callers of the LoginContext will not require those permissions. - *

    + * *

  • When LoginContext uses a caller-specified Configuration, the caller * does not require any createLoginContext AuthPermission. The LoginContext * saves the {@code AccessControlContext} for the caller, @@ -158,7 +158,7 @@ *
  • If the constructor has a CallbackHandler * input parameter, the LoginContext uses the caller-specified * CallbackHandler object. - *

    + * *

  • If the constructor does not have a CallbackHandler * input parameter, or if the caller specifies a {@code null} * CallbackHandler object (and a {@code null} value is permitted), @@ -171,7 +171,7 @@ * with users. The caller thus assumes that the configured * modules have alternative means for authenticating the user. * - *

    + * *

  • When the LoginContext uses the installed Configuration (instead of * a caller-specified Configuration, see above), * then this LoginContext must wrap any