src/share/classes/com/sun/jndi/ldap/ext/StartTlsResponseImpl.java

@@ -132,11 +132,13 @@
      * @param suites The non-null list of names of all the cipher suites to
      * enable.
      * @see #negotiate
      */
     public void setEnabledCipherSuites(String[] suites) {
-        this.suites = suites;
+        // The impl does accept null suites, although the spec requires
+        // a non-null list.
+        this.suites = suites == null ? null : suites.clone();
     }
 
     /**
      * Overrides the default hostname verifier used by <tt>negotiate()</tt>
      * after the TLS handshake has completed. If