src/java.base/share/classes/java/security/CodeSource.java

*** 541,551 ****
          // process any new-style certs in the stream (if present)
          int size = ois.readInt();
          if (size > 0) {
              // we know of 3 different cert types: X.509, PGP, SDSI, which
              // could all be present in the stream at the same time
!             cfs = new Hashtable<String, CertificateFactory>(3);
              this.certs = new java.security.cert.Certificate[size];
          }
  
          for (int i = 0; i < size; i++) {
              // read the certificate type, and instantiate a certificate
--- 541,551 ----
          // process any new-style certs in the stream (if present)
          int size = ois.readInt();
          if (size > 0) {
              // we know of 3 different cert types: X.509, PGP, SDSI, which
              // could all be present in the stream at the same time
!             cfs = new Hashtable<>(3);
              this.certs = new java.security.cert.Certificate[size];
          }
  
          for (int i = 0; i < size; i++) {
              // read the certificate type, and instantiate a certificate