src/java.base/share/classes/javax/security/auth/login/Configuration.java

*** 227,237 ****
  
          synchronized (Configuration.class) {
              if (configuration == null) {
                  String config_class = null;
                  config_class = AccessController.doPrivileged
!                     (new PrivilegedAction<String>() {
                      public String run() {
                          return java.security.Security.getProperty
                                      ("login.configuration.provider");
                      }
                  });
--- 227,237 ----
  
          synchronized (Configuration.class) {
              if (configuration == null) {
                  String config_class = null;
                  config_class = AccessController.doPrivileged
!                     (new PrivilegedAction<>() {
                      public String run() {
                          return java.security.Security.getProperty
                                      ("login.configuration.provider");
                      }
                  });
*** 240,250 ****
                  }
  
                  try {
                      final String finalClass = config_class;
                      Configuration untrustedImpl = AccessController.doPrivileged(
!                             new PrivilegedExceptionAction<Configuration>() {
                                  public Configuration run() throws ClassNotFoundException,
                                          InstantiationException,
                                          IllegalAccessException {
                                      Class<? extends Configuration> implClass = Class.forName(
                                              finalClass, false,
--- 240,250 ----
                  }
  
                  try {
                      final String finalClass = config_class;
                      Configuration untrustedImpl = AccessController.doPrivileged(
!                             new PrivilegedExceptionAction<>() {
                                  public Configuration run() throws ClassNotFoundException,
                                          InstantiationException,
                                          IllegalAccessException {
                                      Class<? extends Configuration> implClass = Class.forName(
                                              finalClass, false,
*** 252,262 ****
                                      ).asSubclass(Configuration.class);
                                      return implClass.newInstance();
                                  }
                              });
                      AccessController.doPrivileged(
!                             new PrivilegedExceptionAction<Void>() {
                                  public Void run() {
                                      setConfiguration(untrustedImpl);
                                      return null;
                                  }
                              }, Objects.requireNonNull(untrustedImpl.acc)
--- 252,262 ----
                                      ).asSubclass(Configuration.class);
                                      return implClass.newInstance();
                                  }
                              });
                      AccessController.doPrivileged(
!                             new PrivilegedExceptionAction<>() {
                                  public Void run() {
                                      setConfiguration(untrustedImpl);
                                      return null;
                                  }
                              }, Objects.requireNonNull(untrustedImpl.acc)