Hi Alex,

There is no need to repeat this:
  "deploy applications that package an agent with the application,
   or use tools that load agents into a
running application"

I'd suggest to rephrase it to something like:

  "Agents can transform classes in arbitrary ways at load time, transform
   modules, or transform the bytecode of methods of already loaded classes.
   Developers or administrators that deploy agents are responsible for their
   trustworthiness and must therefore verify each agent including the content
   and structure of its JAR file."


Also, could you, please, replace:
 * <p> The three ways to start an agent is described below.

with:
 * <p> The three ways to start an agent are described below.

Thanks,
Serguei


On 5/7/20 18:19, Alex Menkov wrote:

On 05/01/2020 15:22, Alex Menkov wrote:
Hi all,

Please review the fix for
https://bugs.openjdk.java.net/browse/JDK-8243012

The change fixes security note in the java.lang.instrument javadoc.

webrev:
http://cr.openjdk.java.net/~amenkov/jdk15/java_instrument_spec/webrev.1/

--alex

Reply via email to