Classloading in JDK 1.1 is broken in that it is not thread safe. The
result is that methods can be called before being verified, and vtables
can be used before being initialized... which can in turn lead to
incorrectly initialized vtables as well. The security implications are
that the basic Java sandbox is unenforceable in JDK 1.1.

The licensee reporting this problem has a suggested fix.

janet.koenig@Eng 1997-12-01