This method contains an unsynchronized lazy initialization of a non-volatile static field. Because the compiler or processor may reorder instructions, threads are not guaranteed to see a completely initialized object, if the method can be called by multiple threads.

java.security.SecureRandom
SeedGenerator (line 460)

sun.security.pkcs.ESSCertId
private static HexDumpEncoder hexDumper = new HexDumpEncoder();

sun.security.provider.SeedGenerator
instance (line 109)