In sun/security/ssl/RSAClientKeyExchange.java:

116 // Cannot generate key here, please don't use Cipher.UNWRAP_MODE!
117 cipher.init(Cipher.UNWRAP_MODE, privateKey,
118 new TlsRsaPremasterSecretParameterSpec(
119 maxVersion.v, currentVersion.v),
120 generator);

We've a comment indicating not to use UNWRAP_MODE. However, in line 117,
the UNWRAP_MODE is used instead in a recent fix. The comment need to
go.