defineClass specifies that "An invocation of this method .. yields exactly the same result as the statements". This isn't quite right. The equivalent advances the buffer position to its limit, the defineClass(String, ByteBuffer, ProtectionDomain) method not advance the position. The only case where the buffer position is advanced is when the buffer is a read-only heap buffer.