The classes javax.management.AttributeList, and javax.management.relation.RoleList and UnresolvedRoleList all extend java.util.ArrayList, and do not override the set and add methods of the iterator returned by the listIterator method.

This may provide a way to make such lists contain objects of incorrect types. The underlying list can be mutated using the iterator's set() or add() methods.