Some of our core classes, like String, acquire the class lock. This means a malicious program could prevent certain operations by acquiring one of these locks and never releasing it. Critical core classes should never acquire their class lock, but should instead use some inaccessible object. Release: unknown
Still true on the mainline (20030724).
*** This bug has been marked as a duplicate of 9250 ***