/*
 * JBoss, Home of Professional Open Source
 *
 * Copyright 2018 Red Hat, Inc. and/or its affiliates.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package org.wildfly.security.manager;

import java.lang.StackWalker;
import java.lang.StackWalker.Option;
import java.util.List;
import java.util.stream.Collectors;

/**
 * JDK-specific classes which are replaced for different JDK major versions. This class is for JDK 9.
 * @author <a href="mailto:jucook@redhat.com">Justin Cook</a>
 */
final class JDKSpecific {

    /*
     * Using StackWalker the OFFSET is the minimum number of StackFrames, the first will always be
     * JDKSpecific,getCallerClass(int), the second will always be the caller of this class.
     */
    private static final int OFFSET = 2;

    public static Class<?> getCallerClass(int n){
        List<StackWalker.StackFrame> frames = StackWalker.getInstance(Option.RETAIN_CLASS_REFERENCE).walk(s ->
                s.limit(n + OFFSET).collect(Collectors.toList())
        );
        return frames.get(frames.size() - 1).getDeclaringClass();
    }

}

@@ -709,62 +709,131 @@
 ort 
-java.lang.StackWalker;%0Aimport java.lang.StackWalker.Op
+static java.security.AccessController.doPrivileged;%0A%0Aimport java.lang.StackWalker.Option;%0Aimport java.security.PrivilegedAc
 tion
@@ -1403,13 +1403,246 @@
     
-List%3C
+// Although we know WildFlySecurityManager is making the call it may not be the actual SecurityManager%0A        // so we need to use doPrivileged instead of a doUnchecked unless we can be sure checking has been switched off.%0A        final 
 Stac
@@ -1652,84 +1652,228 @@
 lker
-.S
+ s
 tack
-Frame%3E frames = StackWalker.getInstance(Option.RETAIN_CLASS_REFERENCE)
+Walker = WildFlySecurityManager.isChecking() ?%0A                doPrivileged((PrivilegedAction%3CStackWalker%3E)JDKSpecific::getStackWalker) : getStackWalker();%0A%0A        List%3CStackWalker.StackFrame%3E frames = stackWalker
 .wal
@@ -2028,10 +2028,138 @@
 %0A    %7D%0A%0A
+    private static StackWalker getStackWalker() %7B%0A        return StackWalker.getInstance(Option.RETAIN_CLASS_REFERENCE);%0A    %7D%0A%0A
 %7D%0A

Add a doPrivileged call to wrap creating the StackWalker.