An Empirical Security Study of the Native Code in the JDK