...
Also, note that any defensive copying must be performed before validating the parameters and the checks must be performed on the copies instead of the original parameters. (See SER34SER07-J. Make defensive copies of private mutable components)
...