Re: virtual method lookup and accessibility

The language spec section 15.12.4.4 "Locate Method to Invoke" (http://
java.sun.com/docs/books/jls/third_edition/html/
expressions.html#15.12.4.4) describes how run-time virtual method
lookup works, and then says:

"The above procedure will always find a non-abstract, accessible
method to invoke, provided that all classes and interfaces in the
program have been consistently compiled."

Is this true? Specifically, is the method that's invoked always
"accessible" from the class containing the method invocation
expression?

I think this is a counter-example:

package A;
public class C {
    protected void f() {
    System.out.println("Hello from C");
    }
}

package B;
public class D extends A.C {
    protected void f() {
    System.out.println("Hello from D");
    }
}

package A;
public class E {
    public static void main(String args[]) {
    C c = new B.D();
    c.f();
    }
}

If I compile and run this I get:

$ javac ?/*.java
$ java A.E
Hello from D

So A.E has invoked B.D.f(); but B.D.f() is not accessible from A.E,
because it is protected and in a different package.

Is this a bug in the language spec?