public class CodebaseAwareObjectInputStream
extends org.springframework.core.ConfigurableObjectInputStream
Uses the JDK's RMIClassLoader to load classes from the specified codebase. The codebase can consist of multiple URLs, separated by spaces. Note that RMIClassLoader requires a SecurityManager to be set, like when using dynamic class download with standard RMI! (See the RMI documentation for details.)
Despite residing in the RMI package, this class is not used for RmiClientInterceptor, which uses the standard RMI infrastructure instead and thus is only able to rely on RMI's standard dynamic class download via "java.rmi.server.codebase". CodebaseAwareObjectInputStream is used by HttpInvokerClientInterceptor (see the "codebaseUrl" property there).
Thanks to Lionel Mestre for suggesting the option and providing a prototype!
RMIClassLoader
,
RemoteInvocationSerializingExporter.createObjectInputStream(java.io.InputStream)
,
org.springframework.remoting.httpinvoker.HttpInvokerClientInterceptor#setCodebaseUrl
ObjectInputStream.GetField
baseWireHandle, PROTOCOL_VERSION_1, PROTOCOL_VERSION_2, SC_BLOCK_DATA, SC_ENUM, SC_EXTERNALIZABLE, SC_SERIALIZABLE, SC_WRITE_METHOD, STREAM_MAGIC, STREAM_VERSION, SUBCLASS_IMPLEMENTATION_PERMISSION, SUBSTITUTION_PERMISSION, TC_ARRAY, TC_BASE, TC_BLOCKDATA, TC_BLOCKDATALONG, TC_CLASS, TC_CLASSDESC, TC_ENDBLOCKDATA, TC_ENUM, TC_EXCEPTION, TC_LONGSTRING, TC_MAX, TC_NULL, TC_OBJECT, TC_PROXYCLASSDESC, TC_REFERENCE, TC_RESET, TC_STRING
Constructor and Description |
---|
CodebaseAwareObjectInputStream(InputStream in,
ClassLoader classLoader,
boolean acceptProxyClasses)
Create a new CodebaseAwareObjectInputStream for the given InputStream and codebase.
|
CodebaseAwareObjectInputStream(InputStream in,
ClassLoader classLoader,
String codebaseUrl)
Create a new CodebaseAwareObjectInputStream for the given InputStream and codebase.
|
CodebaseAwareObjectInputStream(InputStream in,
String codebaseUrl)
Create a new CodebaseAwareObjectInputStream for the given InputStream and codebase.
|
Modifier and Type | Method and Description |
---|---|
protected ClassLoader |
getFallbackClassLoader() |
protected Class<?> |
resolveFallbackIfPossible(String className,
ClassNotFoundException ex) |
resolveClass, resolveProxyClass
available, close, defaultReadObject, enableResolveObject, read, read, readBoolean, readByte, readChar, readClassDescriptor, readDouble, readFields, readFloat, readFully, readFully, readInt, readLine, readLong, readObject, readObjectOverride, readShort, readStreamHeader, readUnshared, readUnsignedByte, readUnsignedShort, readUTF, registerValidation, resolveObject, skipBytes
mark, markSupported, read, reset, skip
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
read, skip
public CodebaseAwareObjectInputStream(InputStream in, String codebaseUrl) throws IOException
in
- the InputStream to read fromcodebaseUrl
- the codebase URL to load classes from if not found locally
(can consist of multiple URLs, separated by spaces)IOException
ObjectInputStream.ObjectInputStream(java.io.InputStream)
public CodebaseAwareObjectInputStream(InputStream in, @Nullable ClassLoader classLoader, String codebaseUrl) throws IOException
in
- the InputStream to read fromclassLoader
- the ClassLoader to use for loading local classes
(may be null
to indicate RMI's default ClassLoader)codebaseUrl
- the codebase URL to load classes from if not found locally
(can consist of multiple URLs, separated by spaces)IOException
ObjectInputStream.ObjectInputStream(java.io.InputStream)
public CodebaseAwareObjectInputStream(InputStream in, @Nullable ClassLoader classLoader, boolean acceptProxyClasses) throws IOException
in
- the InputStream to read fromclassLoader
- the ClassLoader to use for loading local classes
(may be null
to indicate RMI's default ClassLoader)acceptProxyClasses
- whether to accept deserialization of proxy classes
(may be deactivated as a security measure)IOException
ObjectInputStream.ObjectInputStream(java.io.InputStream)
protected Class<?> resolveFallbackIfPossible(String className, ClassNotFoundException ex) throws IOException, ClassNotFoundException
resolveFallbackIfPossible
in class org.springframework.core.ConfigurableObjectInputStream
IOException
ClassNotFoundException
protected ClassLoader getFallbackClassLoader() throws IOException
getFallbackClassLoader
in class org.springframework.core.ConfigurableObjectInputStream
IOException