Class SerializableClassRegistry

java.lang.Object

org.jboss.marshalling.reflect.SerializableClassRegistry

public final class SerializableClassRegistry
extends Object

A registry for reflection information usable by serialization implementations. Objects returned from this registry can be used to invoke private methods without security checks, so it is important to be careful not to "leak" instances out of secured implementations.

Field Summary

Fields

Modifier and Type	Field	Description
private static final SerializableClassRegistry	INSTANCE
private static final SerializablePermission	PERMISSION
private final ConcurrentMap<ClassLoader, ConcurrentMap<Class<?>, SerializableClass>>	registry

Constructor Summary

Constructors

Modifier	Constructor	Description
private	SerializableClassRegistry()

Method Summary

Modifier and Type	Method	Description
static SerializableClassRegistry	getInstance()	Get the serializable class registry instance, if allowed by the current security manager.
(package private) static SerializableClassRegistry	getInstanceUnchecked()
SerializableClass	lookup(Class<?> subject)	Look up serialization information for a class.
void	release(ClassLoader classLoader)	Release all reflection information belonging to the given class loader.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

INSTANCE

private static final SerializableClassRegistry INSTANCE

PERMISSION

private static final SerializablePermission PERMISSION

registry

private final ConcurrentMap<ClassLoader, ConcurrentMap<Class<?>, SerializableClass>> registry

Constructor Details

SerializableClassRegistry

private SerializableClassRegistry()

Method Details

getInstance

public static SerializableClassRegistry getInstance()
                                             throws SecurityException

Get the serializable class registry instance, if allowed by the current security manager. The caller must have the java.io.SerializablePermission "allowSerializationReflection" in order to invoke this method.

Returns:

the registry

Throws:

SecurityException - if the caller does not have sufficient privileges

getInstanceUnchecked

static SerializableClassRegistry getInstanceUnchecked()

lookup

public SerializableClass lookup(Class<?> subject)

Look up serialization information for a class. The resultant object will be cached.

Parameters:

subject - the class to look up

Returns:

the serializable class information

release

public void release(ClassLoader classLoader)

Release all reflection information belonging to the given class loader.

Parameters:

classLoader - the class loader to release