Package org.apache.logging.log4j.util.internal

Class SerializationUtil

java.lang.Object

org.apache.logging.log4j.util.internal.SerializationUtil

public final class SerializationUtil
extends Object

Provides methods to increase the safety of object serialization/deserialization.

Field Summary

Fields

Modifier and Type	Field	Description
private static final String	DEFAULT_FILTER_CLASS
private static final Method	getObjectInputFilter
private static final Method	newObjectInputFilter
static final List<String>	REQUIRED_JAVA_CLASSES
static final List<String>	REQUIRED_JAVA_PACKAGES
private static final Method	setObjectInputFilter

Constructor Summary

Constructors

Modifier	Constructor	Description
private	SerializationUtil()

Method Summary

Modifier and Type	Method	Description
static void	assertFiltered(ObjectInputStream stream)
static Object	readWrappedObject(ObjectInputStream in)
static String	stripArray(Class<?> clazz)	Gets the class name of an array component recursively.
static String	stripArray(String name)	Gets the class name of an array component recursively.
static void	writeWrappedObject(Serializable obj, ObjectOutputStream out)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

DEFAULT_FILTER_CLASS

private static final String DEFAULT_FILTER_CLASS

See Also:

• Constant Field Values

setObjectInputFilter

private static final Method setObjectInputFilter

getObjectInputFilter

private static final Method getObjectInputFilter

newObjectInputFilter

private static final Method newObjectInputFilter

REQUIRED_JAVA_CLASSES

public static final List<String> REQUIRED_JAVA_CLASSES

REQUIRED_JAVA_PACKAGES

public static final List<String> REQUIRED_JAVA_PACKAGES

Constructor Details

SerializationUtil

private SerializationUtil()

Method Details

writeWrappedObject

public static void writeWrappedObject(Serializable obj,
 ObjectOutputStream out)
                               throws IOException

Throws:

IOException

readWrappedObject

public static Object readWrappedObject(ObjectInputStream in)
                                throws IOException,
ClassNotFoundException

Throws:

IOException

ClassNotFoundException

assertFiltered

public static void assertFiltered(ObjectInputStream stream)

stripArray

public static String stripArray(Class<?> clazz)

Gets the class name of an array component recursively.

If clazz is not an array class its name is returned.

Parameters:

clazz - the binary name of a class.

stripArray

public static String stripArray(String name)

Gets the class name of an array component recursively.

If name is not the name of an array class it is returned unchanged.

Parameters:

name - the name of a class.

See Also:

• Class.getName()