2001-10-16 00:45:03 +02:00
|
|
|
/* java.lang.reflect.AccessibleObject
|
2001-11-14 20:11:52 +01:00
|
|
|
Copyright (C) 2001 Free Software Foundation, Inc.
|
1999-04-07 16:42:40 +02:00
|
|
|
|
2001-10-16 00:45:03 +02:00
|
|
|
This file is part of GNU Classpath.
|
1999-04-07 16:42:40 +02:00
|
|
|
|
2001-10-16 00:45:03 +02:00
|
|
|
GNU Classpath is free software; you can redistribute it and/or modify
|
|
|
|
it under the terms of the GNU General Public License as published by
|
|
|
|
the Free Software Foundation; either version 2, or (at your option)
|
|
|
|
any later version.
|
2001-11-14 20:11:52 +01:00
|
|
|
|
2001-10-16 00:45:03 +02:00
|
|
|
GNU Classpath is distributed in the hope that it will be useful, but
|
|
|
|
WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
|
|
General Public License for more details.
|
|
|
|
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
|
|
along with GNU Classpath; see the file COPYING. If not, write to the
|
|
|
|
Free Software Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA
|
|
|
|
02111-1307 USA.
|
|
|
|
|
|
|
|
As a special exception, if you link this library with other files to
|
|
|
|
produce an executable, this library does not by itself cause the
|
|
|
|
resulting executable to be covered by the GNU General Public License.
|
|
|
|
This exception does not however invalidate any other reasons why the
|
|
|
|
executable file might be covered by the GNU General Public License. */
|
1999-04-07 16:42:40 +02:00
|
|
|
|
2001-11-14 20:11:52 +01:00
|
|
|
|
1999-04-07 16:42:40 +02:00
|
|
|
package java.lang.reflect;
|
|
|
|
|
|
|
|
/**
|
2001-11-14 20:11:52 +01:00
|
|
|
* This class is the superclass of various reflection classes, and
|
|
|
|
* allows sufficiently trusted code to bypass normal restrictions to
|
|
|
|
* do necessary things like invoke private methods outside of the
|
|
|
|
* class during Serialization. If you don't have a good reason
|
|
|
|
* to mess with this, don't try. Fortunately, there are adequate
|
|
|
|
* security checks before you can set a reflection object as accessible.
|
|
|
|
*
|
1999-04-07 16:42:40 +02:00
|
|
|
* @author Tom Tromey <tromey@cygnus.com>
|
2001-11-14 20:11:52 +01:00
|
|
|
* @author Eric Blake <ebb9@email.byu.edu>
|
|
|
|
* @see Field
|
|
|
|
* @see Constructor
|
|
|
|
* @see Method
|
|
|
|
* @see ReflectPermission
|
|
|
|
* @since 1.2
|
|
|
|
* @status updated to 1.4
|
1999-04-07 16:42:40 +02:00
|
|
|
*/
|
|
|
|
public class AccessibleObject
|
|
|
|
{
|
2001-11-14 20:11:52 +01:00
|
|
|
/**
|
|
|
|
* True if this object is marked accessible, which means the reflected
|
|
|
|
* object bypasses normal security checks. <em>NOTE</em>Don't try messing
|
|
|
|
* with this by reflection. You'll mess yourself up.
|
|
|
|
*/
|
|
|
|
// default visibility for use by inherited classes
|
|
|
|
boolean flag = false;
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Only the three reflection classes that extend this can create an
|
|
|
|
* accessible object. This is not serializable for security reasons.
|
|
|
|
*/
|
|
|
|
protected AccessibleObject()
|
2000-11-18 03:30:29 +01:00
|
|
|
{
|
|
|
|
}
|
|
|
|
|
2001-11-14 20:11:52 +01:00
|
|
|
/**
|
|
|
|
* Return the accessibility status of this object.
|
|
|
|
*
|
|
|
|
* @return true if this object bypasses security checks
|
|
|
|
*/
|
|
|
|
public boolean isAccessible()
|
2000-11-18 03:30:29 +01:00
|
|
|
{
|
|
|
|
return flag;
|
|
|
|
}
|
|
|
|
|
2001-11-14 20:11:52 +01:00
|
|
|
/**
|
|
|
|
* Convenience method to set the flag on a number of objects with a single
|
|
|
|
* security check. If a security manager exists, it is checked for
|
|
|
|
* <code>ReflectPermission("suppressAccessChecks")</code>.<p>
|
|
|
|
*
|
|
|
|
* If <code>flag</code> is true, and the initial security check succeeds,
|
|
|
|
* this can still fail if a forbidden object is encountered, leaving the
|
|
|
|
* array half-modified. At the moment, the forbidden members are:<br>
|
|
|
|
* <ul>
|
|
|
|
* <li>Any Constructor for java.lang.Class</li>
|
|
|
|
* <li>Any AccessibleObject for java.lang.reflect.AccessibleObject
|
|
|
|
* (this is not specified by Sun, but it closes a big security hole
|
|
|
|
* where you can use reflection to bypass the security checks that
|
|
|
|
* reflection is supposed to provide)</li>
|
|
|
|
* </ul>
|
|
|
|
* (Sun has not specified others, but good candidates might include
|
|
|
|
* ClassLoader, String, and such. However, the more checks we do, the
|
|
|
|
* slower this method gets).
|
|
|
|
*
|
|
|
|
* @param array the array of accessible objects
|
|
|
|
* @param flag the desired state of accessibility, true to bypass security
|
|
|
|
* @throws NullPointerException if array is null
|
|
|
|
* @throws SecurityException if the request is denied
|
|
|
|
* @see SecurityManager#checkPermission(java.security.Permission)
|
|
|
|
* @see RuntimePermission
|
|
|
|
*/
|
|
|
|
public static void setAccessible(AccessibleObject[] array, boolean flag)
|
2000-11-18 03:30:29 +01:00
|
|
|
{
|
2001-11-14 20:11:52 +01:00
|
|
|
checkPermission();
|
|
|
|
for (int i = 0; i < array.length; i++)
|
|
|
|
array[i].secureSetAccessible(flag);
|
2000-11-18 03:30:29 +01:00
|
|
|
}
|
|
|
|
|
2001-11-14 20:11:52 +01:00
|
|
|
/**
|
|
|
|
* Sets the accessibility flag for this reflection object. If a security
|
|
|
|
* manager exists, it is checked for
|
|
|
|
* <code>ReflectPermission("suppressAccessChecks")</code>.<p>
|
|
|
|
*
|
|
|
|
* If <code>flag</code> is true, and the initial security check succeeds,
|
|
|
|
* this will still fail for a forbidden object. At the moment, the
|
|
|
|
* forbidden members are:<br>
|
|
|
|
* <ul>
|
|
|
|
* <li>Any Constructor for java.lang.Class</li>
|
|
|
|
* <li>Any AccessibleObject for java.lang.reflect.AccessibleObject
|
|
|
|
* (this is not specified by Sun, but it closes a big security hole
|
|
|
|
* where you can use reflection to bypass the security checks that
|
|
|
|
* reflection is supposed to provide)</li>
|
|
|
|
* </ul>
|
|
|
|
* (Sun has not specified others, but good candidates might include
|
|
|
|
* ClassLoader, String, and such. However, the more checks we do, the
|
|
|
|
* slower this method gets).
|
|
|
|
*
|
|
|
|
* @param flag the desired state of accessibility, true to bypass security
|
|
|
|
* @throws NullPointerException if array is null
|
|
|
|
* @throws SecurityException if the request is denied
|
|
|
|
* @see SecurityManager#checkPermission(java.security.Permission)
|
|
|
|
* @see RuntimePermission
|
|
|
|
*/
|
|
|
|
public void setAccessible(boolean flag)
|
2000-11-18 03:30:29 +01:00
|
|
|
{
|
2001-11-14 20:11:52 +01:00
|
|
|
checkPermission();
|
|
|
|
secureSetAccessible(flag);
|
2000-11-18 03:30:29 +01:00
|
|
|
}
|
1999-04-07 16:42:40 +02:00
|
|
|
|
2001-11-14 20:11:52 +01:00
|
|
|
/**
|
|
|
|
* Performs the specified security check, for
|
|
|
|
* <code>ReflectPermission("suppressAccessChecks")</code>.
|
|
|
|
*
|
|
|
|
* @throws SecurityException if permission is denied
|
|
|
|
*/
|
|
|
|
private static final void checkPermission()
|
2000-11-18 03:30:29 +01:00
|
|
|
{
|
|
|
|
SecurityManager sm = System.getSecurityManager();
|
2001-10-16 00:45:03 +02:00
|
|
|
if (sm != null)
|
2001-11-14 20:11:52 +01:00
|
|
|
sm.checkPermission(new ReflectPermission("suppressAccessChecks"));
|
2000-11-18 03:30:29 +01:00
|
|
|
}
|
1999-04-07 16:42:40 +02:00
|
|
|
|
2001-11-14 20:11:52 +01:00
|
|
|
/**
|
|
|
|
* Performs the actual accessibility change, this must always be invoked
|
|
|
|
* after calling checkPermission.
|
|
|
|
*
|
|
|
|
* @param flag the desired status
|
|
|
|
* @throws SecurityException if flag is true and this is one of the
|
|
|
|
* forbidden members mentioned in {@link setAccessible(boolean)}.
|
|
|
|
*/
|
|
|
|
private final void secureSetAccessible(boolean flag)
|
|
|
|
{
|
|
|
|
if (flag &&
|
|
|
|
((this instanceof Constructor
|
|
|
|
&& ((Constructor) this).getDeclaringClass() == Class.class)
|
|
|
|
|| ((Member) this).getDeclaringClass() == AccessibleObject.class))
|
|
|
|
throw new SecurityException("Cannot make object accessible: " + this);
|
|
|
|
this.flag = flag;
|
|
|
|
}
|
1999-04-07 16:42:40 +02:00
|
|
|
}
|