com.whitestein.lsps.engine

Class RestrictedOIS

java.lang.Object

java.io.InputStream

java.io.ObjectInputStream

com.whitestein.lsps.engine.RestrictedOIS

All Implemented Interfaces:

Closeable, DataInput, ObjectInput, ObjectStreamConstants, AutoCloseable

public class RestrictedOIS
extends ObjectInputStream

Author:

mna

Nested Class Summary

Nested classes/interfaces inherited from class java.io.ObjectInputStream

ObjectInputStream.GetField

Field Summary

Fields inherited from interface java.io.ObjectStreamConstants

baseWireHandle, PROTOCOL_VERSION_1, PROTOCOL_VERSION_2, SC_BLOCK_DATA, SC_ENUM, SC_EXTERNALIZABLE, SC_SERIALIZABLE, SC_WRITE_METHOD, STREAM_MAGIC, STREAM_VERSION, SUBCLASS_IMPLEMENTATION_PERMISSION, SUBSTITUTION_PERMISSION, TC_ARRAY, TC_BASE, TC_BLOCKDATA, TC_BLOCKDATALONG, TC_CLASS, TC_CLASSDESC, TC_ENDBLOCKDATA, TC_ENUM, TC_EXCEPTION, TC_LONGSTRING, TC_MAX, TC_NULL, TC_OBJECT, TC_PROXYCLASSDESC, TC_REFERENCE, TC_RESET, TC_STRING

Constructor Summary

Constructors

Constructor and Description
RestrictedOIS(InputStream inputStream)

Method Summary

Modifier and Type	Method and Description
boolean	isOnBlacklist(String name)
protected Class<?>	resolveClass(ObjectStreamClass desc) Only deserialize instances of our expected Bicycle class

Methods inherited from class java.io.ObjectInputStream

available, close, defaultReadObject, enableResolveObject, read, read, readBoolean, readByte, readChar, readClassDescriptor, readDouble, readFields, readFloat, readFully, readFully, readInt, readLine, readLong, readObject, readObjectOverride, readShort, readStreamHeader, readUnshared, readUnsignedByte, readUnsignedShort, readUTF, registerValidation, resolveObject, resolveProxyClass, skipBytes

Methods inherited from class java.io.InputStream

mark, markSupported, read, reset, skip

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.io.ObjectInput

read, skip

Constructor Detail

RestrictedOIS

public RestrictedOIS(InputStream inputStream)
              throws IOException

Throws:

IOException

Method Detail

resolveClass

protected Class<?> resolveClass(ObjectStreamClass desc)
                         throws IOException,
                                ClassNotFoundException

Only deserialize instances of our expected Bicycle class

Overrides:

resolveClass in class ObjectInputStream

Throws:

IOException

ClassNotFoundException

isOnBlacklist

public boolean isOnBlacklist(String name)

Parameters:

name -

Returns:

returns true if the class is dangerous and *MUST* *NOT* be allowed during deserialization