org.elasticsearch.common.io.ThrowableObjectInputStream Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of org.apache.servicemix.bundles.elasticsearch
Show all versions of org.apache.servicemix.bundles.elasticsearch
This OSGi bundle wraps ${pkgArtifactId} ${pkgVersion} jar file.
/*
* Licensed to Elasticsearch under one or more contributor
* license agreements. See the NOTICE file distributed with
* this work for additional information regarding copyright
* ownership. Elasticsearch licenses this file to you under
* the Apache License, Version 2.0 (the "License"); you may
* not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing,
* software distributed under the License is distributed on an
* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
* KIND, either express or implied. See the License for the
* specific language governing permissions and limitations
* under the License.
*/
package org.elasticsearch.common.io;
import com.fasterxml.jackson.core.JsonLocation;
import com.google.common.collect.ImmutableMap;
import org.elasticsearch.common.Classes;
import org.elasticsearch.common.collect.IdentityHashSet;
import org.joda.time.DateTimeFieldType;
import java.io.*;
import java.net.*;
import java.util.*;
/**
*
*/
public class ThrowableObjectInputStream extends ObjectInputStream {
private final ClassLoader classLoader;
public ThrowableObjectInputStream(InputStream in) throws IOException {
this(in, null);
}
public ThrowableObjectInputStream(InputStream in, ClassLoader classLoader) throws IOException {
super(in);
this.classLoader = classLoader;
}
@Override
protected void readStreamHeader() throws IOException, StreamCorruptedException {
int version = readByte() & 0xFF;
if (version != STREAM_VERSION) {
throw new StreamCorruptedException(
"Unsupported version: " + version);
}
}
@Override
protected ObjectStreamClass readClassDescriptor()
throws IOException, ClassNotFoundException {
int type = read();
if (type < 0) {
throw new EOFException();
}
switch (type) {
case ThrowableObjectOutputStream.TYPE_EXCEPTION:
return ObjectStreamClass.lookup(Exception.class);
case ThrowableObjectOutputStream.TYPE_STACKTRACEELEMENT:
return ObjectStreamClass.lookup(StackTraceElement.class);
case ThrowableObjectOutputStream.TYPE_FAT_DESCRIPTOR:
return verify(super.readClassDescriptor());
case ThrowableObjectOutputStream.TYPE_THIN_DESCRIPTOR:
String className = readUTF();
Class clazz = loadClass(className);
return verify(ObjectStreamClass.lookup(clazz));
default:
throw new StreamCorruptedException(
"Unexpected class descriptor type: " + type);
}
}
@Override
protected Class resolveClass(ObjectStreamClass desc) throws IOException, ClassNotFoundException {
String className = desc.getName();
try {
return loadClass(className);
} catch (ClassNotFoundException ex) {
return super.resolveClass(desc);
}
}
protected Class loadClass(String className) throws ClassNotFoundException {
Class clazz;
ClassLoader classLoader = this.classLoader;
if (classLoader == null) {
classLoader = Classes.getDefaultClassLoader();
}
if (classLoader != null) {
clazz = classLoader.loadClass(className);
} else {
clazz = Class.forName(className);
}
return clazz;
}
private static final Set> CLASS_WHITELIST;
private static final Set PKG_WHITELIST;
static {
IdentityHashSet> classes = new IdentityHashSet<>();
classes.add(String.class);
// inet stuff is needed for DiscoveryNode
classes.add(Inet6Address.class);
classes.add(Inet4Address.class);
classes.add(InetAddress.class);
classes.add(InetSocketAddress.class);
classes.add(SocketAddress.class);
classes.add(StackTraceElement.class);
classes.add(JsonLocation.class); // JsonParseException uses this
IdentityHashSet packages = new IdentityHashSet<>();
packages.add(Integer.class.getPackage()); // java.lang
packages.add(List.class.getPackage()); // java.util
packages.add(ImmutableMap.class.getPackage()); // com.google.common.collect
packages.add(DateTimeFieldType.class.getPackage()); // org.joda.time
CLASS_WHITELIST = Collections.unmodifiableSet(classes);
PKG_WHITELIST = Collections.unmodifiableSet(packages);
}
private ObjectStreamClass verify(ObjectStreamClass streamClass) throws IOException, ClassNotFoundException {
Class aClass = resolveClass(streamClass);
Package pkg = aClass.getPackage();
if (aClass.isPrimitive() // primitives are fine
|| aClass.isArray() // arrays are ok too
|| Throwable.class.isAssignableFrom(aClass)// exceptions are fine
|| CLASS_WHITELIST.contains(aClass) // whitelist JDK stuff we need
|| PKG_WHITELIST.contains(aClass.getPackage())
|| pkg.getName().startsWith("org.elasticsearch")) { // es classes are ok
return streamClass;
}
throw new NotSerializableException(aClass.getName());
}
}