- java.lang.Object
-
- java.lang.ClassLoader
-
- java.security.SecureClassLoader
-
- Direct Known Subclasses:
- URLClassLoader
public class SecureClassLoader extends ClassLoader
This class extends ClassLoader with additional support for defining classes with an associated code source and permissions which are retrieved by the system policy by default.
-
-
Constructor Summary
Constructors Modifier Constructor and Description protected
SecureClassLoader()
Creates a new SecureClassLoader using the default parent class loader for delegation.protected
SecureClassLoader(ClassLoader parent)
Creates a new SecureClassLoader using the specified parent class loader for delegation.
-
Method Summary
Methods Modifier and Type Method and Description protected Class<?>
defineClass(String name, byte[] b, int off, int len, CodeSource cs)
Converts an array of bytes into an instance of class Class, with an optional CodeSource.protected Class<?>
defineClass(String name, ByteBuffer b, CodeSource cs)
Converts aByteBuffer
into an instance of class Class, with an optional CodeSource.protected PermissionCollection
getPermissions(CodeSource codesource)
Returns the permissions for the given CodeSource object.-
Methods inherited from class java.lang.ClassLoader
clearAssertionStatus, defineClass, defineClass, defineClass, defineClass, definePackage, findClass, findLibrary, findLoadedClass, findResource, findResources, findSystemClass, getClassLoadingLock, getPackage, getPackages, getParent, getResource, getResourceAsStream, getResources, getSystemClassLoader, getSystemResource, getSystemResourceAsStream, getSystemResources, loadClass, loadClass, registerAsParallelCapable, resolveClass, setClassAssertionStatus, setDefaultAssertionStatus, setPackageAssertionStatus, setSigners
-
-
-
-
Constructor Detail
-
SecureClassLoader
protected SecureClassLoader(ClassLoader parent)
Creates a new SecureClassLoader using the specified parent class loader for delegation.If there is a security manager, this method first calls the security manager's
checkCreateClassLoader
method to ensure creation of a class loader is allowed.- Parameters:
parent
- the parent ClassLoader- Throws:
SecurityException
- if a security manager exists and itscheckCreateClassLoader
method doesn't allow creation of a class loader.- See Also:
SecurityManager.checkCreateClassLoader()
-
SecureClassLoader
protected SecureClassLoader()
Creates a new SecureClassLoader using the default parent class loader for delegation.If there is a security manager, this method first calls the security manager's
checkCreateClassLoader
method to ensure creation of a class loader is allowed.- Throws:
SecurityException
- if a security manager exists and itscheckCreateClassLoader
method doesn't allow creation of a class loader.- See Also:
SecurityManager.checkCreateClassLoader()
-
-
Method Detail
-
defineClass
protected final Class<?> defineClass(String name, byte[] b, int off, int len, CodeSource cs)
Converts an array of bytes into an instance of class Class, with an optional CodeSource. Before the class can be used it must be resolved.If a non-null CodeSource is supplied a ProtectionDomain is constructed and associated with the class being defined.
- Parameters:
name
- the expected name of the class, ornull
if not known, using '.' and not '/' as the separator and without a trailing ".class" suffix.b
- the bytes that make up the class data. The bytes in positionsoff
throughoff+len-1
should have the format of a valid class file as defined by The Java™ Virtual Machine Specification.off
- the start offset inb
of the class datalen
- the length of the class datacs
- the associated CodeSource, ornull
if none- Returns:
- the
Class
object created from the data, and optional CodeSource. - Throws:
ClassFormatError
- if the data did not contain a valid classIndexOutOfBoundsException
- if eitheroff
orlen
is negative, or ifoff+len
is greater thanb.length
.SecurityException
- if an attempt is made to add this class to a package that contains classes that were signed by a different set of certificates than this class, or if the class name begins with "java.".
-
defineClass
protected final Class<?> defineClass(String name, ByteBuffer b, CodeSource cs)
Converts aByteBuffer
into an instance of class Class, with an optional CodeSource. Before the class can be used it must be resolved.If a non-null CodeSource is supplied a ProtectionDomain is constructed and associated with the class being defined.
- Parameters:
name
- the expected name of the class, ornull
if not known, using '.' and not '/' as the separator and without a trailing ".class" suffix.b
- the bytes that make up the class data. The bytes from positions b.position() through b.position() + b.limit() -1 should have the format of a valid class file as defined by The Java™ Virtual Machine Specification.cs
- the associated CodeSource, ornull
if none- Returns:
- the
Class
object created from the data, and optional CodeSource. - Throws:
ClassFormatError
- if the data did not contain a valid classSecurityException
- if an attempt is made to add this class to a package that contains classes that were signed by a different set of certificates than this class, or if the class name begins with "java.".- Since:
- 1.5
-
getPermissions
protected PermissionCollection getPermissions(CodeSource codesource)
Returns the permissions for the given CodeSource object.This method is invoked by the defineClass method which takes a CodeSource as an argument when it is constructing the ProtectionDomain for the class being defined.
- Parameters:
codesource
- the codesource.- Returns:
- the permissions granted to the codesource.
-
-
Traduction non disponible
Les API Java ne sont pas encore traduites en français sur l'infobrol. Seule la version anglaise est disponible pour l'instant.
Version en cache
22/12/2024 15:06:24 Cette version de la page est en cache (à la date du 22/12/2024 15:06:24) afin d'accélérer le traitement. Vous pouvez activer le mode utilisateur dans le menu en haut pour afficher la dernère version de la page.Document créé le 30/08/2006, dernière modification le 04/03/2020
Source du document imprimé : https://www.gaudry.be/java-api-rf-java/security/secureclassloader.html
L'infobrol est un site personnel dont le contenu n'engage que moi. Le texte est mis à disposition sous licence CreativeCommons(BY-NC-SA). Plus d'info sur les conditions d'utilisation et sur l'auteur.
Références
Ces références et liens indiquent des documents consultés lors de la rédaction de cette page, ou qui peuvent apporter un complément d'information, mais les auteurs de ces sources ne peuvent être tenus responsables du contenu de cette page.
L'auteur de ce site est seul responsable de la manière dont sont présentés ici les différents concepts, et des libertés qui sont prises avec les ouvrages de référence. N'oubliez pas que vous devez croiser les informations de sources multiples afin de diminuer les risques d'erreurs.