public class InstantiateTransformer extends java.lang.Object implements Transformer, java.io.Serializable
WARNING: from v3.2.2 onwards this class will throw an
UnsupportedOperationException
when trying to serialize or
de-serialize an instance to prevent potential remote code execution exploits.
In order to re-enable serialization support for InstantiateTransformer
the following system property can be used (via -Dproperty=true):
org.apache.commons.collections.enableUnsafeSerialization
Modifier and Type | Field and Description |
---|---|
private java.lang.Object[] |
iArgs
The constructor arguments
|
private java.lang.Class[] |
iParamTypes
The constructor parameter types
|
static Transformer |
NO_ARG_INSTANCE
Singleton instance that uses the no arg constructor
|
private static long |
serialVersionUID
The serial version
|
Modifier | Constructor and Description |
---|---|
private |
InstantiateTransformer()
Constructor for no arg instance.
|
|
InstantiateTransformer(java.lang.Class[] paramTypes,
java.lang.Object[] args)
Constructor that performs no validation.
|
Modifier and Type | Method and Description |
---|---|
static Transformer |
getInstance(java.lang.Class[] paramTypes,
java.lang.Object[] args)
Transformer method that performs validation.
|
private void |
readObject(java.io.ObjectInputStream is)
Overrides the default readObject implementation to prevent
de-serialization (see COLLECTIONS-580).
|
java.lang.Object |
transform(java.lang.Object input)
Transforms the input Class object to a result by instantiation.
|
private void |
writeObject(java.io.ObjectOutputStream os)
Overrides the default writeObject implementation to prevent
serialization (see COLLECTIONS-580).
|
private static final long serialVersionUID
public static final Transformer NO_ARG_INSTANCE
private final java.lang.Class[] iParamTypes
private final java.lang.Object[] iArgs
private InstantiateTransformer()
public InstantiateTransformer(java.lang.Class[] paramTypes, java.lang.Object[] args)
getInstance
if you want that.paramTypes
- the constructor parameter types, not clonedargs
- the constructor arguments, not clonedpublic static Transformer getInstance(java.lang.Class[] paramTypes, java.lang.Object[] args)
paramTypes
- the constructor parameter typesargs
- the constructor argumentspublic java.lang.Object transform(java.lang.Object input)
transform
in interface Transformer
input
- the input object to transformprivate void writeObject(java.io.ObjectOutputStream os) throws java.io.IOException
java.io.IOException
private void readObject(java.io.ObjectInputStream is) throws java.lang.ClassNotFoundException, java.io.IOException
java.lang.ClassNotFoundException
java.io.IOException