public class InstantiateFactory extends java.lang.Object implements Factory, java.io.Serializable
WARNING: from v3.2.2 onwards this class will throw an
UnsupportedOperationException
when trying to serialize or
de-serialize an instance to prevent potential remote code execution exploits.
In order to re-enable serialization support for InstantiateTransformer
the following system property can be used (via -Dproperty=true):
org.apache.commons.collections.enableUnsafeSerialization
Modifier and Type | Field and Description |
---|---|
private java.lang.Object[] |
iArgs
The constructor arguments
|
private java.lang.Class |
iClassToInstantiate
The class to create
|
private java.lang.reflect.Constructor |
iConstructor
The constructor
|
private java.lang.Class[] |
iParamTypes
The constructor parameter types
|
private static long |
serialVersionUID
The serial version
|
Constructor and Description |
---|
InstantiateFactory(java.lang.Class classToInstantiate)
Constructor that performs no validation.
|
InstantiateFactory(java.lang.Class classToInstantiate,
java.lang.Class[] paramTypes,
java.lang.Object[] args)
Constructor that performs no validation.
|
Modifier and Type | Method and Description |
---|---|
java.lang.Object |
create()
Creates an object using the stored constructor.
|
private void |
findConstructor()
Find the Constructor for the class specified.
|
static Factory |
getInstance(java.lang.Class classToInstantiate,
java.lang.Class[] paramTypes,
java.lang.Object[] args)
Factory method that performs validation.
|
private void |
readObject(java.io.ObjectInputStream is)
Overrides the default readObject implementation to prevent
de-serialization (see COLLECTIONS-580).
|
private void |
writeObject(java.io.ObjectOutputStream os)
Overrides the default writeObject implementation to prevent
serialization (see COLLECTIONS-580).
|
private static final long serialVersionUID
private final java.lang.Class iClassToInstantiate
private final java.lang.Class[] iParamTypes
private final java.lang.Object[] iArgs
private transient java.lang.reflect.Constructor iConstructor
public InstantiateFactory(java.lang.Class classToInstantiate)
getInstance
if you want that.classToInstantiate
- the class to instantiatepublic InstantiateFactory(java.lang.Class classToInstantiate, java.lang.Class[] paramTypes, java.lang.Object[] args)
getInstance
if you want that.classToInstantiate
- the class to instantiateparamTypes
- the constructor parameter types, not clonedargs
- the constructor arguments, not clonedpublic static Factory getInstance(java.lang.Class classToInstantiate, java.lang.Class[] paramTypes, java.lang.Object[] args)
classToInstantiate
- the class to instantiate, not nullparamTypes
- the constructor parameter typesargs
- the constructor argumentsprivate void findConstructor()
public java.lang.Object create()
private void writeObject(java.io.ObjectOutputStream os) throws java.io.IOException
java.io.IOException
private void readObject(java.io.ObjectInputStream is) throws java.lang.ClassNotFoundException, java.io.IOException
java.lang.ClassNotFoundException
java.io.IOException