Fri, 24 Sep 2010 22:42:14 -0700
6891766: Vulnerabilities in use of reflection in CORBA
Reviewed-by: hawtin
duke@1 | 1 | /* |
ohair@158 | 2 | * Copyright (c) 2001, 2002, Oracle and/or its affiliates. All rights reserved. |
duke@1 | 3 | * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. |
duke@1 | 4 | * |
duke@1 | 5 | * This code is free software; you can redistribute it and/or modify it |
duke@1 | 6 | * under the terms of the GNU General Public License version 2 only, as |
ohair@158 | 7 | * published by the Free Software Foundation. Oracle designates this |
duke@1 | 8 | * particular file as subject to the "Classpath" exception as provided |
ohair@158 | 9 | * by Oracle in the LICENSE file that accompanied this code. |
duke@1 | 10 | * |
duke@1 | 11 | * This code is distributed in the hope that it will be useful, but WITHOUT |
duke@1 | 12 | * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or |
duke@1 | 13 | * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License |
duke@1 | 14 | * version 2 for more details (a copy is included in the LICENSE file that |
duke@1 | 15 | * accompanied this code). |
duke@1 | 16 | * |
duke@1 | 17 | * You should have received a copy of the GNU General Public License version |
duke@1 | 18 | * 2 along with this work; if not, write to the Free Software Foundation, |
duke@1 | 19 | * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. |
duke@1 | 20 | * |
ohair@158 | 21 | * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA |
ohair@158 | 22 | * or visit www.oracle.com if you need additional information or have any |
ohair@158 | 23 | * questions. |
duke@1 | 24 | */ |
duke@1 | 25 | |
duke@1 | 26 | /* |
duke@1 | 27 | */ |
duke@1 | 28 | package com.sun.corba.se.impl.orbutil; |
duke@1 | 29 | |
duke@1 | 30 | import java.io.*; |
duke@1 | 31 | import java.util.Hashtable; |
duke@1 | 32 | |
duke@1 | 33 | /** |
duke@1 | 34 | * Since ObjectOutputStream.PutField methods specify no exceptions, |
duke@1 | 35 | * we are not checking for null parameters on put methods. |
duke@1 | 36 | */ |
duke@1 | 37 | class LegacyHookPutFields extends ObjectOutputStream.PutField |
duke@1 | 38 | { |
duke@1 | 39 | private Hashtable fields = new Hashtable(); |
duke@1 | 40 | |
duke@1 | 41 | /** |
duke@1 | 42 | * Put the value of the named boolean field into the persistent field. |
duke@1 | 43 | */ |
duke@1 | 44 | public void put(String name, boolean value){ |
duke@1 | 45 | fields.put(name, new Boolean(value)); |
duke@1 | 46 | } |
duke@1 | 47 | |
duke@1 | 48 | /** |
duke@1 | 49 | * Put the value of the named char field into the persistent fields. |
duke@1 | 50 | */ |
duke@1 | 51 | public void put(String name, char value){ |
duke@1 | 52 | fields.put(name, new Character(value)); |
duke@1 | 53 | } |
duke@1 | 54 | |
duke@1 | 55 | /** |
duke@1 | 56 | * Put the value of the named byte field into the persistent fields. |
duke@1 | 57 | */ |
duke@1 | 58 | public void put(String name, byte value){ |
duke@1 | 59 | fields.put(name, new Byte(value)); |
duke@1 | 60 | } |
duke@1 | 61 | |
duke@1 | 62 | /** |
duke@1 | 63 | * Put the value of the named short field into the persistent fields. |
duke@1 | 64 | */ |
duke@1 | 65 | public void put(String name, short value){ |
duke@1 | 66 | fields.put(name, new Short(value)); |
duke@1 | 67 | } |
duke@1 | 68 | |
duke@1 | 69 | /** |
duke@1 | 70 | * Put the value of the named int field into the persistent fields. |
duke@1 | 71 | */ |
duke@1 | 72 | public void put(String name, int value){ |
duke@1 | 73 | fields.put(name, new Integer(value)); |
duke@1 | 74 | } |
duke@1 | 75 | |
duke@1 | 76 | /** |
duke@1 | 77 | * Put the value of the named long field into the persistent fields. |
duke@1 | 78 | */ |
duke@1 | 79 | public void put(String name, long value){ |
duke@1 | 80 | fields.put(name, new Long(value)); |
duke@1 | 81 | } |
duke@1 | 82 | |
duke@1 | 83 | /** |
duke@1 | 84 | * Put the value of the named float field into the persistent fields. |
duke@1 | 85 | * |
duke@1 | 86 | */ |
duke@1 | 87 | public void put(String name, float value){ |
duke@1 | 88 | fields.put(name, new Float(value)); |
duke@1 | 89 | } |
duke@1 | 90 | |
duke@1 | 91 | /** |
duke@1 | 92 | * Put the value of the named double field into the persistent field. |
duke@1 | 93 | */ |
duke@1 | 94 | public void put(String name, double value){ |
duke@1 | 95 | fields.put(name, new Double(value)); |
duke@1 | 96 | } |
duke@1 | 97 | |
duke@1 | 98 | /** |
duke@1 | 99 | * Put the value of the named Object field into the persistent field. |
duke@1 | 100 | */ |
duke@1 | 101 | public void put(String name, Object value){ |
duke@1 | 102 | fields.put(name, value); |
duke@1 | 103 | } |
duke@1 | 104 | |
duke@1 | 105 | /** |
duke@1 | 106 | * Write the data and fields to the specified ObjectOutput stream. |
duke@1 | 107 | */ |
duke@1 | 108 | public void write(ObjectOutput out) throws IOException { |
duke@1 | 109 | out.writeObject(fields); |
duke@1 | 110 | } |
duke@1 | 111 | } |