Fri, 24 Sep 2010 22:42:14 -0700
6891766: Vulnerabilities in use of reflection in CORBA
Reviewed-by: hawtin
duke@1 | 1 | /* |
ohair@158 | 2 | * Copyright (c) 1998, 2001, Oracle and/or its affiliates. All rights reserved. |
duke@1 | 3 | * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. |
duke@1 | 4 | * |
duke@1 | 5 | * This code is free software; you can redistribute it and/or modify it |
duke@1 | 6 | * under the terms of the GNU General Public License version 2 only, as |
ohair@158 | 7 | * published by the Free Software Foundation. Oracle designates this |
duke@1 | 8 | * particular file as subject to the "Classpath" exception as provided |
ohair@158 | 9 | * by Oracle in the LICENSE file that accompanied this code. |
duke@1 | 10 | * |
duke@1 | 11 | * This code is distributed in the hope that it will be useful, but WITHOUT |
duke@1 | 12 | * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or |
duke@1 | 13 | * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License |
duke@1 | 14 | * version 2 for more details (a copy is included in the LICENSE file that |
duke@1 | 15 | * accompanied this code). |
duke@1 | 16 | * |
duke@1 | 17 | * You should have received a copy of the GNU General Public License version |
duke@1 | 18 | * 2 along with this work; if not, write to the Free Software Foundation, |
duke@1 | 19 | * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. |
duke@1 | 20 | * |
ohair@158 | 21 | * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA |
ohair@158 | 22 | * or visit www.oracle.com if you need additional information or have any |
ohair@158 | 23 | * questions. |
duke@1 | 24 | */ |
duke@1 | 25 | /* |
duke@1 | 26 | * Licensed Materials - Property of IBM |
duke@1 | 27 | * RMI-IIOP v1.0 |
duke@1 | 28 | * Copyright IBM Corp. 1998 1999 All Rights Reserved |
duke@1 | 29 | * |
duke@1 | 30 | */ |
duke@1 | 31 | |
duke@1 | 32 | package org.omg.CORBA; |
duke@1 | 33 | |
duke@1 | 34 | /** |
duke@1 | 35 | * The Helper for <tt>StringValue</tt>. For more information on |
duke@1 | 36 | * Helper files, see <a href="doc-files/generatedfiles.html#helper"> |
duke@1 | 37 | * "Generated Files: Helper Files"</a>.<P> |
duke@1 | 38 | * org/omg/CORBA/StringValueHelper.java |
duke@1 | 39 | * Generated by the IDL-to-Java compiler (portable), version "3.0" |
duke@1 | 40 | * from orb.idl |
duke@1 | 41 | * 31 May 1999 22:27:30 o'clock GMT+00:00 |
duke@1 | 42 | * |
duke@1 | 43 | * The class definition has been modified to conform to the following |
duke@1 | 44 | * OMG specifications : |
duke@1 | 45 | * <ul> |
duke@1 | 46 | * <li> ORB core as defined by CORBA 2.3.1 |
duke@1 | 47 | * (<a href="http://cgi.omg.org/cgi-bin/doc?formal/99-10-07">formal/99-10-07</a>) |
duke@1 | 48 | * </li> |
duke@1 | 49 | * |
duke@1 | 50 | * <li> IDL/Java Language Mapping as defined in |
duke@1 | 51 | * <a href="http://cgi.omg.org/cgi-bin/doc?ptc/00-01-08">ptc/00-01-08</a> |
duke@1 | 52 | * </li> |
duke@1 | 53 | * </ul> |
duke@1 | 54 | */ |
duke@1 | 55 | |
duke@1 | 56 | public class StringValueHelper implements org.omg.CORBA.portable.BoxedValueHelper |
duke@1 | 57 | { |
duke@1 | 58 | private static String _id = "IDL:omg.org/CORBA/StringValue:1.0"; |
duke@1 | 59 | |
duke@1 | 60 | private static StringValueHelper _instance = new StringValueHelper (); |
duke@1 | 61 | |
duke@1 | 62 | public static void insert (org.omg.CORBA.Any a, String that) |
duke@1 | 63 | { |
duke@1 | 64 | org.omg.CORBA.portable.OutputStream out = a.create_output_stream (); |
duke@1 | 65 | a.type (type ()); |
duke@1 | 66 | write (out, that); |
duke@1 | 67 | a.read_value (out.create_input_stream (), type ()); |
duke@1 | 68 | } |
duke@1 | 69 | |
duke@1 | 70 | public static String extract (org.omg.CORBA.Any a) |
duke@1 | 71 | { |
duke@1 | 72 | return read (a.create_input_stream ()); |
duke@1 | 73 | } |
duke@1 | 74 | |
duke@1 | 75 | private static org.omg.CORBA.TypeCode __typeCode = null; |
duke@1 | 76 | private static boolean __active = false; |
duke@1 | 77 | synchronized public static org.omg.CORBA.TypeCode type () |
duke@1 | 78 | { |
duke@1 | 79 | if (__typeCode == null) |
duke@1 | 80 | { |
duke@1 | 81 | synchronized (org.omg.CORBA.TypeCode.class) |
duke@1 | 82 | { |
duke@1 | 83 | if (__typeCode == null) |
duke@1 | 84 | { |
duke@1 | 85 | if (__active) |
duke@1 | 86 | { |
duke@1 | 87 | return org.omg.CORBA.ORB.init().create_recursive_tc ( _id ); |
duke@1 | 88 | } |
duke@1 | 89 | __active = true; |
duke@1 | 90 | __typeCode = org.omg.CORBA.ORB.init ().create_string_tc (0); |
duke@1 | 91 | __typeCode = org.omg.CORBA.ORB.init ().create_value_box_tc (_id, "StringValue", __typeCode); |
duke@1 | 92 | __active = false; |
duke@1 | 93 | } |
duke@1 | 94 | } |
duke@1 | 95 | } |
duke@1 | 96 | return __typeCode; |
duke@1 | 97 | } |
duke@1 | 98 | |
duke@1 | 99 | public static String id () |
duke@1 | 100 | { |
duke@1 | 101 | return _id; |
duke@1 | 102 | } |
duke@1 | 103 | |
duke@1 | 104 | public static String read (org.omg.CORBA.portable.InputStream istream) |
duke@1 | 105 | { |
duke@1 | 106 | if (!(istream instanceof org.omg.CORBA_2_3.portable.InputStream)) { |
duke@1 | 107 | throw new org.omg.CORBA.BAD_PARAM(); } |
duke@1 | 108 | return (String) ((org.omg.CORBA_2_3.portable.InputStream) istream).read_value (_instance); |
duke@1 | 109 | } |
duke@1 | 110 | |
duke@1 | 111 | public java.io.Serializable read_value (org.omg.CORBA.portable.InputStream istream) |
duke@1 | 112 | { |
duke@1 | 113 | String tmp; |
duke@1 | 114 | tmp = istream.read_string (); |
duke@1 | 115 | return (java.io.Serializable) tmp; |
duke@1 | 116 | } |
duke@1 | 117 | |
duke@1 | 118 | public static void write (org.omg.CORBA.portable.OutputStream ostream, String value) |
duke@1 | 119 | { |
duke@1 | 120 | if (!(ostream instanceof org.omg.CORBA_2_3.portable.OutputStream)) { |
duke@1 | 121 | throw new org.omg.CORBA.BAD_PARAM(); } |
duke@1 | 122 | ((org.omg.CORBA_2_3.portable.OutputStream) ostream).write_value (value, _instance); |
duke@1 | 123 | } |
duke@1 | 124 | |
duke@1 | 125 | public void write_value (org.omg.CORBA.portable.OutputStream ostream, java.io.Serializable value) |
duke@1 | 126 | { |
duke@1 | 127 | if (!(value instanceof String)) { |
duke@1 | 128 | throw new org.omg.CORBA.MARSHAL(); } |
duke@1 | 129 | String valueType = (String) value; |
duke@1 | 130 | ostream.write_string (valueType); |
duke@1 | 131 | } |
duke@1 | 132 | |
duke@1 | 133 | public String get_id () |
duke@1 | 134 | { |
duke@1 | 135 | return _id; |
duke@1 | 136 | } |
duke@1 | 137 | |
duke@1 | 138 | } |