Re: question about serialization

[Bryce McKinlay]

On Saturday, Aug 2, 2003, at 01:46 Pacific/Auckland, David P Grove wrote:

> Hi Tom,
>
>         We've had security manager checks in the reflection code in Jikes RVM for a while.  Our current workaround for serialization is that classes loaded by the system classloader are always allowed access.  This is probably too big of a hole, but it does work in practice.  The key routine for us is in java.lang.reflect.JikesRVMSupport (appended below).   If you come up with a finer-grained fix for libgcj, let me know -- I'm not that happy with what we are currently doing in Jikes RVM.


AccessibleObject.setAccessible() is the correct way for serialization to get access to private reflection data. See:

http://java.sun.com/j2se/1.4.2/docs/guide/reflection/reflection.html

Regards

Bryce.