classloader

How to reproduce the security issue CVE-2014-0094 . I googled but couldn't able to find any reference to the same. Got it working. I have to enable logging (for ognl package) to see the error. Pass in parameter like class.classLoader.resource.dircontext.docBase=someText to the struts2 application. localhost:8080/sampleApp/showlogin.do?class.classLoader.resource.diretext.docBase=someText Then in the log I would see something like this. java.lang.IllegalArgumentException: Document base base does not exist or is not a readable directory at org.apache.naming.resources.FileDirContext.setDocBase

I'm trying to read a file in my maven project at /src/main/resources/file.txt. I'm using URL url=this.getClass().getResource("/"); String filePath=url.getPath()+"file.txt"; url object gets the correct value when this is run thru eclipse. But, when I package the jar and run it in command line: jar -cp myjar.jar SampleTest It returns null for 'url' object and throws a NullPointerException in the next line. I have openend my Jar file using file browser and checked. It has the 'file.txt' in "/" location inside the Jar. Where am I going wrong ? There are (often) no directories inside jar files.

I have some class A : public class A { public A(String str) { System.out.println("Create A instance: " + str); } public void methodA() { System.out.println("#methodA1()"); } } And my class loader implementation: public class MyClassLoader extends ClassLoader { public MyClassLoader() { super(); } @Override public synchronized Class<?> loadClass(String name) throws ClassNotFoundException { System.out.println("Load: " + name); return super.loadClass(name); } } And now I try to change default class loader in current thread: import java.util.ArrayList; import java.util.List; public class

How can I load a class that is already on the class path, instantiate it, and also instantiate any inner classes defined within it? EG: public class TestClass { public class InnerClass { } } Inner classes cannot exist outside the parent class. You need to construct the parent class first. Without reflection this would look like: InnerClass innerClass = new TestClass().new InnerClass(); In reflection, you need to pass the parent class in during construction of the inner class. Object testClass = Class.forName("com.example.TestClass").newInstance(); for (Class<?> cls : testClass.getClass()

I'm trying to extend my library for integrating Swing and JPA by making JPA config as automatic (and portable) as can be done, and it means programmatically adding <class> elements. (I know it can be done via Hibernate's AnnotationConfiguration or EclipseLInk's ServerSession , but - portability). I'd also like to avoid using Spring just for this single purpose. I can create a persistence.xml on the fly, and fill it with <class> elements from specified packages (via the Reflections library). The problem starts when I try to feed this persistence.xml to a JPA provider. The only way I can think

Suppose in my JVM I have a loaded class Class<C> myClass . Is there a reliable way to ask the JVM for the bytecode contents of the .class? I.e. something like this: <C> byte[] getClassBytecode(Class<C> myClass) { return /* the contents of the .class resource where C was loaded from */; } (obviously an InputStream would be as good as the byte[] ). I know I can use myClass.getResource() (and friends) to fetch the class file, but hammering on the class name to get an URL to feed to getResource feels wrong. Also, I am not sure how this would behave in case C was dynamically generated (e.g. using