1 /*
   2  * Copyright (c) 1997, 1998, Oracle and/or its affiliates. All rights reserved.
   3  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
   4  *
   5  * This code is free software; you can redistribute it and/or modify it
   6  * under the terms of the GNU General Public License version 2 only, as
   7  * published by the Free Software Foundation.
   8  *
   9  * This code is distributed in the hope that it will be useful, but WITHOUT
  10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  11  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
  12  * version 2 for more details (a copy is included in the LICENSE file that
  13  * accompanied this code).
  14  *
  15  * You should have received a copy of the GNU General Public License version
  16  * 2 along with this work; if not, write to the Free Software Foundation,
  17  * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
  18  *
  19  * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
  20  * or visit www.oracle.com if you need additional information or have any
  21  * questions.
  22  */
  23 
  24 /* @test
  25  * @clean A B Container ReplacerObjectOutputStream
  26  * @summary Verify that ClassCastException is thrown when deserializing
  27  *          an object and one of its object fields is  incompatibly replaced
  28  *          by either replaceObject/resolveObject.
  29  *
  30  */
  31 import java.io.*;
  32 
  33 class A implements Serializable {}
  34 
  35 class B implements Serializable {}
  36 
  37 class Container implements Serializable {
  38     A a = new A();
  39 }
  40 
  41 class ReplacerObjectOutputStream extends ObjectOutputStream {
  42     static B b = new B();
  43   public ReplacerObjectOutputStream(OutputStream out) throws IOException {
  44     super(out);
  45     enableReplaceObject(true);
  46   }
  47 
  48   protected Object replaceObject(Object obj) throws IOException {
  49       if(obj instanceof A) {
  50           System.err.println("replaceObject(" + obj.toString() + ") with " +
  51                              b.toString());
  52           return b;
  53       } else return obj;
  54   }
  55 }
  56 
  57 public class BadSubstByReplace {
  58     public static void main(String args[]) throws IOException, ClassNotFoundException {
  59         Container c = new Container();
  60         ByteArrayOutputStream baos = new ByteArrayOutputStream();
  61         ReplacerObjectOutputStream out =   new ReplacerObjectOutputStream(baos);
  62         out.writeObject(c);
  63         out.close();
  64         ObjectInputStream in =
  65             new ObjectInputStream(new ByteArrayInputStream(baos.toByteArray()));
  66         try {
  67             c = (Container)in.readObject(); // throws IllegalArgumentException.
  68             throw new Error("Should have thrown ClassCastException");
  69         } catch ( ClassCastException e) {
  70             System.err.println("Caught expected exception " + e.toString());
  71             e.printStackTrace();
  72         } finally {
  73             in.close();
  74         }
  75     }
  76 }