https://logging.apache.org/log4j/2.x/log4j-api/: The Apache Log4j API (The Apache Software Foundation)
  • Ralph Goers (Nextiva)
  • Gary Gregory (Rocket Software)
  • Scott Deboy
  • Remko Popma
  • Nick Williams
  • Matt Sicker (CloudBees)
  • Bruce Brouwer
  • Mikael Ståldal (Spotify)
  • Carter Kozak 
public class org.apache.logging.log4j.util.FilteredObjectInputStream extends java.io.ObjectInputStream
  minor version: 0
  major version: 59
  flags: flags: (0x0021) ACC_PUBLIC, ACC_SUPER
  this_class: org.apache.logging.log4j.util.FilteredObjectInputStream
  super_class: java.io.ObjectInputStream
{
  private static final java.util.List<java.lang.String> REQUIRED_JAVA_CLASSES;
    descriptor: Ljava/util/List;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    Signature: Ljava/util/List<Ljava/lang/String;>;

  private static final java.util.List<java.lang.String> REQUIRED_JAVA_PACKAGES;
    descriptor: Ljava/util/List;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    Signature: Ljava/util/List<Ljava/lang/String;>;

  private final java.util.Collection<java.lang.String> allowedClasses;
    descriptor: Ljava/util/Collection;
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL
    Signature: Ljava/util/Collection<Ljava/lang/String;>;

  static void <clinit>();
    descriptor: ()V
    flags: (0x0008) ACC_STATIC
    Code:
      stack=4, locals=0, args_size=0
         0: .line 36
            iconst_4
            anewarray java.lang.String
            dup
            iconst_0
         1: .line 37
            ldc "java.math.BigDecimal"
            aastore
            dup
            iconst_1
         2: .line 38
            ldc "java.math.BigInteger"
            aastore
            dup
            iconst_2
         3: .line 40
            ldc "java.rmi.MarshalledObject"
            aastore
            dup
            iconst_3
         4: .line 41
            ldc "[B"
            aastore
         5: .line 36
            invokestatic java.util.Arrays.asList:([Ljava/lang/Object;)Ljava/util/List;
            putstatic org.apache.logging.log4j.util.FilteredObjectInputStream.REQUIRED_JAVA_CLASSES:Ljava/util/List;
         6: .line 44
            iconst_5
            anewarray java.lang.String
            dup
            iconst_0
         7: .line 45
            ldc "java.lang."
            aastore
            dup
            iconst_1
         8: .line 46
            ldc "java.time"
            aastore
            dup
            iconst_2
         9: .line 47
            ldc "java.util."
            aastore
            dup
            iconst_3
        10: .line 48
            ldc "org.apache.logging.log4j."
            aastore
            dup
            iconst_4
        11: .line 49
            ldc "[Lorg.apache.logging.log4j."
            aastore
        12: .line 44
            invokestatic java.util.Arrays.asList:([Ljava/lang/Object;)Ljava/util/List;
            putstatic org.apache.logging.log4j.util.FilteredObjectInputStream.REQUIRED_JAVA_PACKAGES:Ljava/util/List;
        13: .line 50
            return
      LocalVariableTable:
        Start  End  Slot  Name  Signature

  public void <init>();
    descriptor: ()V
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=3, locals=1, args_size=1
        start local 0 // org.apache.logging.log4j.util.FilteredObjectInputStream this
         0: .line 55
            aload 0 /* this */
            invokespecial java.io.ObjectInputStream.<init>:()V
         1: .line 56
            aload 0 /* this */
            new java.util.HashSet
            dup
            invokespecial java.util.HashSet.<init>:()V
            putfield org.apache.logging.log4j.util.FilteredObjectInputStream.allowedClasses:Ljava/util/Collection;
         2: .line 57
            return
        end local 0 // org.apache.logging.log4j.util.FilteredObjectInputStream this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    3     0  this  Lorg/apache/logging/log4j/util/FilteredObjectInputStream;
    Exceptions:
      throws java.io.IOException, java.lang.SecurityException

  public void <init>(java.io.InputStream);
    descriptor: (Ljava/io/InputStream;)V
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=3, locals=2, args_size=2
        start local 0 // org.apache.logging.log4j.util.FilteredObjectInputStream this
        start local 1 // java.io.InputStream in
         0: .line 60
            aload 0 /* this */
            aload 1 /* in */
            invokespecial java.io.ObjectInputStream.<init>:(Ljava/io/InputStream;)V
         1: .line 61
            aload 0 /* this */
            new java.util.HashSet
            dup
            invokespecial java.util.HashSet.<init>:()V
            putfield org.apache.logging.log4j.util.FilteredObjectInputStream.allowedClasses:Ljava/util/Collection;
         2: .line 62
            return
        end local 1 // java.io.InputStream in
        end local 0 // org.apache.logging.log4j.util.FilteredObjectInputStream this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    3     0  this  Lorg/apache/logging/log4j/util/FilteredObjectInputStream;
            0    3     1    in  Ljava/io/InputStream;
    Exceptions:
      throws java.io.IOException
    MethodParameters:
      Name  Flags
      in    final

  public void <init>(java.util.Collection<java.lang.String>);
    descriptor: (Ljava/util/Collection;)V
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=2, locals=2, args_size=2
        start local 0 // org.apache.logging.log4j.util.FilteredObjectInputStream this
        start local 1 // java.util.Collection allowedClasses
         0: .line 65
            aload 0 /* this */
            invokespecial java.io.ObjectInputStream.<init>:()V
         1: .line 66
            aload 0 /* this */
            aload 1 /* allowedClasses */
            putfield org.apache.logging.log4j.util.FilteredObjectInputStream.allowedClasses:Ljava/util/Collection;
         2: .line 67
            return
        end local 1 // java.util.Collection allowedClasses
        end local 0 // org.apache.logging.log4j.util.FilteredObjectInputStream this
      LocalVariableTable:
        Start  End  Slot            Name  Signature
            0    3     0            this  Lorg/apache/logging/log4j/util/FilteredObjectInputStream;
            0    3     1  allowedClasses  Ljava/util/Collection<Ljava/lang/String;>;
    Exceptions:
      throws java.io.IOException, java.lang.SecurityException
    Signature: (Ljava/util/Collection<Ljava/lang/String;>;)V
    MethodParameters:
                Name  Flags
      allowedClasses  final

  public void <init>(java.io.InputStream, java.util.Collection<java.lang.String>);
    descriptor: (Ljava/io/InputStream;Ljava/util/Collection;)V
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=2, locals=3, args_size=3
        start local 0 // org.apache.logging.log4j.util.FilteredObjectInputStream this
        start local 1 // java.io.InputStream in
        start local 2 // java.util.Collection allowedClasses
         0: .line 70
            aload 0 /* this */
            aload 1 /* in */
            invokespecial java.io.ObjectInputStream.<init>:(Ljava/io/InputStream;)V
         1: .line 71
            aload 0 /* this */
            aload 2 /* allowedClasses */
            putfield org.apache.logging.log4j.util.FilteredObjectInputStream.allowedClasses:Ljava/util/Collection;
         2: .line 72
            return
        end local 2 // java.util.Collection allowedClasses
        end local 1 // java.io.InputStream in
        end local 0 // org.apache.logging.log4j.util.FilteredObjectInputStream this
      LocalVariableTable:
        Start  End  Slot            Name  Signature
            0    3     0            this  Lorg/apache/logging/log4j/util/FilteredObjectInputStream;
            0    3     1              in  Ljava/io/InputStream;
            0    3     2  allowedClasses  Ljava/util/Collection<Ljava/lang/String;>;
    Exceptions:
      throws java.io.IOException
    Signature: (Ljava/io/InputStream;Ljava/util/Collection<Ljava/lang/String;>;)V
    MethodParameters:
                Name  Flags
      in              final
      allowedClasses  final

  public java.util.Collection<java.lang.String> getAllowedClasses();
    descriptor: ()Ljava/util/Collection;
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // org.apache.logging.log4j.util.FilteredObjectInputStream this
         0: .line 75
            aload 0 /* this */
            getfield org.apache.logging.log4j.util.FilteredObjectInputStream.allowedClasses:Ljava/util/Collection;
            areturn
        end local 0 // org.apache.logging.log4j.util.FilteredObjectInputStream this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  this  Lorg/apache/logging/log4j/util/FilteredObjectInputStream;
    Signature: ()Ljava/util/Collection<Ljava/lang/String;>;

  protected java.lang.Class<?> resolveClass(java.io.ObjectStreamClass);
    descriptor: (Ljava/io/ObjectStreamClass;)Ljava/lang/Class;
    flags: (0x0004) ACC_PROTECTED
    Code:
      stack=5, locals=3, args_size=2
        start local 0 // org.apache.logging.log4j.util.FilteredObjectInputStream this
        start local 1 // java.io.ObjectStreamClass desc
         0: .line 80
            aload 1 /* desc */
            invokevirtual java.io.ObjectStreamClass.getName:()Ljava/lang/String;
            astore 2 /* name */
        start local 2 // java.lang.String name
         1: .line 81
            aload 2 /* name */
            invokestatic org.apache.logging.log4j.util.FilteredObjectInputStream.isAllowedByDefault:(Ljava/lang/String;)Z
            ifne 3
            aload 0 /* this */
            getfield org.apache.logging.log4j.util.FilteredObjectInputStream.allowedClasses:Ljava/util/Collection;
            aload 2 /* name */
            invokeinterface java.util.Collection.contains:(Ljava/lang/Object;)Z
            ifne 3
         2: .line 82
            new java.io.InvalidObjectException
            dup
            new java.lang.StringBuilder
            dup
            ldc "Class is not allowed for deserialization: "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 2 /* name */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokespecial java.io.InvalidObjectException.<init>:(Ljava/lang/String;)V
            athrow
         3: .line 84
      StackMap locals: java.lang.String
      StackMap stack:
            aload 0 /* this */
            aload 1 /* desc */
            invokespecial java.io.ObjectInputStream.resolveClass:(Ljava/io/ObjectStreamClass;)Ljava/lang/Class;
            areturn
        end local 2 // java.lang.String name
        end local 1 // java.io.ObjectStreamClass desc
        end local 0 // org.apache.logging.log4j.util.FilteredObjectInputStream this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    4     0  this  Lorg/apache/logging/log4j/util/FilteredObjectInputStream;
            0    4     1  desc  Ljava/io/ObjectStreamClass;
            1    4     2  name  Ljava/lang/String;
    Exceptions:
      throws java.io.IOException, java.lang.ClassNotFoundException
    Signature: (Ljava/io/ObjectStreamClass;)Ljava/lang/Class<*>;
    MethodParameters:
      Name  Flags
      desc  final

  private static boolean isAllowedByDefault(java.lang.String);
    descriptor: (Ljava/lang/String;)Z
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Code:
      stack=2, locals=1, args_size=1
        start local 0 // java.lang.String name
         0: .line 88
            aload 0 /* name */
            invokestatic org.apache.logging.log4j.util.FilteredObjectInputStream.isRequiredPackage:(Ljava/lang/String;)Z
            ifne 1
            getstatic org.apache.logging.log4j.util.FilteredObjectInputStream.REQUIRED_JAVA_CLASSES:Ljava/util/List;
            aload 0 /* name */
            invokeinterface java.util.List.contains:(Ljava/lang/Object;)Z
            ifne 1
            iconst_0
            ireturn
      StackMap locals:
      StackMap stack:
         1: iconst_1
            ireturn
        end local 0 // java.lang.String name
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    2     0  name  Ljava/lang/String;
    MethodParameters:
      Name  Flags
      name  final

  private static boolean isRequiredPackage(java.lang.String);
    descriptor: (Ljava/lang/String;)Z
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Code:
      stack=2, locals=3, args_size=1
        start local 0 // java.lang.String name
         0: .line 92
            getstatic org.apache.logging.log4j.util.FilteredObjectInputStream.REQUIRED_JAVA_PACKAGES:Ljava/util/List;
            invokeinterface java.util.List.iterator:()Ljava/util/Iterator;
            astore 2
            goto 4
      StackMap locals: java.lang.String top java.util.Iterator
      StackMap stack:
         1: aload 2
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast java.lang.String
            astore 1 /* packageName */
        start local 1 // java.lang.String packageName
         2: .line 93
            aload 0 /* name */
            aload 1 /* packageName */
            invokevirtual java.lang.String.startsWith:(Ljava/lang/String;)Z
            ifeq 4
         3: .line 94
            iconst_1
            ireturn
        end local 1 // java.lang.String packageName
         4: .line 92
      StackMap locals:
      StackMap stack:
            aload 2
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 1
         5: .line 97
            iconst_0
            ireturn
        end local 0 // java.lang.String name
      LocalVariableTable:
        Start  End  Slot         Name  Signature
            0    6     0         name  Ljava/lang/String;
            2    4     1  packageName  Ljava/lang/String;
    MethodParameters:
      Name  Flags
      name  final
}
SourceFile: "FilteredObjectInputStream.java"