CONTENTS | PREV | NEXT Java Remote Method Invocation


5.6 The RMIClassLoader Class

The java.rmi.server.RMIClassLoader class provides a set of public static utility methods for supporting network-based class loading in RMI. These methods are called by RMI's internal marshal streams to implement the dynamic class loading of types for RMI parameters and return values, but they also may be called directly by applications in order to mimic RMI's class loading behavior. The RMIClassLoader class has no publicly-accessible constructors and thus cannot be instantiated.

package java.rmi.server;

public class RMIClassLoader {
	public static String getClassAnnotation(Class cl);
	public static Object getSecurityContext(ClassLoader loader);
    public static Class loadClass(String name)
	    throws java.net.MalformedURLException, 
			    ClassNotFoundException;
	public static Class loadClass(String codebase, String name)
	    throws java.net.MalformedURLException, 
			   ClassNotFoundException;
    	public static Class loadClass(URL codebase, String name) 
		throws java.net.MalformedURLException, 
			   ClassNotFoundException;
}


The getClassAnnotation method returns a String representing the network codebase path that a remote endpoint should use for downloading the definition of the indicated class. The RMI runtime uses String objects returned by this method as the annotations for class descriptors in its marshal streams. The format of this codebase string is a path of codebase URL strings delimited by spaces.

The codebase string returned depends on the class loader of the supplied class:

The getSecurityContext method is deprecated because it is no longer applicable to the security model of JDK1.2; it was used internally in JDK1.1 to implement class loader-based security checks. If the indicated class loader was created by the RMI runtime to service an invocation of one of the RMIClassLoader.loadClass methods, the the first URL in the class loader's codebase path is returned; otherwise, null is returned.

The three loadClass methods all attempt to load the class with the specified name using the current thread's context class loader and, if there is a security manager set, an internal URLClassLoader for a particular codebase path (depending on the method):

For all of the loadClass methods, the codebase path is used in conjunction with the current thread's context class loader (determined by invoking getContextClassLoader on the current thread) to determine the internal class loader instance to attempt to load the class from. The RMI runtime maintains a table of internal class loader instances, keyed by the pair consisting of the parent class loader and the loader's codebase path (an ordered list of URLs). A loadClass method looks in the table for a URLClassLoader instance with the desired codebase path and the current thread's context class loader as its parent. If no such loader exists, then one is created and added to the table. Finally, the loadClass method is called on the chosen class loader with the specified class name.

If there is a security manager set (System.getSecurityManager does not return null), the caller of loadClass must have permission to connect to all of the URLs in the codebase path, or a ClassNotFoundException will be thrown. In order to prevent arbitrary untrusted code from being loaded into a Java VM with no security manager, if there is no security manager set, all of the loadClass methods will ignore the particular codebase path and only attempt to load the class with the specified name from the current thread's context class loader.



CONTENTS | PREV | NEXT
Copyright © 1997-1998 Sun Microsystems, Inc. All Rights Reserved.