1 /*
2 * Copyright (c) 1999, 2019, Oracle and/or its affiliates. All rights reserved.
3 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
4 *
5 * This code is free software; you can redistribute it and/or modify it
6 * under the terms of the GNU General Public License version 2 only, as
7 * published by the Free Software Foundation. Oracle designates this
8 * particular file as subject to the "Classpath" exception as provided
9 * by Oracle in the LICENSE file that accompanied this code.
10 *
11 * This code is distributed in the hope that it will be useful, but WITHOUT
12 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
13 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
14 * version 2 for more details (a copy is included in the LICENSE file that
15 * accompanied this code).
16 *
17 * You should have received a copy of the GNU General Public License version
18 * 2 along with this work; if not, write to the Free Software Foundation,
19 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
20 *
21 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
22 * or visit www.oracle.com if you need additional information or have any
23 * questions.
24 */
25
26 package java.lang.reflect;
27
28 import java.lang.module.ModuleDescriptor;
29 import java.security.AccessController;
30 import java.security.PrivilegedAction;
31 import java.util.Arrays;
32 import java.util.Collections;
33 import java.util.HashMap;
34 import java.util.HashSet;
35 import java.util.IdentityHashMap;
36 import java.util.List;
37 import java.util.Map;
38 import java.util.Objects;
39 import java.util.Set;
40 import java.util.concurrent.atomic.AtomicInteger;
41 import java.util.concurrent.atomic.AtomicLong;
42
43 import jdk.internal.access.JavaLangAccess;
44 import jdk.internal.access.SharedSecrets;
45 import jdk.internal.loader.BootLoader;
46 import jdk.internal.module.Modules;
47 import jdk.internal.misc.VM;
48 import jdk.internal.reflect.CallerSensitive;
49 import jdk.internal.reflect.Reflection;
50 import jdk.internal.loader.ClassLoaderValue;
51 import sun.reflect.misc.ReflectUtil;
52 import sun.security.action.GetPropertyAction;
53 import sun.security.util.SecurityConstants;
54
55 import static java.lang.module.ModuleDescriptor.Modifier.SYNTHETIC;
56
57
58 /**
59 *
60 * {@code Proxy} provides static methods for creating objects that act like instances
61 * of interfaces but allow for customized method invocation.
62 * To create a proxy instance for some interface {@code Foo}:
63 * <pre>{@code
64 * InvocationHandler handler = new MyInvocationHandler(...);
65 * Foo f = (Foo) Proxy.newProxyInstance(Foo.class.getClassLoader(),
66 * new Class<?>[] { Foo.class },
67 * handler);
68 * }</pre>
69 *
70 * <p>
71 * A <em>proxy class</em> is a class created at runtime that implements a specified
72 * list of interfaces, known as <em>proxy interfaces</em>. A <em>proxy instance</em>
73 * is an instance of a proxy class.
74 *
75 * Each proxy instance has an associated <i>invocation handler</i>
76 * object, which implements the interface {@link InvocationHandler}.
77 * A method invocation on a proxy instance through one of its proxy
78 * interfaces will be dispatched to the {@link InvocationHandler#invoke
79 * invoke} method of the instance's invocation handler, passing the proxy
80 * instance, a {@code java.lang.reflect.Method} object identifying
81 * the method that was invoked, and an array of type {@code Object}
82 * containing the arguments. The invocation handler processes the
83 * encoded method invocation as appropriate and the result that it
84 * returns will be returned as the result of the method invocation on
85 * the proxy instance.
86 *
87 * <p>A proxy class has the following properties:
88 *
89 * <ul>
90 * <li>The unqualified name of a proxy class is unspecified. The space
91 * of class names that begin with the string {@code "$Proxy"}
92 * should be, however, reserved for proxy classes.
93 *
94 * <li>The package and module in which a proxy class is defined is specified
95 * <a href="#membership">below</a>.
96 *
97 * <li>A proxy class is <em>final and non-abstract</em>.
98 *
99 * <li>A proxy class extends {@code java.lang.reflect.Proxy}.
100 *
101 * <li>A proxy class implements exactly the interfaces specified at its
102 * creation, in the same order. Invoking {@link Class#getInterfaces getInterfaces}
103 * on its {@code Class} object will return an array containing the same
104 * list of interfaces (in the order specified at its creation), invoking
105 * {@link Class#getMethods getMethods} on its {@code Class} object will return
106 * an array of {@code Method} objects that include all of the
107 * methods in those interfaces, and invoking {@code getMethod} will
108 * find methods in the proxy interfaces as would be expected.
109 *
110 * <li>The {@link java.security.ProtectionDomain} of a proxy class
111 * is the same as that of system classes loaded by the bootstrap class
112 * loader, such as {@code java.lang.Object}, because the code for a
113 * proxy class is generated by trusted system code. This protection
114 * domain will typically be granted {@code java.security.AllPermission}.
115 *
116 * <li>The {@link Proxy#isProxyClass Proxy.isProxyClass} method can be used
117 * to determine if a given class is a proxy class.
118 * </ul>
119 *
120 * <p>A proxy instance has the following properties:
121 *
122 * <ul>
123 * <li>Given a proxy instance {@code proxy} and one of the
124 * interfaces, {@code Foo}, implemented by its proxy class, the
125 * following expression will return true:
126 * <pre>
127 * {@code proxy instanceof Foo}
128 * </pre>
129 * and the following cast operation will succeed (rather than throwing
130 * a {@code ClassCastException}):
131 * <pre>
132 * {@code (Foo) proxy}
133 * </pre>
134 *
135 * <li>Each proxy instance has an associated invocation handler, the one
136 * that was passed to its constructor. The static
137 * {@link Proxy#getInvocationHandler Proxy.getInvocationHandler} method
138 * will return the invocation handler associated with the proxy instance
139 * passed as its argument.
140 *
141 * <li>An interface method invocation on a proxy instance will be
142 * encoded and dispatched to the invocation handler's {@link
143 * InvocationHandler#invoke invoke} method as described in the
144 * documentation for that method.
145 *
146 * <li>An invocation of the {@code hashCode},
147 * {@code equals}, or {@code toString} methods declared in
148 * {@code java.lang.Object} on a proxy instance will be encoded and
149 * dispatched to the invocation handler's {@code invoke} method in
150 * the same manner as interface method invocations are encoded and
151 * dispatched, as described above. The declaring class of the
152 * {@code Method} object passed to {@code invoke} will be
153 * {@code java.lang.Object}. Other public methods of a proxy
154 * instance inherited from {@code java.lang.Object} are not
155 * overridden by a proxy class, so invocations of those methods behave
156 * like they do for instances of {@code java.lang.Object}.
157 * </ul>
158 *
159 * <h2><a id="membership">Package and Module Membership of Proxy Class</a></h2>
160 *
161 * The package and module to which a proxy class belongs are chosen such that
162 * the accessibility of the proxy class is in line with the accessibility of
163 * the proxy interfaces. Specifically, the package and the module membership
164 * of a proxy class defined via the
165 * {@link Proxy#getProxyClass(ClassLoader, Class[])} or
166 * {@link Proxy#newProxyInstance(ClassLoader, Class[], InvocationHandler)}
167 * methods is specified as follows:
168 *
169 * <ol>
170 * <li>If all the proxy interfaces are in <em>exported</em> or <em>open</em>
171 * packages:
172 * <ol type="a">
173 * <li>if all the proxy interfaces are <em>public</em>, then the proxy class is
174 * <em>public</em> in a package exported by the
175 * {@linkplain ClassLoader#getUnnamedModule() unnamed module} of the specified
176 * loader. The name of the package is unspecified.</li>
177 *
178 * <li>if at least one of all the proxy interfaces is <em>non-public</em>, then
179 * the proxy class is <em>non-public</em> in the package and module of the
180 * non-public interfaces. All the non-public interfaces must be in the same
181 * package and module; otherwise, proxying them is
182 * <a href="#restrictions">not possible</a>.</li>
183 * </ol>
184 * </li>
185 * <li>If at least one proxy interface is in a package that is
186 * <em>non-exported</em> and <em>non-open</em>:
187 * <ol type="a">
188 * <li>if all the proxy interfaces are <em>public</em>, then the proxy class is
189 * <em>public</em> in a <em>non-exported</em>, <em>non-open</em> package of
190 * <a href="#dynamicmodule"><em>dynamic module</em>.</a>
191 * The names of the package and the module are unspecified.</li>
192 *
193 * <li>if at least one of all the proxy interfaces is <em>non-public</em>, then
194 * the proxy class is <em>non-public</em> in the package and module of the
195 * non-public interfaces. All the non-public interfaces must be in the same
196 * package and module; otherwise, proxying them is
197 * <a href="#restrictions">not possible</a>.</li>
198 * </ol>
199 * </li>
200 * </ol>
201 *
202 * <p>
203 * Note that if proxy interfaces with a mix of accessibilities -- for example,
204 * an exported public interface and a non-exported non-public interface -- are
205 * proxied by the same instance, then the proxy class's accessibility is
206 * governed by the least accessible proxy interface.
207 * <p>
208 * Note that it is possible for arbitrary code to obtain access to a proxy class
209 * in an open package with {@link AccessibleObject#setAccessible setAccessible},
210 * whereas a proxy class in a non-open package is never accessible to
211 * code outside the module of the proxy class.
212 *
213 * <p>
214 * Throughout this specification, a "non-exported package" refers to a package
215 * that is not exported to all modules, and a "non-open package" refers to
216 * a package that is not open to all modules. Specifically, these terms refer to
217 * a package that either is not exported/open by its containing module or is
218 * exported/open in a qualified fashion by its containing module.
219 *
220 * <h3><a id="dynamicmodule">Dynamic Modules</a></h3>
221 * <p>
222 * A dynamic module is a named module generated at runtime. A proxy class
223 * defined in a dynamic module is encapsulated and not accessible to any module.
224 * Calling {@link Constructor#newInstance(Object...)} on a proxy class in
225 * a dynamic module will throw {@code IllegalAccessException};
226 * {@code Proxy.newProxyInstance} method should be used instead.
227 *
228 * <p>
229 * A dynamic module can read the modules of all of the superinterfaces of a proxy
230 * class and the modules of the types referenced by all public method signatures
231 * of a proxy class. If a superinterface or a referenced type, say {@code T},
232 * is in a non-exported package, the {@linkplain Module module} of {@code T} is
233 * updated to export the package of {@code T} to the dynamic module.
234 *
235 * <h3>Methods Duplicated in Multiple Proxy Interfaces</h3>
236 *
237 * <p>When two or more proxy interfaces contain a method with
238 * the same name and parameter signature, the order of the proxy class's
239 * interfaces becomes significant. When such a <i>duplicate method</i>
240 * is invoked on a proxy instance, the {@code Method} object passed
241 * to the invocation handler will not necessarily be the one whose
242 * declaring class is assignable from the reference type of the interface
243 * that the proxy's method was invoked through. This limitation exists
244 * because the corresponding method implementation in the generated proxy
245 * class cannot determine which interface it was invoked through.
246 * Therefore, when a duplicate method is invoked on a proxy instance,
247 * the {@code Method} object for the method in the foremost interface
248 * that contains the method (either directly or inherited through a
249 * superinterface) in the proxy class's list of interfaces is passed to
250 * the invocation handler's {@code invoke} method, regardless of the
251 * reference type through which the method invocation occurred.
252 *
253 * <p>If a proxy interface contains a method with the same name and
254 * parameter signature as the {@code hashCode}, {@code equals},
255 * or {@code toString} methods of {@code java.lang.Object},
256 * when such a method is invoked on a proxy instance, the
257 * {@code Method} object passed to the invocation handler will have
258 * {@code java.lang.Object} as its declaring class. In other words,
259 * the public, non-final methods of {@code java.lang.Object}
260 * logically precede all of the proxy interfaces for the determination of
261 * which {@code Method} object to pass to the invocation handler.
262 *
263 * <p>Note also that when a duplicate method is dispatched to an
264 * invocation handler, the {@code invoke} method may only throw
265 * checked exception types that are assignable to one of the exception
266 * types in the {@code throws} clause of the method in <i>all</i> of
267 * the proxy interfaces that it can be invoked through. If the
268 * {@code invoke} method throws a checked exception that is not
269 * assignable to any of the exception types declared by the method in one
270 * of the proxy interfaces that it can be invoked through, then an
271 * unchecked {@code UndeclaredThrowableException} will be thrown by
272 * the invocation on the proxy instance. This restriction means that not
273 * all of the exception types returned by invoking
274 * {@code getExceptionTypes} on the {@code Method} object
275 * passed to the {@code invoke} method can necessarily be thrown
276 * successfully by the {@code invoke} method.
277 *
278 * @author Peter Jones
279 * @see InvocationHandler
280 * @since 1.3
281 * @revised 9
282 * @spec JPMS
283 */
284 public class Proxy implements java.io.Serializable {
285 private static final long serialVersionUID = -2222568056686623797L;
286
287 /** parameter types of a proxy class constructor */
288 private static final Class<?>[] constructorParams =
289 { InvocationHandler.class };
290
291 /**
292 * a cache of proxy constructors with
293 * {@link Constructor#setAccessible(boolean) accessible} flag already set
294 */
295 private static final ClassLoaderValue<Constructor<?>> proxyCache =
296 new ClassLoaderValue<>();
297
298 /**
299 * the invocation handler for this proxy instance.
300 * @serial
301 */
302 protected InvocationHandler h;
303
304 /**
305 * Prohibits instantiation.
306 */
307 private Proxy() {
308 }
309
310 /**
311 * Constructs a new {@code Proxy} instance from a subclass
312 * (typically, a dynamic proxy class) with the specified value
313 * for its invocation handler.
314 *
315 * @param h the invocation handler for this proxy instance
316 *
317 * @throws NullPointerException if the given invocation handler, {@code h},
318 * is {@code null}.
319 */
320 protected Proxy(InvocationHandler h) {
321 Objects.requireNonNull(h);
322 this.h = h;
323 }
324
325 /**
326 * Returns the {@code java.lang.Class} object for a proxy class
327 * given a class loader and an array of interfaces. The proxy class
328 * will be defined by the specified class loader and will implement
329 * all of the supplied interfaces. If any of the given interfaces
330 * is non-public, the proxy class will be non-public. If a proxy class
331 * for the same permutation of interfaces has already been defined by the
332 * class loader, then the existing proxy class will be returned; otherwise,
333 * a proxy class for those interfaces will be generated dynamically
334 * and defined by the class loader.
335 *
336 * @param loader the class loader to define the proxy class
337 * @param interfaces the list of interfaces for the proxy class
338 * to implement
339 * @return a proxy class that is defined in the specified class loader
340 * and that implements the specified interfaces
341 * @throws IllegalArgumentException if any of the <a href="#restrictions">
342 * restrictions</a> on the parameters are violated
343 * @throws SecurityException if a security manager, <em>s</em>, is present
344 * and any of the following conditions is met:
345 * <ul>
346 * <li> the given {@code loader} is {@code null} and
347 * the caller's class loader is not {@code null} and the
348 * invocation of {@link SecurityManager#checkPermission
349 * s.checkPermission} with
350 * {@code RuntimePermission("getClassLoader")} permission
351 * denies access.</li>
352 * <li> for each proxy interface, {@code intf},
353 * the caller's class loader is not the same as or an
354 * ancestor of the class loader for {@code intf} and
355 * invocation of {@link SecurityManager#checkPackageAccess
356 * s.checkPackageAccess()} denies access to {@code intf}.</li>
357 * </ul>
358 * @throws NullPointerException if the {@code interfaces} array
359 * argument or any of its elements are {@code null}
360 *
361 * @deprecated Proxy classes generated in a named module are encapsulated
362 * and not accessible to code outside its module.
363 * {@link Constructor#newInstance(Object...) Constructor.newInstance}
364 * will throw {@code IllegalAccessException} when it is called on
365 * an inaccessible proxy class.
366 * Use {@link #newProxyInstance(ClassLoader, Class[], InvocationHandler)}
367 * to create a proxy instance instead.
368 *
369 * @see <a href="#membership">Package and Module Membership of Proxy Class</a>
370 * @revised 9
371 * @spec JPMS
372 */
373 @Deprecated
374 @CallerSensitive
375 public static Class<?> getProxyClass(ClassLoader loader,
376 Class<?>... interfaces)
377 throws IllegalArgumentException
378 {
379 Class<?> caller = System.getSecurityManager() == null
380 ? null
381 : Reflection.getCallerClass();
382
383 return getProxyConstructor(caller, loader, interfaces)
384 .getDeclaringClass();
385 }
386
387 /**
388 * Returns the {@code Constructor} object of a proxy class that takes a
389 * single argument of type {@link InvocationHandler}, given a class loader
390 * and an array of interfaces. The returned constructor will have the
391 * {@link Constructor#setAccessible(boolean) accessible} flag already set.
392 *
393 * @param caller passed from a public-facing @CallerSensitive method if
394 * SecurityManager is set or {@code null} if there's no
395 * SecurityManager
396 * @param loader the class loader to define the proxy class
397 * @param interfaces the list of interfaces for the proxy class
398 * to implement
399 * @return a Constructor of the proxy class taking single
400 * {@code InvocationHandler} parameter
401 */
402 private static Constructor<?> getProxyConstructor(Class<?> caller,
403 ClassLoader loader,
404 Class<?>... interfaces)
405 {
406 // optimization for single interface
407 if (interfaces.length == 1) {
408 Class<?> intf = interfaces[0];
409 if (caller != null) {
410 checkProxyAccess(caller, loader, intf);
411 }
412 return proxyCache.sub(intf).computeIfAbsent(
413 loader,
414 (ld, clv) -> new ProxyBuilder(ld, clv.key()).build()
415 );
416 } else {
417 // interfaces cloned
418 final Class<?>[] intfsArray = interfaces.clone();
419 if (caller != null) {
420 checkProxyAccess(caller, loader, intfsArray);
421 }
422 final List<Class<?>> intfs = Arrays.asList(intfsArray);
423 return proxyCache.sub(intfs).computeIfAbsent(
424 loader,
425 (ld, clv) -> new ProxyBuilder(ld, clv.key()).build()
426 );
427 }
428 }
429
430 /*
431 * Check permissions required to create a Proxy class.
432 *
433 * To define a proxy class, it performs the access checks as in
434 * Class.forName (VM will invoke ClassLoader.checkPackageAccess):
435 * 1. "getClassLoader" permission check if loader == null
436 * 2. checkPackageAccess on the interfaces it implements
437 *
438 * To get a constructor and new instance of a proxy class, it performs
439 * the package access check on the interfaces it implements
440 * as in Class.getConstructor.
441 *
442 * If an interface is non-public, the proxy class must be defined by
443 * the defining loader of the interface. If the caller's class loader
444 * is not the same as the defining loader of the interface, the VM
445 * will throw IllegalAccessError when the generated proxy class is
446 * being defined.
447 */
448 private static void checkProxyAccess(Class<?> caller,
449 ClassLoader loader,
450 Class<?> ... interfaces)
451 {
452 SecurityManager sm = System.getSecurityManager();
453 if (sm != null) {
454 ClassLoader ccl = caller.getClassLoader();
455 if (loader == null && ccl != null) {
456 sm.checkPermission(SecurityConstants.GET_CLASSLOADER_PERMISSION);
457 }
458 ReflectUtil.checkProxyPackageAccess(ccl, interfaces);
459 }
460 }
461
462 /**
463 * Builder for a proxy class.
464 *
465 * If the module is not specified in this ProxyBuilder constructor,
466 * it will map from the given loader and interfaces to the module
467 * in which the proxy class will be defined.
468 */
469 private static final class ProxyBuilder {
470 private static final JavaLangAccess JLA = SharedSecrets.getJavaLangAccess();
471
472 // prefix for all proxy class names
473 private static final String proxyClassNamePrefix = "$Proxy";
474
475 // next number to use for generation of unique proxy class names
476 private static final AtomicLong nextUniqueNumber = new AtomicLong();
477
478 // a reverse cache of defined proxy classes
479 private static final ClassLoaderValue<Boolean> reverseProxyCache =
480 new ClassLoaderValue<>();
481
482 private static Class<?> defineProxyClass(Module m, List<Class<?>> interfaces) {
483 String proxyPkg = null; // package to define proxy class in
484 int accessFlags = Modifier.PUBLIC | Modifier.FINAL;
485
486 /*
487 * Record the package of a non-public proxy interface so that the
488 * proxy class will be defined in the same package. Verify that
489 * all non-public proxy interfaces are in the same package.
490 */
491 for (Class<?> intf : interfaces) {
492 int flags = intf.getModifiers();
493 if (!Modifier.isPublic(flags)) {
494 accessFlags = Modifier.FINAL; // non-public, final
495 String pkg = intf.getPackageName();
496 if (proxyPkg == null) {
497 proxyPkg = pkg;
498 } else if (!pkg.equals(proxyPkg)) {
499 throw new IllegalArgumentException(
500 "non-public interfaces from different packages");
501 }
502 }
503 }
504
505 if (proxyPkg == null) {
506 // all proxy interfaces are public
507 proxyPkg = m.isNamed() ? PROXY_PACKAGE_PREFIX + "." + m.getName()
508 : PROXY_PACKAGE_PREFIX;
509 } else if (proxyPkg.isEmpty() && m.isNamed()) {
510 throw new IllegalArgumentException(
511 "Unnamed package cannot be added to " + m);
512 }
513
514 if (m.isNamed()) {
515 if (!m.getDescriptor().packages().contains(proxyPkg)) {
516 throw new InternalError(proxyPkg + " not exist in " + m.getName());
517 }
518 }
519
520 /*
521 * Choose a name for the proxy class to generate.
522 */
523 long num = nextUniqueNumber.getAndIncrement();
524 String proxyName = proxyPkg.isEmpty()
525 ? proxyClassNamePrefix + num
526 : proxyPkg + "." + proxyClassNamePrefix + num;
527
528 ClassLoader loader = getLoader(m);
529 trace(proxyName, m, loader, interfaces);
530
531 /*
532 * Generate the specified proxy class.
533 */
534 byte[] proxyClassFile = ProxyGenerator.generateProxyClass(
535 proxyName, interfaces.toArray(EMPTY_CLASS_ARRAY), accessFlags);
536 try {
537 Class<?> pc = JLA.defineClass(loader, proxyName, proxyClassFile,
538 null, "__dynamic_proxy__");
539 reverseProxyCache.sub(pc).putIfAbsent(loader, Boolean.TRUE);
540 return pc;
541 } catch (ClassFormatError e) {
542 /*
543 * A ClassFormatError here means that (barring bugs in the
544 * proxy class generation code) there was some other
545 * invalid aspect of the arguments supplied to the proxy
546 * class creation (such as virtual machine limitations
547 * exceeded).
548 */
549 throw new IllegalArgumentException(e.toString());
550 }
551 }
552
553 /**
554 * Test if given class is a class defined by
555 * {@link #defineProxyClass(Module, List)}
556 */
557 static boolean isProxyClass(Class<?> c) {
558 return Objects.equals(reverseProxyCache.sub(c).get(c.getClassLoader()),
559 Boolean.TRUE);
560 }
561
562 private static boolean isExportedType(Class<?> c) {
563 String pn = c.getPackageName();
564 return Modifier.isPublic(c.getModifiers()) && c.getModule().isExported(pn);
565 }
566
567 private static boolean isPackagePrivateType(Class<?> c) {
568 return !Modifier.isPublic(c.getModifiers());
569 }
570
571 private static String toDetails(Class<?> c) {
572 String access = "unknown";
573 if (isExportedType(c)) {
574 access = "exported";
575 } else if (isPackagePrivateType(c)) {
576 access = "package-private";
577 } else {
578 access = "module-private";
579 }
580 ClassLoader ld = c.getClassLoader();
581 return String.format(" %s/%s %s loader %s",
582 c.getModule().getName(), c.getName(), access, ld);
583 }
584
585 static void trace(String cn,
586 Module module,
587 ClassLoader loader,
588 List<Class<?>> interfaces) {
589 if (isDebug()) {
590 System.err.format("PROXY: %s/%s defined by %s%n",
591 module.getName(), cn, loader);
592 }
593 if (isDebug("debug")) {
594 interfaces.forEach(c -> System.out.println(toDetails(c)));
595 }
596 }
597
598 private static final String DEBUG =
599 GetPropertyAction.privilegedGetProperty("jdk.proxy.debug", "");
600
601 private static boolean isDebug() {
602 return !DEBUG.isEmpty();
603 }
604 private static boolean isDebug(String flag) {
605 return DEBUG.equals(flag);
606 }
607
608 // ProxyBuilder instance members start here....
609
610 private final List<Class<?>> interfaces;
611 private final Module module;
612 ProxyBuilder(ClassLoader loader, List<Class<?>> interfaces) {
613 if (!VM.isModuleSystemInited()) {
614 throw new InternalError("Proxy is not supported until "
615 + "module system is fully initialized");
616 }
617 if (interfaces.size() > 65535) {
618 throw new IllegalArgumentException("interface limit exceeded: "
619 + interfaces.size());
620 }
621
622 Set<Class<?>> refTypes = referencedTypes(loader, interfaces);
623
624 // IAE if violates any restrictions specified in newProxyInstance
625 validateProxyInterfaces(loader, interfaces, refTypes);
626
627 this.interfaces = interfaces;
628 this.module = mapToModule(loader, interfaces, refTypes);
629 assert getLoader(module) == loader;
630 }
631
632 ProxyBuilder(ClassLoader loader, Class<?> intf) {
633 this(loader, Collections.singletonList(intf));
634 }
635
636 /**
637 * Generate a proxy class and return its proxy Constructor with
638 * accessible flag already set. If the target module does not have access
639 * to any interface types, IllegalAccessError will be thrown by the VM
640 * at defineClass time.
641 *
642 * Must call the checkProxyAccess method to perform permission checks
643 * before calling this.
644 */
645 Constructor<?> build() {
646 Class<?> proxyClass = defineProxyClass(module, interfaces);
647 final Constructor<?> cons;
648 try {
649 cons = proxyClass.getConstructor(constructorParams);
650 } catch (NoSuchMethodException e) {
651 throw new InternalError(e.toString(), e);
652 }
653 AccessController.doPrivileged(new PrivilegedAction<Void>() {
654 public Void run() {
655 cons.setAccessible(true);
656 return null;
657 }
658 });
659 return cons;
660 }
661
662 /**
663 * Validate the given proxy interfaces and the given referenced types
664 * are visible to the defining loader.
665 *
666 * @throws IllegalArgumentException if it violates the restrictions
667 * specified in {@link Proxy#newProxyInstance}
668 */
669 private static void validateProxyInterfaces(ClassLoader loader,
670 List<Class<?>> interfaces,
671 Set<Class<?>> refTypes)
672 {
673 Map<Class<?>, Boolean> interfaceSet = new IdentityHashMap<>(interfaces.size());
674 for (Class<?> intf : interfaces) {
675 /*
676 * Verify that the class loader resolves the name of this
677 * interface to the same Class object.
678 */
679 ensureVisible(loader, intf);
680
681 /*
682 * Verify that the Class object actually represents an
683 * interface.
684 */
685 if (!intf.isInterface()) {
686 throw new IllegalArgumentException(intf.getName() + " is not an interface");
687 }
688
689 /*
690 * Verify that this interface is not a duplicate.
691 */
692 if (interfaceSet.put(intf, Boolean.TRUE) != null) {
693 throw new IllegalArgumentException("repeated interface: " + intf.getName());
694 }
695 }
696
697 for (Class<?> type : refTypes) {
698 ensureVisible(loader, type);
699 }
700 }
701
702 /*
703 * Returns all types referenced by all public non-static method signatures of
704 * the proxy interfaces
705 */
706 private static Set<Class<?>> referencedTypes(ClassLoader loader,
707 List<Class<?>> interfaces) {
708 var types = new HashSet<Class<?>>();
709 for (var intf : interfaces) {
710 for (Method m : intf.getMethods()) {
711 if (!Modifier.isStatic(m.getModifiers())) {
712 addElementType(types, m.getReturnType());
713 addElementTypes(types, m.getSharedParameterTypes());
714 addElementTypes(types, m.getSharedExceptionTypes());
715 }
716 }
717 }
718 return types;
719 }
720
721 private static void addElementTypes(HashSet<Class<?>> types,
722 Class<?> ... classes) {
723 for (var cls : classes) {
724 addElementType(types, cls);
725 }
726 }
727
728 private static void addElementType(HashSet<Class<?>> types,
729 Class<?> cls) {
730 var type = getElementType(cls);
731 if (!type.isPrimitive()) {
732 types.add(type);
733 }
734 }
735
736 /**
737 * Returns the module that the generated proxy class belongs to.
738 *
739 * If all proxy interfaces are public and in exported packages,
740 * then the proxy class is in unnamed module.
741 *
742 * If any of proxy interface is package-private, then the proxy class
743 * is in the same module of the package-private interface.
744 *
745 * If all proxy interfaces are public and at least one in a non-exported
746 * package, then the proxy class is in a dynamic module in a
747 * non-exported package. Reads edge and qualified exports are added
748 * for dynamic module to access.
749 */
750 private static Module mapToModule(ClassLoader loader,
751 List<Class<?>> interfaces,
752 Set<Class<?>> refTypes) {
753 Map<Class<?>, Module> modulePrivateTypes = new HashMap<>();
754 Map<Class<?>, Module> packagePrivateTypes = new HashMap<>();
755 for (Class<?> intf : interfaces) {
756 Module m = intf.getModule();
757 if (Modifier.isPublic(intf.getModifiers())) {
758 // module-private types
759 if (!m.isExported(intf.getPackageName())) {
760 modulePrivateTypes.put(intf, m);
761 }
762 } else {
763 packagePrivateTypes.put(intf, m);
764 }
765 }
766
767 // all proxy interfaces are public and exported, the proxy class
768 // is in unnamed module. Such proxy class is accessible to
769 // any unnamed module and named module that can read unnamed module
770 if (packagePrivateTypes.isEmpty() && modulePrivateTypes.isEmpty()) {
771 return loader != null ? loader.getUnnamedModule()
772 : BootLoader.getUnnamedModule();
773 }
774
775 if (packagePrivateTypes.size() > 0) {
776 // all package-private types must be in the same runtime package
777 // i.e. same package name and same module (named or unnamed)
778 //
779 // Configuration will fail if M1 and in M2 defined by the same loader
780 // and both have the same package p (so no need to check class loader)
781 if (packagePrivateTypes.size() > 1 &&
782 (packagePrivateTypes.keySet().stream() // more than one package
783 .map(Class::getPackageName).distinct().count() > 1 ||
784 packagePrivateTypes.values().stream() // or more than one module
785 .distinct().count() > 1)) {
786 throw new IllegalArgumentException(
787 "non-public interfaces from different packages");
788 }
789
790 // all package-private types are in the same module (named or unnamed)
791 Module target = null;
792 for (Module m : packagePrivateTypes.values()) {
793 if (getLoader(m) != loader) {
794 // the specified loader is not the same class loader
795 // of the non-public interface
796 throw new IllegalArgumentException(
797 "non-public interface is not defined by the given loader");
798 }
799 target = m;
800 }
801
802 // validate if the target module can access all other interfaces
803 for (Class<?> intf : interfaces) {
804 Module m = intf.getModule();
805 if (m == target) continue;
806
807 if (!target.canRead(m) || !m.isExported(intf.getPackageName(), target)) {
808 throw new IllegalArgumentException(target + " can't access " + intf.getName());
809 }
810 }
811
812 // return the module of the package-private interface
813 return target;
814 }
815
816 // All proxy interfaces are public and at least one in a non-exported
817 // package. So maps to a dynamic proxy module and add reads edge
818 // and qualified exports, if necessary
819 Module target = getDynamicModule(loader);
820
821 // set up proxy class access to proxy interfaces and types
822 // referenced in the method signature
823 Set<Class<?>> types = new HashSet<>(interfaces);
824 types.addAll(refTypes);
825 for (Class<?> c : types) {
826 ensureAccess(target, c);
827 }
828 return target;
829 }
830
831 /*
832 * Ensure the given module can access the given class.
833 */
834 private static void ensureAccess(Module target, Class<?> c) {
835 Module m = c.getModule();
836 // add read edge and qualified export for the target module to access
837 if (!target.canRead(m)) {
838 Modules.addReads(target, m);
839 }
840 String pn = c.getPackageName();
841 if (!m.isExported(pn, target)) {
842 Modules.addExports(m, pn, target);
843 }
844 }
845
846 /*
847 * Ensure the given class is visible to the class loader.
848 */
849 private static void ensureVisible(ClassLoader ld, Class<?> c) {
850 Class<?> type = null;
851 try {
852 type = Class.forName(c.getName(), false, ld);
853 } catch (ClassNotFoundException e) {
854 }
855 if (type != c) {
856 throw new IllegalArgumentException(c.getName() +
857 " referenced from a method is not visible from class loader");
858 }
859 }
860
861 private static Class<?> getElementType(Class<?> type) {
862 Class<?> e = type;
863 while (e.isArray()) {
864 e = e.getComponentType();
865 }
866 return e;
867 }
868
869 private static final ClassLoaderValue<Module> dynProxyModules =
870 new ClassLoaderValue<>();
871 private static final AtomicInteger counter = new AtomicInteger();
872
873 /*
874 * Define a dynamic module for the generated proxy classes in
875 * a non-exported package named com.sun.proxy.$MODULE.
876 *
877 * Each class loader will have one dynamic module.
878 */
879 private static Module getDynamicModule(ClassLoader loader) {
880 return dynProxyModules.computeIfAbsent(loader, (ld, clv) -> {
881 // create a dynamic module and setup module access
882 String mn = "jdk.proxy" + counter.incrementAndGet();
883 String pn = PROXY_PACKAGE_PREFIX + "." + mn;
884 ModuleDescriptor descriptor =
885 ModuleDescriptor.newModule(mn, Set.of(SYNTHETIC))
886 .packages(Set.of(pn))
887 .build();
888 Module m = Modules.defineModule(ld, descriptor, null);
889 Modules.addReads(m, Proxy.class.getModule());
890 // java.base to create proxy instance
891 Modules.addExports(m, pn, Object.class.getModule());
892 return m;
893 });
894 }
895 }
896
897 /**
898 * Returns a proxy instance for the specified interfaces
899 * that dispatches method invocations to the specified invocation
900 * handler.
901 * <p>
902 * <a id="restrictions">{@code IllegalArgumentException} will be thrown
903 * if any of the following restrictions is violated:</a>
904 * <ul>
905 * <li>All of {@code Class} objects in the given {@code interfaces} array
906 * must represent interfaces, not classes or primitive types.
907 *
908 * <li>No two elements in the {@code interfaces} array may
909 * refer to identical {@code Class} objects.
910 *
911 * <li>All of the interface types must be visible by name through the
912 * specified class loader. In other words, for class loader
913 * {@code cl} and every interface {@code i}, the following
914 * expression must be true:<p>
915 * {@code Class.forName(i.getName(), false, cl) == i}
916 *
917 * <li>All of the types referenced by all
918 * public method signatures of the specified interfaces
919 * and those inherited by their superinterfaces
920 * must be visible by name through the specified class loader.
921 *
922 * <li>All non-public interfaces must be in the same package
923 * and module, defined by the specified class loader and
924 * the module of the non-public interfaces can access all of
925 * the interface types; otherwise, it would not be possible for
926 * the proxy class to implement all of the interfaces,
927 * regardless of what package it is defined in.
928 *
929 * <li>For any set of member methods of the specified interfaces
930 * that have the same signature:
931 * <ul>
932 * <li>If the return type of any of the methods is a primitive
933 * type or void, then all of the methods must have that same
934 * return type.
935 * <li>Otherwise, one of the methods must have a return type that
936 * is assignable to all of the return types of the rest of the
937 * methods.
938 * </ul>
939 *
940 * <li>The resulting proxy class must not exceed any limits imposed
941 * on classes by the virtual machine. For example, the VM may limit
942 * the number of interfaces that a class may implement to 65535; in
943 * that case, the size of the {@code interfaces} array must not
944 * exceed 65535.
945 * </ul>
946 *
947 * <p>Note that the order of the specified proxy interfaces is
948 * significant: two requests for a proxy class with the same combination
949 * of interfaces but in a different order will result in two distinct
950 * proxy classes.
951 *
952 * @param loader the class loader to define the proxy class
953 * @param interfaces the list of interfaces for the proxy class
954 * to implement
955 * @param h the invocation handler to dispatch method invocations to
956 * @return a proxy instance with the specified invocation handler of a
957 * proxy class that is defined by the specified class loader
958 * and that implements the specified interfaces
959 * @throws IllegalArgumentException if any of the <a href="#restrictions">
960 * restrictions</a> on the parameters are violated
961 * @throws SecurityException if a security manager, <em>s</em>, is present
962 * and any of the following conditions is met:
963 * <ul>
964 * <li> the given {@code loader} is {@code null} and
965 * the caller's class loader is not {@code null} and the
966 * invocation of {@link SecurityManager#checkPermission
967 * s.checkPermission} with
968 * {@code RuntimePermission("getClassLoader")} permission
969 * denies access;</li>
970 * <li> for each proxy interface, {@code intf},
971 * the caller's class loader is not the same as or an
972 * ancestor of the class loader for {@code intf} and
973 * invocation of {@link SecurityManager#checkPackageAccess
974 * s.checkPackageAccess()} denies access to {@code intf};</li>
975 * <li> any of the given proxy interfaces is non-public and the
976 * caller class is not in the same {@linkplain Package runtime package}
977 * as the non-public interface and the invocation of
978 * {@link SecurityManager#checkPermission s.checkPermission} with
979 * {@code ReflectPermission("newProxyInPackage.{package name}")}
980 * permission denies access.</li>
981 * </ul>
982 * @throws NullPointerException if the {@code interfaces} array
983 * argument or any of its elements are {@code null}, or
984 * if the invocation handler, {@code h}, is
985 * {@code null}
986 *
987 * @see <a href="#membership">Package and Module Membership of Proxy Class</a>
988 * @revised 9
989 * @spec JPMS
990 */
991 @CallerSensitive
992 public static Object newProxyInstance(ClassLoader loader,
993 Class<?>[] interfaces,
994 InvocationHandler h) {
995 Objects.requireNonNull(h);
996
997 final Class<?> caller = System.getSecurityManager() == null
998 ? null
999 : Reflection.getCallerClass();
1000
1001 /*
1002 * Look up or generate the designated proxy class and its constructor.
1003 */
1004 Constructor<?> cons = getProxyConstructor(caller, loader, interfaces);
1005
1006 return newProxyInstance(caller, cons, h);
1007 }
1008
1009 private static Object newProxyInstance(Class<?> caller, // null if no SecurityManager
1010 Constructor<?> cons,
1011 InvocationHandler h) {
1012 /*
1013 * Invoke its constructor with the designated invocation handler.
1014 */
1015 try {
1016 if (caller != null) {
1017 checkNewProxyPermission(caller, cons.getDeclaringClass());
1018 }
1019
1020 return cons.newInstance(new Object[]{h});
1021 } catch (IllegalAccessException | InstantiationException e) {
1022 throw new InternalError(e.toString(), e);
1023 } catch (InvocationTargetException e) {
1024 Throwable t = e.getCause();
1025 if (t instanceof RuntimeException) {
1026 throw (RuntimeException) t;
1027 } else {
1028 throw new InternalError(t.toString(), t);
1029 }
1030 }
1031 }
1032
1033 private static void checkNewProxyPermission(Class<?> caller, Class<?> proxyClass) {
1034 SecurityManager sm = System.getSecurityManager();
1035 if (sm != null) {
1036 if (ReflectUtil.isNonPublicProxyClass(proxyClass)) {
1037 ClassLoader ccl = caller.getClassLoader();
1038 ClassLoader pcl = proxyClass.getClassLoader();
1039
1040 // do permission check if the caller is in a different runtime package
1041 // of the proxy class
1042 String pkg = proxyClass.getPackageName();
1043 String callerPkg = caller.getPackageName();
1044
1045 if (pcl != ccl || !pkg.equals(callerPkg)) {
1046 sm.checkPermission(new ReflectPermission("newProxyInPackage." + pkg));
1047 }
1048 }
1049 }
1050 }
1051
1052 /**
1053 * Returns the class loader for the given module.
1054 */
1055 private static ClassLoader getLoader(Module m) {
1056 PrivilegedAction<ClassLoader> pa = m::getClassLoader;
1057 return AccessController.doPrivileged(pa);
1058 }
1059
1060 /**
1061 * Returns true if the given class is a proxy class.
1062 *
1063 * @implNote The reliability of this method is important for the ability
1064 * to use it to make security decisions, so its implementation should
1065 * not just test if the class in question extends {@code Proxy}.
1066 *
1067 * @param cl the class to test
1068 * @return {@code true} if the class is a proxy class and
1069 * {@code false} otherwise
1070 * @throws NullPointerException if {@code cl} is {@code null}
1071 *
1072 * @revised 9
1073 * @spec JPMS
1074 */
1075 public static boolean isProxyClass(Class<?> cl) {
1076 return Proxy.class.isAssignableFrom(cl) && ProxyBuilder.isProxyClass(cl);
1077 }
1078
1079 /**
1080 * Returns the invocation handler for the specified proxy instance.
1081 *
1082 * @param proxy the proxy instance to return the invocation handler for
1083 * @return the invocation handler for the proxy instance
1084 * @throws IllegalArgumentException if the argument is not a
1085 * proxy instance
1086 * @throws SecurityException if a security manager, <em>s</em>, is present
1087 * and the caller's class loader is not the same as or an
1088 * ancestor of the class loader for the invocation handler
1089 * and invocation of {@link SecurityManager#checkPackageAccess
1090 * s.checkPackageAccess()} denies access to the invocation
1091 * handler's class.
1092 */
1093 @CallerSensitive
1094 public static InvocationHandler getInvocationHandler(Object proxy)
1095 throws IllegalArgumentException
1096 {
1097 /*
1098 * Verify that the object is actually a proxy instance.
1099 */
1100 if (!isProxyClass(proxy.getClass())) {
1101 throw new IllegalArgumentException("not a proxy instance");
1102 }
1103
1104 final Proxy p = (Proxy) proxy;
1105 final InvocationHandler ih = p.h;
1106 if (System.getSecurityManager() != null) {
1107 Class<?> ihClass = ih.getClass();
1108 Class<?> caller = Reflection.getCallerClass();
1109 if (ReflectUtil.needsPackageAccessCheck(caller.getClassLoader(),
1110 ihClass.getClassLoader()))
1111 {
1112 ReflectUtil.checkPackageAccess(ihClass);
1113 }
1114 }
1115
1116 return ih;
1117 }
1118
1119 private static final Class<?>[] EMPTY_CLASS_ARRAY = new Class<?>[0];
1120 private static final String PROXY_PACKAGE_PREFIX = ReflectUtil.PROXY_PACKAGE;
1121 }