Deepcopy by Serializable in Java

Posted on Edited on In Views: Word count in article: 2.7k Reading time ≈ 2 mins.
Deepcopy by Serializable

Deep Copy in Java

By Serializable

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
package individual.cy.learn.mess;

import java.io.ByteArrayInputStream;
import java.io.ByteArrayOutputStream;
import java.io.IOException;
import java.io.InputStream;
import java.io.InvalidClassException;
import java.io.ObjectInputStream;
import java.io.ObjectOutputStream;
import java.io.ObjectStreamClass;
import java.io.Serializable;
import java.util.Arrays;
import java.util.Collections;
import java.util.HashSet;
import java.util.Set;

/**
 * @author mystic
 */
public class DeepCopyUtils {
    public static <T extends Serializable> T clone(T obj) {
        T cloneObj = null;
        try {
            // write byte stream
            try (ByteArrayOutputStream baos = new ByteArrayOutputStream()) {
                try (ObjectOutputStream oos = new ObjectOutputStream(baos)) {
                    oos.writeObject(obj);
                }
                // assign memory, write raw object, generate new object
                try (ByteArrayInputStream bais = new ByteArrayInputStream(baos.toByteArray())) {
                    try (ObjectInputStream ois = new ObjectInputStream(bais)) {
                        // return new object
                        // noinspection unchecked
                        cloneObj = (T) ois.readObject();
                    }
                }
            }
        } catch (IOException | ClassNotFoundException e) {
            System.out.println("Some errors occurred during cloning." + e);
        }
        return cloneObj;
    }

    public static <T extends Serializable> T cloneWithLimited(T obj) {
        T cloneObj = null;
        try {
            // write byte stream
            try (ByteArrayOutputStream baos = new ByteArrayOutputStream()) {
                try (ObjectOutputStream oos = new ObjectOutputStream(baos)) {
                    oos.writeObject(obj);
                }
                // assign memory, write raw object, generate new object
                try (ByteArrayInputStream bais = new ByteArrayInputStream(baos.toByteArray())) {
                    // FIXME maybe read file is much better
                    Set<Object> whitelist = new HashSet<>(Arrays.asList("GoodClass1", "GoodClass2"));
                    try (WhitelistedObjectInputStream ois = new WhitelistedObjectInputStream(bais, whitelist)) {
                        // return new object
                        // noinspection unchecked
                        cloneObj = (T) ois.readObject();
                    }
                }
            }
        } catch (IOException | ClassNotFoundException e) {
            System.out.println("Some errors occurred during cloning." + e);
        }
        return cloneObj;
    }
}

class WhitelistedObjectInputStream extends ObjectInputStream {
    private final Set<Object> whitelist;

    WhitelistedObjectInputStream(InputStream inputStream, Set<Object> wl) throws IOException {
        super(inputStream);
        whitelist = Collections.unmodifiableSet(wl);
    }

    @Override
    protected Class<?> resolveClass(ObjectStreamClass cls) throws IOException, ClassNotFoundException {
        if (!whitelist.contains(cls.getName())) {
            throw new InvalidClassException("Unexpected serialized class", cls.getName());
        }
        return super.resolveClass(cls);
    }
}