解读阿里巴巴Java手册：为什么禁止开发人员修改serialVersionUID 字段的值

serialVersionUID适用于Java的序列化机制。简单来说，Java的序列化机制是通过判断类的serialVersionUID来验证版本一致性的。在进行反序列化时，JVM会把传来的字节流中的serialVersionUID与本地相应实体类的serialVersionUID进行比较，如果相同就认为是一致的，可以进行反序列化，否则就会出现序列化版本不一致的异常，即是InvalidCastException。
看一下实现Serializable的类。如果没有serialVersionUID话该类会提示一个警告。

想序列化一个类不定义serialVersionUID也是可以运行的，编译器会自动为我们添加上。

看一下序列化不设置serialVersionUID于不一致的serialVersionUID

不设置serialVersionUID

public class Demo implements Serializable{
	@Override
	public String toString() {
		return "Demo3 [isSuccess=" + isSuccess + "]";
	}
	public boolean isSuccess() {
		return isSuccess;
	}
	public void setSuccess(boolean isSuccess) {
		this.isSuccess = isSuccess;
	}
	boolean isSuccess;
}

运行一下序列化：

public class Test {
	public static void main(String[] args) throws IOException, ClassNotFoundException {
		//定一个demo类型
		Demo demo = new Demo();
		demo.isSuccess = true;
		ObjectOutputStream oos = null;
		//demo不考虑序列化安全问题
		//序列化
        oos = new ObjectOutputStream(new FileOutputStream("test.txt"));
        oos.writeObject(demo);
        oos.close();
	}
}

结果：
修改下Demo类，添加一个属性：

public class Demo implements Serializable{
	
	@Override
	public String toString() {
		return "Demo3 [isSuccess=" + isSuccess + "]";
	}

	public boolean isSuccess() {
		return isSuccess;
	}

	public void setSuccess(boolean isSuccess) {
		this.isSuccess = isSuccess;
	}
	
	String test = "1";

	boolean isSuccess;
	
}

反序列化：

public class Test {
	public static void main(String[] args) throws IOException, ClassNotFoundException {
		//demo不考虑序列化安全问题
        //反序列化
        File file = new File("test.txt");
        ObjectInputStream ois = null;
        ois = new ObjectInputStream(new FileInputStream(file));
        Demo demo = (Demo) ois.readObject();
        System.out.println(demo);
	}
}

看一下系统运行的报错：

Exception in thread "main" java.io.InvalidClassException: com.demo.Demo; local class incompatible: stream classdesc serialVersionUID = -5585695737382742207, local class serialVersionUID = -7823641577775159698
	at java.io.ObjectStreamClass.initNonProxy(ObjectStreamClass.java:699)
	at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1963)
	at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1829)
	at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:2120)
	at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1646)
	at java.io.ObjectInputStream.readObject(ObjectInputStream.java:482)
	at java.io.ObjectInputStream.readObject(ObjectInputStream.java:440)
	at com.demo.Test.main(Test.java:18)

stream classdesc serialVersionUID = -5585695737382742207, local class serialVersionUID = -7823641577775159698 说明这两个类是在编译阶段为我们加上了serialVersionUID。

看serialVersionUID不同

用下面的类序列化

public class Demo implements Serializable{
	
	private static final long serialVersionUID = 1L;

	@Override
	public String toString() {
		return "Demo3 [isSuccess=" + isSuccess + "]";
	}

	public boolean isSuccess() {
		return isSuccess;
	}

	public void setSuccess(boolean isSuccess) {
		this.isSuccess = isSuccess;
	}

	boolean isSuccess;
	
}

public class Test {
	public static void main(String[] args) throws IOException, ClassNotFoundException {
		//定一个demo类型
		Demo demo = new Demo();
		demo.isSuccess = true;
		ObjectOutputStream oos = null;
		//demo不考虑序列化安全问题
		//序列化
        oos = new ObjectOutputStream(new FileOutputStream("test.txt"));
        oos.writeObject(demo);
        oos.close()；
	}
}

把序列化的serialVersionUID改为2L反序列化：

public class Test {
	public static void main(String[] args) throws IOException, ClassNotFoundException {
		//demo不考虑序列化安全问题
        //反序列化
        File file = new File("test.txt");
        ObjectInputStream ois = null;
        ois = new ObjectInputStream(new FileInputStream(file));
        Demo demo2 = (Demo) ois.readObject();
        System.out.println(demo2);
	}
}

查看报错：

Exception in thread "main" java.io.InvalidClassException: com.demo.Demo; local class incompatible: stream classdesc serialVersionUID = 1, local class serialVersionUID = 2
	at java.io.ObjectStreamClass.initNonProxy(ObjectStreamClass.java:699)
	at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1963)
	at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1829)
	at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:2120)
	at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1646)
	at java.io.ObjectInputStream.readObject(ObjectInputStream.java:482)
	at java.io.ObjectInputStream.readObject(ObjectInputStream.java:440)
	at com.demo.Test.main(Test.java:18)

serialVersionUID生成方式

serialVersionUID有两种显示的生成方式：
一是默认的1L，比如：private static final long serialVersionUID = 1L;
二是根据类名、接口名、成员方法及属性等来生成一个64位的哈希字段，比如：
private static final long serialVersionUID = xxxxL;

serialVersionUID是用来验证版本一致性的。所以在做兼容性升级的时候，不要改变类中serialVersionUID的值。

如果一个类实现了Serializable接口，一定要记得定义serialVersionUID，否则会发生异常。可以在IDE中通过设置，让他帮忙提示，并且可以一键快速生成一个serialVersionUID。