java的发射_Java 发射setAccessible()原理

源码

* @param  obj  the object the underlying method is invoked from

* @param  args the arguments used for the method call

* @return  the result of dispatching the method represented by

* this object on {@code  obj} with parameters

@CallerSensitive

public Object invoke(Object obj, Object... args)

throws IllegalAccessException, IllegalArgumentException,

InvocationTargetException

{

if (!override) {//如果override为false则进入检查否则跳过

if (!Reflection.quickCheckMemberAccess(clazz, modifiers)) {

Class> caller = Reflection.getCallerClass();

checkAccess(caller, clazz, obj, modifiers);

}

}

MethodAccessor ma = methodAccessor;             // read volatile

if (ma == null) {

ma = acquireMethodAccessor();

}

return ma.invoke(obj, args);

}

调用invoke()方法之前会进行检查，而setAccessible(true);则设置override为true从而跳过安全检查源码如下：

public void setAccessible(boolean flag) throws SecurityException {

SecurityManager sm = System.getSecurityManager();

if (sm != null) sm.checkPermission(ACCESS_PERMISSION);

setAccessible0(this, flag);

}

再看看setAccessible0(this, flag);方法

/* Check that you aren't exposing java.lang.Class.. */

private static void setAccessible0(AccessibleObject obj, boolean flag)

throws SecurityException

{

if (obj instanceof Constructor && flag == true) {

Constructor> c = (Constructor>)obj;

if (c.getDeclaringClass() == Class.class) {

throw new SecurityException("Can not make a java.lang.Class" +

" constructor accessible");

}

}

obj.override = flag;

}