[OFBIZ-4295] Deserialization of arrays with UtilObject.getObject() throws ClassNotFoundException

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Trunk
• Fix Version/s: Release Branch 09.04, Release Branch 10.04, Release Branch 11.04, Trunk
• Component/s: framework
• Assignee: Jacques Le Roux
• Reporter: Martin Kreidenweis
• Created: 26/May/11 07:34
• Updated: 01/Jan/12 10:10
• Resolved: 01/Jan/12 10:10

Description

Deserialization of arrays with UtilObject.getObject() throws a ClassNotFoundException. This happened to us when we enabled the distributed cache clear feature and it was sending arrays of EntityExpr objects to other OFBiz instances.

The reason is, that the org.ofbiz.base.util.ObjectInputStream calls classLoader.loadClass(name) directly instead of using Class.forName(name, init, classLoader).
According to java bug http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6446627 ClassLoader.loadClass() is not intended to being used this way and doesn't support loading arrays.