Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Deserialized object instance without class definition

In anyone aware of a tool/script/program/whatever to create a java object instance from a binary java serialized object?

I don't have the .class file, so I can't ( afaik ) simply create an ObjectInputStream and load it from there.

This object has the default serialization mechanism, and I'm trying to debug a problem we have.

Anyone?

like image 450
OscarRyz Avatar asked Jul 02 '09 21:07

OscarRyz


People also ask

What is Deserialized object?

Deserialization is the process of reconstructing a data structure or object from a series of bytes or a string in order to instantiate the object for consumption. This is the reverse process of serialization, i.e., converting a data structure or object into a series of bytes for storage or transmission across devices.

What is serialized and Deserialized in Java?

Serialization is a mechanism of converting the state of an object into a byte stream. Deserialization is the reverse process where the byte stream is used to recreate the actual Java object in memory. This mechanism is used to persist the object. The byte stream created is platform independent.

What should never be serialized Deserialized?

Examples of sensitive data that should never be serialized include cryptographic keys, digital certificates, and classes that may hold references to sensitive data at the time of serialization.

Does deserialization create new object?

When you deserialize your object, the object will create a new entry in heap which will not have any references to any of the objects.


1 Answers

There was a rather detailed post about the format in JavaWorld recently... Might be worth reading.

Link: http://www.javaworld.com/community/node/2915

like image 61
Fredrik Avatar answered Sep 24 '22 17:09

Fredrik