X-Git-Url: http://gitweb.fperrin.net/?a=blobdiff_plain;ds=sidebyside;f=src%2Fcom%2Fhughes%2Fandroid%2Futil%2FPersistentObjectCache.java;h=7ac07458f2cd30ceb23b1e840d7d21859f2a9c45;hb=e79165503392ed6a7cb7a8eadc15eaae0cda9443;hp=56c546e9d5a869da25e712e6a4e8897c718d6c2c;hpb=a3086cfc95ca651d283ab639b1ace0b0ecc90ea3;p=Dictionary.git diff --git a/src/com/hughes/android/util/PersistentObjectCache.java b/src/com/hughes/android/util/PersistentObjectCache.java index 56c546e..7ac0745 100644 --- a/src/com/hughes/android/util/PersistentObjectCache.java +++ b/src/com/hughes/android/util/PersistentObjectCache.java @@ -21,6 +21,8 @@ import android.util.Log; import com.hughes.android.dictionary.DictionaryApplication; import com.hughes.android.dictionary.DictionaryInfo; +import java.io.BufferedInputStream; +import java.io.BufferedOutputStream; import java.io.File; import java.io.FileInputStream; import java.io.FileOutputStream; @@ -39,34 +41,33 @@ import java.util.Map; public class PersistentObjectCache { private final File dir; - private final Map objects = new LinkedHashMap(); + private final Map objects = new HashMap<>(); - class ConstrainedOIS extends ObjectInputStream { - public ConstrainedOIS(InputStream in) throws IOException { - super(in); - } + static class ConstrainedOIS extends ObjectInputStream { + ConstrainedOIS(InputStream in) throws IOException { + super(in); + } - protected Class resolveClass(ObjectStreamClass desc) throws IOException, ClassNotFoundException { - String name = desc.getName(); - // Note: try to avoid adding more classes. - // LinkedHashMap is already more than enough for a DoS - if (!name.equals(ArrayList.class.getName()) && - !name.equals(HashMap.class.getName()) && - !name.equals(LinkedHashMap.class.getName()) && - !name.equals(String.class.getName()) && - !name.equals(DictionaryApplication.DictionaryConfig.class.getName()) && - !name.equals(DictionaryInfo.class.getName()) && - !name.equals(DictionaryInfo.IndexInfo.class.getName())) - { - throw new InvalidClassException("Not allowed to deserialize class", name); + protected Class resolveClass(ObjectStreamClass desc) throws IOException, ClassNotFoundException { + String name = desc.getName(); + // Note: try to avoid adding more classes. + // LinkedHashMap is already more than enough for a DoS + if (name.equals(String.class.getName()) || + name.equals(DictionaryInfo.IndexInfo.class.getName()) || + name.equals(ArrayList.class.getName()) || + name.equals(HashMap.class.getName()) || + name.equals(DictionaryInfo.class.getName()) || + name.equals(DictionaryApplication.DictionaryConfig.class.getName()) || + name.equals(LinkedHashMap.class.getName())) { + return super.resolveClass(desc); + } + throw new InvalidClassException("Not allowed to deserialize class", name); } - return super.resolveClass(desc); - } } public synchronized T read(final String filename, final Class resultClass) { try { - Object object = (objects.get(filename)); + Object object = objects.get(filename); if (object != null) { return resultClass.cast(object); } @@ -76,12 +77,16 @@ public class PersistentObjectCache { Log.d(getClass().getSimpleName(), "File empty: " + src); return null; } + ObjectInputStream in = null; try { - final ObjectInputStream in = new ConstrainedOIS(new FileInputStream(src)); + in = new ConstrainedOIS(new BufferedInputStream(new FileInputStream(src))); object = in.readObject(); in.close(); } catch (Exception e) { Log.e(getClass().getSimpleName(), "Deserialization failed: " + src, e); + try { + if (in != null) in.close(); + } catch (IOException ignored) {} return null; } objects.put(filename, object); @@ -94,13 +99,16 @@ public class PersistentObjectCache { public synchronized void write(final String filename, final Serializable object) { objects.put(filename, object); final File dest = new File(dir, filename); + ObjectOutputStream out = null; try { - final ObjectOutputStream out = new ObjectOutputStream(new FileOutputStream(dest)); + out = new ObjectOutputStream(new BufferedOutputStream(new FileOutputStream(dest))); out.writeObject(object); - out.close(); } catch (Exception e) { Log.e(getClass().getSimpleName(), "Serialization failed: " + dest, e); } + try { + if (out != null) out.close(); + } catch (IOException ignored) {} } private PersistentObjectCache(final Context context) { @@ -108,8 +116,8 @@ public class PersistentObjectCache { dir = filesDir != null ? filesDir : Environment.getExternalStorageDirectory(); if (dir == null) { throw new RuntimeException("context.getFilesDir() == " + context.getFilesDir() - + ", Environment.getExternalStorageDirectory()=" - + Environment.getExternalStorageDirectory()); + + ", Environment.getExternalStorageDirectory()=" + + Environment.getExternalStorageDirectory()); } } @@ -126,7 +134,7 @@ public class PersistentObjectCache { } else { if (!instance.dir.equals(context.getFilesDir())) { throw new RuntimeException("File dir changed. old=" + instance.dir + ", new=" - + context.getFilesDir()); + + context.getFilesDir()); } } return instance;