Use SecurityManager to read enum fields

google · Aug 4, 2021 · 59a8aed · 59a8aed
1 parent 20720d6
commit 59a8aed
Showing 1 changed file with 9 additions and 2 deletions.
diff --git a/gson/src/main/java/com/google/gson/internal/bind/TypeAdapters.java b/gson/src/main/java/com/google/gson/internal/bind/TypeAdapters.java
@@ -24,6 +24,8 @@
 import java.net.URI;
 import java.net.URISyntaxException;
 import java.net.URL;
+import java.security.AccessController;
+import java.security.PrivilegedAction;
 import java.sql.Timestamp;
 import java.util.ArrayList;
 import java.util.BitSet;
@@ -777,11 +779,16 @@ private static final class EnumTypeAdapter<T extends Enum<T>> extends TypeAdapte
 
     public EnumTypeAdapter(Class<T> classOfT) {
       try {
-        for (Field field : classOfT.getDeclaredFields()) {
+        for (final Field field : classOfT.getDeclaredFields()) {
           if (!field.isEnumConstant()) {
             continue;
           }
-          field.setAccessible(true);
+          AccessController.doPrivileged(new PrivilegedAction<Void>() {
+            @Override public Void run() {
+              field.setAccessible(true);
+              return null;
+            }
+          });
           @SuppressWarnings("unchecked")
           T constant = (T)(field.get(null));
           String name = constant.name();