Added in API level 1

SecureClassLoader

open class SecureClassLoader : ClassLoader

kotlin.Any
↳	java.lang.ClassLoader
	↳	java.security.SecureClassLoader

Known Direct Subclasses

URLClassLoader

This class loader is used to load classes and resources from a search path of URLs referring to both JAR files and directories.

This class extends ClassLoader with additional support for defining classes with an associated code source and permissions which are retrieved by the system policy by default.

Summary

Protected constructors
`<init>(parent: ClassLoader!)` Creates a new SecureClassLoader using the specified parent class loader for delegation.
`<init>()` Creates a new SecureClassLoader using the default parent class loader for delegation.

Protected methods
Class<*>!	`defineClass(name: String!, b: ByteArray!, off: Int, len: Int, cs: CodeSource!)` Converts an array of bytes into an instance of class Class, with an optional CodeSource.
Class<*>!	`defineClass(name: String!, b: ByteBuffer!, cs: CodeSource!)` Converts a `ByteBuffer` into an instance of class `Class`, with an optional CodeSource.
open PermissionCollection!	`getPermissions(codesource: CodeSource!)` Returns the permissions for the given CodeSource object.

Inherited functions

From class ClassLoader

`Unit`	`clearAssertionStatus()` Sets the default assertion status for this class loader to false and discards any package defaults or class assertion status settings associated with the class loader. This method is provided so that class loaders can be made to ignore any command line or persistent assertion status settings and "start with a clean slate."
`Class<*>!`	`defineClass(b: ByteArray!, off: Int, len: Int)` Converts an array of bytes into an instance of class Class. Before the Class can be used it must be resolved. This method is deprecated in favor of the version that takes a binary name as its first argument, and is more secure.
`Class<*>!`	`defineClass(name: String!, b: ByteArray!, off: Int, len: Int)` Converts an array of bytes into an instance of class Class. Before the Class can be used it must be resolved. This method assigns a default `ProtectionDomain` to the newly defined class. The ProtectionDomain is effectively granted the same set of permissions returned when is invoked. The default domain is created on the first invocation of `defineClass`, and re-used on subsequent invocations. To assign a specific ProtectionDomain to the class, use the `defineClass` method that takes a ProtectionDomain as one of its arguments.
`Class<*>!`	`defineClass(name: String!, b: ByteArray!, off: Int, len: Int, protectionDomain: ProtectionDomain!)` Converts an array of bytes into an instance of class Class, with an optional ProtectionDomain. If the domain is null, then a default domain will be assigned to the class as specified in the documentation for `defineClass(java.lang.String,byte[],int,int)`. Before the class can be used it must be resolved. The first class defined in a package determines the exact set of certificates that all subsequent classes defined in that package must contain. The set of certificates for a class is obtained from the `CodeSource` within the ProtectionDomain of the class. Any classes added to that package must contain the same set of certificates or a SecurityException will be thrown. Note that if name is null, this check is not performed. You should always pass in the binary name of the class you are defining as well as the bytes. This ensures that the class you are defining is indeed the class you think it is. The specified name cannot begin with "java.", since all classes in the "java.* packages can only be defined by the bootstrap class loader. If name is not null, it must be equal to the binary name of the class specified by the byte array "b", otherwise a `NoClassDefFoundError` will be thrown.
`Class<*>!`	`defineClass(name: String!, b: ByteBuffer!, protectionDomain: ProtectionDomain!)` Converts a `ByteBuffer` into an instance of class Class, with an optional ProtectionDomain. If the domain is null, then a default domain will be assigned to the class as specified in the documentation for `defineClass(java.lang.String,byte[],int,int)`. Before the class can be used it must be resolved. The rules about the first class defined in a package determining the set of certificates for the package, and the restrictions on class names are identical to those specified in the documentation for . An invocation of this method of the form cl.defineClass(name, bBuffer, pd) yields exactly the same result as the statements ... byte[] temp = new byte[bBuffer. ()]; bBuffer. `get`(temp); return `cl.defineClass`(name, temp, 0, temp.length, pd);
`Package!`	`definePackage(name: String!, specTitle: String!, specVersion: String!, specVendor: String!, implTitle: String!, implVersion: String!, implVendor: String!, sealBase: URL!)` Defines a package by name in this ClassLoader. This allows class loaders to define the packages for their classes. Packages must be created before the class is defined, and package names must be unique within a class loader and cannot be redefined or changed once created.
`Class<*>!`	`findClass(name: String!)` Finds the class with the specified binary name. This method should be overridden by class loader implementations that follow the delegation model for loading classes, and will be invoked by the `loadClass` method after checking the parent class loader for the requested class. The default implementation throws a ClassNotFoundException.
`String!`	`findLibrary(libname: String!)` Returns the absolute path name of a native library. The VM invokes this method to locate the native libraries that belong to classes loaded with this class loader. If this method returns null, the VM searches the library along the path specified as the "java.library.path" property.
`Class<*>!`	`findLoadedClass(name: String!)` Returns the class with the given binary name if this loader has been recorded by the Java virtual machine as an initiating loader of a class with that binary name. Otherwise null is returned.
`URL!`	`findResource(name: String!)` Finds the resource with the given name. Class loader implementations should override this method to specify where to find resources.
`Enumeration<URL!>!`	`findResources(name: String!)` Returns an enumeration of `URL` objects representing all the resources with the given name. Class loader implementations should override this method to specify where to load resources from.
`Class<*>!`	`findSystemClass(name: String!)` Finds a class with the specified binary name, loading it if necessary. This method loads the class through the system class loader (see `getSystemClassLoader()`). The Class object returned might have more than one ClassLoader associated with it. Subclasses of ClassLoader need not usually invoke this method, because most class loaders need to override just .
`Package!`	`getPackage(name: String!)` Returns a Package that has been defined by this class loader or any of its ancestors.
`Array<Package!>!`	`getPackages()` Returns all of the Packages defined by this class loader and its ancestors.
`ClassLoader!`	`getParent()` Returns the parent class loader for delegation. Some implementations may use null to represent the bootstrap class loader. This method will return null in such implementations if this class loader's parent is the bootstrap class loader. If a security manager is present, and the invoker's class loader is not null and is not an ancestor of this class loader, then this method invokes the security manager's `SecurityManager#checkPermission(java.security.Permission)` method with a `RuntimePermission#RuntimePermission(String)` permission to verify access to the parent class loader is permitted. If not, a SecurityException will be thrown.
`URL!`	`getResource(name: String!)` Finds the resource with the given name. A resource is some data (images, audio, text, etc) that can be accessed by class code in a way that is independent of the location of the code. The name of a resource is a '/'-separated path name that identifies the resource. This method will first search the parent class loader for the resource; if the parent is null the path of the class loader built-in to the virtual machine is searched. That failing, this method will invoke `findResource(java.lang.String)` to find the resource.
`InputStream!`	`getResourceAsStream(name: String!)` Returns an input stream for reading the specified resource. The search order is described in the documentation for .
`Enumeration<URL!>!`	`getResources(name: String!)` Finds all the resources with the given name. A resource is some data (images, audio, text, etc) that can be accessed by class code in a way that is independent of the location of the code. The name of a resource is a /-separated path name that identifies the resource. The search order is described in the documentation for .
`ClassLoader!`	`getSystemClassLoader()` Returns the system class loader for delegation. This is the default delegation parent for new ClassLoader instances, and is typically the class loader used to start the application. This method is first invoked early in the runtime's startup sequence, at which point it creates the system class loader and sets it as the context class loader of the invoking Thread. The default system class loader is an implementation-dependent instance of this class. If a security manager is present, and the invoker's class loader is not null and the invoker's class loader is not the same as or an ancestor of the system class loader, then this method invokes the security manager's `SecurityManager#checkPermission(java.security.Permission)` method with a `RuntimePermission#RuntimePermission(String)` permission to verify access to the system class loader. If not, a SecurityException will be thrown.
`URL!`	`getSystemResource(name: String!)` Find a resource of the specified name from the search path used to load classes. This method locates the resource through the system class loader (see `getSystemClassLoader()`).
`InputStream!`	`getSystemResourceAsStream(name: String!)` Open for reading, a resource of the specified name from the search path used to load classes. This method locates the resource through the system class loader (see `getSystemClassLoader()`).
`Enumeration<URL!>!`	`getSystemResources(name: String!)` Finds all resources of the specified name from the search path used to load classes. The resources thus found are returned as an `Enumeration` of objects. The search order is described in the documentation for .
`Class<*>!`	`loadClass(name: String!)` Loads the class with the specified binary name. This method searches for classes in the same manner as the method. It is invoked by the Java virtual machine to resolve class references. Invoking this method is equivalent to invoking `loadClass(name,`.
`Class<*>!`	`loadClass(name: String!, resolve: Boolean)` Loads the class with the specified binary name. The default implementation of this method searches for classes in the following order: Invoke `findLoadedClass(java.lang.String)` to check if the class has already been loaded. Invoke the `loadClass` method on the parent class loader. If the parent is null the class loader built-in to the virtual machine is used, instead. Invoke the `findClass(java.lang.String)` method to find the class. If the class was found using the above steps, and the resolve flag is true, this method will then invoke the method on the resulting Class object. Subclasses of ClassLoader are encouraged to override , rather than this method.
`Boolean`	`registerAsParallelCapable()` Registers the caller as parallel capable. The registration succeeds if and only if all of the following conditions are met: no instance of the caller has been created all of the super classes (except class Object) of the caller are registered as parallel capable Note that once a class loader is registered as parallel capable, there is no way to change it back.
`Unit`	`resolveClass(c: Class<*>!)` Links the specified class. This (misleadingly named) method may be used by a class loader to link a class. If the class c has already been linked, then this method simply returns. Otherwise, the class is linked as described in the "Execution" chapter of The Java™ Language Specification.
`Unit`	`setClassAssertionStatus(className: String!, enabled: Boolean)` Sets the desired assertion status for the named top-level class in this class loader and any nested classes contained therein. This setting takes precedence over the class loader's default assertion status, and over any applicable per-package default. This method has no effect if the named class has already been initialized. (Once a class is initialized, its assertion status cannot change.) If the named class is not a top-level class, this invocation will have no effect on the actual assertion status of any class.
`Unit`	`setDefaultAssertionStatus(enabled: Boolean)` Sets the default assertion status for this class loader. This setting determines whether classes loaded by this class loader and initialized in the future will have assertions enabled or disabled by default. This setting may be overridden on a per-package or per-class basis by invoking `setPackageAssertionStatus(java.lang.String,boolean)` or .
`Unit`	`setPackageAssertionStatus(packageName: String!, enabled: Boolean)` Sets the package default assertion status for the named package. The package default assertion status determines the assertion status for classes initialized in the future that belong to the named package or any of its "subpackages". A subpackage of a package named p is any package whose name begins with "p.". For example, javax.swing.text is a subpackage of javax.swing, and both java.util and java.lang.reflect are subpackages of java. In the event that multiple package defaults apply to a given class, the package default pertaining to the most specific package takes precedence over the others. For example, if javax.lang and javax.lang.reflect both have package defaults associated with them, the latter package default applies to classes in javax.lang.reflect. Package defaults take precedence over the class loader's default assertion status, and may be overridden on a per-class basis by invoking `setClassAssertionStatus(java.lang.String,boolean)`.
`Unit`	`setSigners(c: Class<*>!, signers: Array<Any!>!)` Sets the signers of a class. This should be invoked after defining a class.

Protected constructors

<init>

Added in API level 1

protected SecureClassLoader(parent: ClassLoader!)

Creates a new SecureClassLoader using the specified parent class loader for delegation.

If there is a security manager, this method first calls the security manager's checkCreateClassLoader method to ensure creation of a class loader is allowed.

Parameters
`parent`	ClassLoader!: the parent ClassLoader

Exceptions
`java.lang.SecurityException`	if a security manager exists and its `checkCreateClassLoader` method doesn't allow creation of a class loader.

See Also

java.lang.SecurityManager#checkCreateClassLoader

<init>

Added in API level 1

protected SecureClassLoader()

Creates a new SecureClassLoader using the default parent class loader for delegation.

If there is a security manager, this method first calls the security manager's checkCreateClassLoader method to ensure creation of a class loader is allowed.

Exceptions
`java.lang.SecurityException`	if a security manager exists and its `checkCreateClassLoader` method doesn't allow creation of a class loader.

See Also

java.lang.SecurityManager#checkCreateClassLoader

Protected methods

defineClass

Added in API level 1

protected fun defineClass(
    name: String!, 
    b: ByteArray!, 
    off: Int, 
    len: Int, 
    cs: CodeSource!
): Class<*>!

Converts an array of bytes into an instance of class Class, with an optional CodeSource. Before the class can be used it must be resolved.

If a non-null CodeSource is supplied a ProtectionDomain is constructed and associated with the class being defined.

Parameters
`name`	String!: the expected name of the class, or `null` if not known, using '.' and not '/' as the separator and without a trailing ".class" suffix.
`b`	ByteArray!: the bytes that make up the class data. The bytes in positions `off` through `off+len-1` should have the format of a valid class file as defined by The Java™ Virtual Machine Specification.
`off`	Int: the start offset in `b` of the class data
`len`	Int: the length of the class data
`cs`	CodeSource!: the associated CodeSource, or `null` if none

Return
`Class<*>!`	the `Class` object created from the data, and optional CodeSource.

Exceptions
`java.lang.ClassFormatError`	if the data did not contain a valid class
`java.lang.IndexOutOfBoundsException`	if either `off` or `len` is negative, or if `off+len` is greater than `b.length`.
`java.lang.SecurityException`	if an attempt is made to add this class to a package that contains classes that were signed by a different set of certificates than this class, or if the class name begins with "java.".

defineClass

Added in API level 1

protected fun defineClass(
    name: String!, 
    b: ByteBuffer!, 
    cs: CodeSource!
): Class<*>!

Converts a ByteBuffer into an instance of class Class, with an optional CodeSource. Before the class can be used it must be resolved.

If a non-null CodeSource is supplied a ProtectionDomain is constructed and associated with the class being defined.

Parameters
`name`	String!: the expected name of the class, or `null` if not known, using '.' and not '/' as the separator and without a trailing ".class" suffix.
`b`	ByteBuffer!: the bytes that make up the class data. The bytes from positions `b.position()` through `b.position() + b.limit() -1` should have the format of a valid class file as defined by The Java™ Virtual Machine Specification.
`cs`	CodeSource!: the associated CodeSource, or `null` if none

Return
`Class<*>!`	the `Class` object created from the data, and optional CodeSource.

Exceptions
`java.lang.ClassFormatError`	if the data did not contain a valid class
`java.lang.SecurityException`	if an attempt is made to add this class to a package that contains classes that were signed by a different set of certificates than this class, or if the class name begins with "java.".

getPermissions

Added in API level 1

protected open fun getPermissions(codesource: CodeSource!): PermissionCollection!

Returns the permissions for the given CodeSource object.

This method is invoked by the defineClass method which takes a CodeSource as an argument when it is constructing the ProtectionDomain for the class being defined.

Parameters
`codesource`	CodeSource!: the codesource.

Return
`PermissionCollection!`	the permissions granted to the codesource.