alibaba / alibaba/arthas

ArthasClassloader support load class from SystemClassLoader

Open
#995 5 comments 1 reaction 0 assignees View on GitHub
someday
Dominant language
Java
Stars
37.5k
Forks
7.6k
Avg merge
1d 22h
Merged PRs (30d)
4

Description

考虑增加一个白名单,在配置的名单里的类,则从优先从 SystemClassLoader里加载。

但外部配置的加载有点麻烦,只能做有限度的支持。

---

在某些情况下,一些其它的字节码修改的agent 可以会拉截到 arthas 里的类,然后插入自己的Agent里的代码,这样子导致出错。

尽管这个逻辑是不对的,但 ArthasClassloader 本身是否应该支持加载 SystemClassLoader里的类?

修改之后,有没有可能影响到 ognl 的执行?

Contributor guide

Open the contributing guide

Research direction

No files, tests, or entry points are named. Begin by locating ArthasClassloader and the configuration path, then investigate how a SystemClassLoader whitelist would interact with OGNL execution and other bytecode-modifying agents. Done requires a decided loading policy and documented configuration scope.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
devtools
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.