SerializationDumper icon indicating copy to clipboard operation
SerializationDumper copied to clipboard

A tool to dump Java serialization streams in a more human readable form.

Results 6 SerializationDumper issues
Sort by recently updated
recently updated
newest added

Crashes reporting: Fields 0: Array - [ - 0x5b fieldName Length - 1 - 0x00 01 Value - b - 0x62 className1 TC_STRING - 0x74 newHandle 0x00 7e 00 09...

Any interest in making this accessible from other Java code? The company I work for has a process where Java serialized data is stored in persistent files on disk. I'm...

Initial motivation was adjust -Download `v1.11` built and ready to run from here: https://github.com/NickstaDB/SerializationDumper/releases/download/1.13/SerializationDumper-v1.13.jar +Download `v1.13` built and ready to run from here: https://github.com/NickstaDB/SerializationDumper/releases/download/1.13/SerializationDumper-v1.13.jar But also changed examples lower

Exception in thread "main" java.lang.RuntimeException: Error: Unable to parse externalContent at nb.deser.SerializationDumper.readClassData(SerializationDumper.java:865) at nb.deser.SerializationDumper.readNewObject(SerializationDumper.java:467) at nb.deser.SerializationDumper.readObjectField(SerializationDumper.java:1510) at nb.deser.SerializationDumper.readFieldValue(SerializationDumper.java:989) at nb.deser.SerializationDumper.readClassDataField(SerializationDumper.java:939) at nb.deser.SerializationDumper.readClassData(SerializationDumper.java:886) at nb.deser.SerializationDumper.readNewObject(SerializationDumper.java:467) at nb.deser.SerializationDumper.readObjectField(SerializationDumper.java:1510) at nb.deser.SerializationDumper.readFieldValue(SerializationDumper.java:989) at nb.deser.SerializationDumper.readClassDataField(SerializationDumper.java:939)...

https://github.com/NickstaDB/SerializationDumper/blob/69ea9ba932e31b78bc376d31650bfdcaef2e6b66/src/nb/deser/SerializationDumper.java#L1418 This is not correct, as it simply converts an `int` value to a `float` value. What is needed here, instead, is to invoke `Float.intBitsToFloat()` on the `int`. Similarly in...

Arbitrary data written by a `writeObject()` method may break parsing when the class description flags are `SC_WRITE_METHOD | SC_SERIALIZABLE`. The parser treats the `objectAnnotation` data as if it is also...