How to overcome `Prohibited package name` exception?

Question

Is it possible to turn off / override java.lang.SecurityException: Prohibited package name?

I need to extend AffineTransform class which was implemented with some lack of functionality, and I need to access members m00, m01, ... which are defined as package protected.

score 5 · Accepted Answer · answered Nov 13 '13 at 15:17

No you cant. It's hardcoded in java.lang.ClassLoader:

    if ((name != null) && name.startsWith("java.")) {
        throw new SecurityException
            ("Prohibited package name: " +
             name.substring(0, name.lastIndexOf('.')));

...

as you can see there is no option

Devon_C_Miller · Answer 2 · 2013-11-15T13:27:47.180

You can read the values with the getMatrix(double[] flatmatrix). There is no corresponding setMatrix, but there is the AffineTransform(double[] flatmatrix) constructor.

Out of curiosity, what is the "lack of functionality" you refer to?

Update:

Ah, ok. The Java2D are really just for the basic 2D transforms. For anything the involves depth you may want to take a look at some of the Java / OpenGL bindings.

JOGL - Java Open GL bindings (JSR-231)
LWJGL - Lightweight Java Game Library
Jave 3D - The original 3d api from Sun.

Update 2:

One other library to check out would be the Java Advanced Imaging (JAI) API. The possible downside is it is not actively maintained; last updated in 2006. It's entirely focused on images, so you would need to:

render to a BufferedImage
create a NullOpImage from that
PerspectiveTransform the NullOpImage
and extract a final BufferedImage

I mean rational linear transform (including perspective transform). I took `PerspectiveTransform` from `JAI` and made it `extends AffineTransform` in order to code more wide range of transforms in standard `PathIterator`. — Suzan Cioc, Nov 14 '13 at 05:38
Thanks! But I want namely 2D. Also I would like to tie with AWT because I use `Piccolo2D` library which is also tied with it. — Suzan Cioc, Nov 14 '13 at 22:50

score 0 · Answer 3 · edited May 23 '17 at 11:45

As Evgeniy pointed out, the check is hard-coded in the ClassLoader, so circumventing this is no easy task. But there is always an option :-)

One could use the Java bootclasspath option on startup or implement a javaagent to slip in own improvements. The question is not whether it is doable, but whether this is the most sensible solution in terms of effort and overall maintenance.

Be aware, however, that since this introduces a potential security leak, both cannot be done for e.g. an Applet.

How to overcome `Prohibited package name` exception?

3 Answers3