Re: question about serialization

[Tom Tromey]

>>>>> "Bryce" == Bryce McKinlay <address@hidden> writes:

Bryce> But I presume that for normal applications where security is
Bryce> not required (ie System.getSecurityManager()), such checks are
Bryce> avoided?

Yes, the security manager itself walks the stack in this case, so if
there is no security manager...

There are also situations where the code unconditionally must find the
caller and use that to do access checks, e.g. in Method.

Also there are cases where you must find the caller's class loader,
say in order to implement Class.forName.

In libgcj these latter cases are also implemented by stack crawling.

Tom