bug1 fastJson循环引用引发一个bug

fastJson可以将一个对象序列化为json，也可以通过反序列化出一个完整的对象。且支持循环引用。

@H_301_4@package com.sincetimes.website.core.common.support; import com.sincetimes.website.core.common.vo.ToStringAbstract; /** ::new */ public class DataSimpleVO { public String name; public Object value; public Object value1; public DataSimpleVO() { } public DataSimpleVO(String name,Object value) { this.name = name; this.value = value; } @Override public String toString() { return "DataSimpleVO [name=" + name + ",value=" + value + ",value1=" + value1 + "]"; } } @H_301_4@DataSimpleVO a = new DataSimpleVO("a",1); DataSimpleVO b = new DataSimpleVO("b",2); b.value = a; Map<String,Object> map = new HashMap<>(); map.put(a.name,a); b.value1 = map; String jsonStr = JSON.toJSONString(b); System.out.println(jsonStr); DataSimpleVO obj = JSON.parSEObject(jsonStr,DataSimpleVO.class); System.out.println(obj.toString());

执行结果

@H_301_4@{"name":"b","value":{"name":"a","value":1},"value1":{"a":{"$ref":"$.value"}}} DataSimpleVO [name=b,value={"name":"a",value1={"a":{"name":"a","value":1}}]

反序列化成功

改一下代码

@H_301_4@DataSimpleVO a = new DataSimpleVO("a",2); b.value1 = a; Map<String,a); b.value = map; String jsonStr = JSON.toJSONString(b); System.out.println(jsonStr); DataSimpleVO obj = JSON.parSEObject(jsonStr,"value":{"a":{"name":"a","value":1}},"value1":{"$ref":"$.value.a"}} DataSimpleVO [name=b,value={"a":{"name":"a",value1=null]

b中的value1为空,反序列化失败

bug2 要序列化的类含有Class类型属性引起的循环递归无法结束最后内存溢出

要序列化、反序列化的类

@H_301_4@public class Request implements Serializable { private static final long serialVersionUID = -3145939364922415428L; private Class<?> clazz; private String method; private Object param; public Class<?> getClazz() { return clazz; } public void setClazz(Class<?> clazz) { this.clazz = clazz; } public String getMethod() { return method; } public void setMethod(String method) { this.method = method; } public Object getParam() { return param; } public void setParam(Object param) { this.param = param; } public Object invoke(Object bean) throws Exception { return clazz.getMethod(method,param.getClass()).invoke(bean,param); } }

触发bug

@H_301_4@Request r = new Request(); r.setClazz(Integer.class); String s = JSON.toJSONString(r,SerializerFeature.WriteClassName); System.out.println(s); JSON.parSEObject(s);//bug 触发

我们看看内部

@H_301_4@public static JSONObject parSEObject(String text) { Object obj = parse(text); if (obj instanceof JSONObject) { return (JSONObject) obj; } return (JSONObject) JSON.toJSON(obj); }

如果改为JSON.parSEObject(s,Request.class);或者直接使用JSON.parse(str)就没问题。

最后的建议： 不要使用JSON.parSEObject(…)只使用JSON.parse(str);