1
package com.wsh.unserialize;
2

3
import java.io.*;
4
import java.lang.reflect.Array;
5
import java.lang.reflect.Constructor;
6
import java.lang.reflect.Field;
7
import java.lang.reflect.InvocationTargetException;
8
import java.util.HashMap;
9

10
public class Test {
11
    public static void main(String[] args) throws IOException, ClassNotFoundException, NoSuchMethodException, IllegalAccessException, NoSuchFieldException, InvocationTargetException, InstantiationException {
12
        Person p1 = new Person("aaa",13);
13
//        p1.hashCode();
14
        HashMap<Object, Object> map = new HashMap<>();
15

16
        Class<?> nodeClass = Class.forName("java.util.HashMap$Node");
17
        Object[] table = (Object[]) Array.newInstance(nodeClass, 16);
18

19
        Constructor<?> nodeCons = nodeClass.getDeclaredConstructor(int.class, Object.class, Object.class, nodeClass);
20
        nodeCons.setAccessible(true);
21
        Object node = nodeCons.newInstance(1, p1, p1, null);
22
        table[0] = node;
23

24
        Field tableField = HashMap.class.getDeclaredField("table");
25
        tableField.setAccessible(true);
26
        tableField.set(map, table);
27

28
        Field sizeField = HashMap.class.getDeclaredField("size");
29
        sizeField.setAccessible(true);
30
        sizeField.set(map, 1);
31

32
        FileOutputStream fos = new FileOutputStream("ser.bin");
33
        ObjectOutputStream oos = new ObjectOutputStream(fos);
34
        oos.writeObject(map);
35
        oos.close();
36

37
        FileInputStream fis = new FileInputStream("ser.bin");
38
        ObjectInputStream ois = new ObjectInputStream(fis);
39
        ois.readObject();
40
    }
41
}

1
BadAttributeValueExpException bavee = new BadAttributeValueExpException()
2
Method_u.setFieldValue(badAttributeValueExpException,"val",p1);