[Android] Block access to java.lang.Object.getClass in injected Java objects

content/browser/renderer_host/java/java_bound_object.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_BROWSER_RENDERER_HOST_JAVA_JAVA_BOUND_OBJECT_H_
 #define CONTENT_BROWSER_RENDERER_HOST_JAVA_JAVA_BOUND_OBJECT_H_
 
 #include <jni.h>
 #include <map>
 #include <string>
@@ skipping 46 matching lines @@
 
  private:
   JavaBoundObject(
       const base::android::JavaRef<jobject>& object,
       const base::android::JavaRef<jclass>& safe_annotation_clazz,
       const base::WeakPtr<JavaBridgeDispatcherHostManager>& manager,
       bool can_enumerate_methods);
 
   void EnsureMethodsAreSetUp() const;
 
+  static void ThrowSecurityException(const char* message);
+
   // The weak ref to the underlying Java object that this JavaBoundObject
   // instance represents.
   JavaObjectWeakGlobalRef java_object_;
 
   // Keep a pointer back to the JavaBridgeDispatcherHostManager so that we
   // can notify it when this JavaBoundObject is destroyed. JavaBoundObjects
   // may outlive the manager so keep a WeakPtr. Note the WeakPtr may only be
   // dereferenced on the UI thread.
   base::WeakPtr<JavaBridgeDispatcherHostManager> manager_;
 
   // Map of public methods, from method name to Method instance. Multiple
   // entries will be present for overloaded methods. Note that we can't use
   // scoped_ptr in STL containers as we can't copy it.
   typedef std::multimap<std::string, linked_ptr<JavaMethod> > JavaMethodMap;
   mutable JavaMethodMap methods_;
   mutable bool are_methods_set_up_;
+  mutable jmethodID object_get_class_method_id_;
   const bool can_enumerate_methods_;
 
   base::android::ScopedJavaGlobalRef<jclass> safe_annotation_clazz_;
 
   DISALLOW_IMPLICIT_CONSTRUCTORS(JavaBoundObject);
 };
 
 }  // namespace content
 
 #endif  // CONTENT_BROWSER_RENDERER_HOST_JAVA_JAVA_BOUND_OBJECT_H_