PureJavaReflectionProvider.instantiateUsingSerialization uses ObjectInputStream, which uses Class.forName() to resolve classes; this makes the unmarshalling process fail in multi-classloader environments, such as OSGi

Hi Denis, so what should we do instead? AFAICS there's no possibility to pass the classloader to use into the ObjectInputStream. The situation only happens when the type itself has no default ctor i.e. in consequence we do not have a possibility to recreate such an object anymore. XStream cannot implement a workaround, it was alreaday the workaround. It is limited to the JDK level here.

I've encountered the same problem in an OSGi context. The problem is that ObjectInputStream uses some JDK magic called "last defined ClassLoader" which I guess is looking for the topmost non-system classloader on the stack. In our case that would result in the bundle class loader that loaded our bundle which wraps XScale - in any case it's not the one we set with Xstream.setClassLoader.

The solution appears to be to subclass ObjectInputStream and override its resolveClass method: see for example the fourth reply to
http://forums.sun.com/thread.jspa?threadID=5163767

For OSGi users a work-around is to add "DynamicImport-Package: *" to the manifest of the bundle that wraps XStream. Of course this undermines the whole dependency control mechanism of OSGi, which is why it is a work-around and not a solution.

<deleted>

Fixed in the PureJavaReflectionProvider, but also in the SerializableConverter, ExternalizableConvrter and CGLIBEnhancedConverter that use also derived ObjectInputStream implementations.