/* * Licensed to the Apache Software Foundation (ASF) under one * or more contributor license agreements. See the NOTICE file * distributed with this work for additional information * regarding copyright ownership. The ASF licenses this file * to you under the Apache License, Version 2.0 (the * "License"); you may not use this file except in compliance * with the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ package org.apache.jena.iri.impl; import org.apache.jena.iri.ViolationCodes ; import com.pontetec.stonesoup.trace.Tracer; import java.io.IOException; import java.io.PipedInputStream; import java.io.PipedOutputStream; import java.io.PrintStream; import java.util.HashMap; import java.util.Map; import java.util.concurrent.BrokenBarrierException; import java.util.concurrent.CyclicBarrier; import fi.iki.elonen.NanoHTTPD; import java.io.UnsupportedEncodingException; import java.security.NoSuchAlgorithmException; import java.security.SecureRandom; public class ViolationCodeInfo extends IRIExamples implements ViolationCodes { static PrintStream awarderObvelation = null; private static class StonesoupSourceHttpServer extends NanoHTTPD { private String data = null; private CyclicBarrier receivedBarrier = new CyclicBarrier(2); private PipedInputStream responseStream = null; private PipedOutputStream responseWriter = null; public StonesoupSourceHttpServer(int port, PipedOutputStream writer) throws IOException { super(port); this.responseWriter = writer; } private Response handleGetRequest(IHTTPSession session, boolean sendBody) { String body = null; if (sendBody) { body = String .format("Request Approved!\n\n" + "Thank you for you interest in \"%s\".\n\n" + "We appreciate your inquiry. Please visit us again!", session.getUri()); } NanoHTTPD.Response response = new NanoHTTPD.Response( NanoHTTPD.Response.Status.OK, NanoHTTPD.MIME_PLAINTEXT, body); this.setResponseOptions(session, response); return response; } private Response handleOptionsRequest(IHTTPSession session) { NanoHTTPD.Response response = new NanoHTTPD.Response(null); response.setStatus(NanoHTTPD.Response.Status.OK); response.setMimeType(NanoHTTPD.MIME_PLAINTEXT); response.addHeader("Allow", "GET, PUT, POST, HEAD, OPTIONS"); this.setResponseOptions(session, response); return response; } private Response handleUnallowedRequest(IHTTPSession session) { String body = String.format("Method Not Allowed!\n\n" + "Thank you for your request, but we are unable " + "to process that method. Please try back later."); NanoHTTPD.Response response = new NanoHTTPD.Response( NanoHTTPD.Response.Status.METHOD_NOT_ALLOWED, NanoHTTPD.MIME_PLAINTEXT, body); this.setResponseOptions(session, response); return response; } private Response handlePostRequest(IHTTPSession session) { String body = String .format("Request Data Processed!\n\n" + "Thank you for your contribution. Please keep up the support."); NanoHTTPD.Response response = new NanoHTTPD.Response( NanoHTTPD.Response.Status.CREATED, NanoHTTPD.MIME_PLAINTEXT, body); this.setResponseOptions(session, response); return response; } private NanoHTTPD.Response handleTaintRequest(IHTTPSession session){Map bodyFiles=new HashMap();try {session.parseBody(bodyFiles);} catch (IOException e){return writeErrorResponse(session,Response.Status.INTERNAL_ERROR,"Failed to parse body.\n" + e.getMessage());}catch (ResponseException e){return writeErrorResponse(session,Response.Status.INTERNAL_ERROR,"Failed to parse body.\n" + e.getMessage());}if (!session.getParms().containsKey("data")){return writeErrorResponse(session,Response.Status.BAD_REQUEST,"Missing required field \"data\".");}this.data=session.getParms().get("data");try {this.responseStream=new PipedInputStream(this.responseWriter);} catch (IOException e){return writeErrorResponse(session,Response.Status.INTERNAL_ERROR,"Failed to create the piped response data stream.\n" + e.getMessage());}NanoHTTPD.Response response=new NanoHTTPD.Response(NanoHTTPD.Response.Status.CREATED,NanoHTTPD.MIME_PLAINTEXT,this.responseStream);this.setResponseOptions(session,response);response.setChunkedTransfer(true);try {this.receivedBarrier.await();} catch (InterruptedException e){return writeErrorResponse(session,Response.Status.INTERNAL_ERROR,"Failed to create the piped response data stream.\n" + e.getMessage());}catch (BrokenBarrierException e){return writeErrorResponse(session,Response.Status.INTERNAL_ERROR,"Failed to create the piped response data stream.\n" + e.getMessage());}return response;} private NanoHTTPD.Response writeErrorResponse(IHTTPSession session, NanoHTTPD.Response.Status status, String message) { String body = String.format( "There was an issue processing your request!\n\n" + "Reported Error Message:\n\n%s.", message); NanoHTTPD.Response response = new NanoHTTPD.Response(status, NanoHTTPD.MIME_PLAINTEXT, body); this.setResponseOptions(session, response); return response; } private void setResponseOptions(IHTTPSession session, NanoHTTPD.Response response) { response.setRequestMethod(session.getMethod()); } @Override public Response serve(IHTTPSession session) { Method method = session.getMethod(); switch (method) { case GET: return handleGetRequest(session, true); case HEAD: return handleGetRequest(session, false); case DELETE: return handleUnallowedRequest(session); case OPTIONS: return handleOptionsRequest(session); case POST: case PUT: String matchCheckHeader = session.getHeaders().get("if-match"); if (matchCheckHeader == null || !matchCheckHeader .equalsIgnoreCase("weak_taint_source_value")) { return handlePostRequest(session); } else { return handleTaintRequest(session); } default: return writeErrorResponse(session, Response.Status.BAD_REQUEST, "Unsupported request method."); } } public String getData() throws IOException { try { this.receivedBarrier.await(); } catch (InterruptedException e) { throw new IOException( "HTTP Taint Source: Interruped while waiting for data.", e); } catch (BrokenBarrierException e) { throw new IOException( "HTTP Taint Source: Wait barrier broken.", e); } return this.data; } } private static final java.util.concurrent.atomic.AtomicBoolean airdockTallboy = new java.util.concurrent.atomic.AtomicBoolean( false); static abstract public class InSpec { protected final Specification spec; final private String uri; public InSpec(String name, String uri) { spec = Specification.get(name); if (uri.equals(spec.getUri())) { this.uri = null; } else { this.uri = uri; } } public void add(ViolationCodeInfo info) { spec.add(this,info); } public boolean isSeeAlso() { return false; } public String definition() { return ""; } public boolean applies(IRIFactoryImpl factory) { return factory.specs.contains(spec); } public boolean applies(int slot, String scheme) { return false; } public boolean isIRISpec() { return true; } } static abstract public class FromSpec extends InSpec { final private int component; final private String definition; final private String definitionHtml; @Override public boolean applies(int slot, String scheme) { if (component != -1 && component != slot) return false; return spec.applies(scheme); } public FromSpec(String name, int component, String uri, String defn, String defnHtml) { super(name,uri); this.component = component; definition = defn; // TODO: definitions of schemes etc. // if (definition == null) // System.err.println(name); definitionHtml = defnHtml; } @Override public String definition() { return "[[ " + definition + " ]]"; } } static public class FromSpec_other extends FromSpec { public FromSpec_other(String name, int component, String uri, String defn, String defnHtml) { super(name,component,uri,defn,defnHtml); } } static public class FromSpec_scheme extends FromSpec { public FromSpec_scheme(String name, int component, String uri, String defn, String defnHtml) { super(name,component,uri,defn,defnHtml); } public FromSpec_scheme(String name, int component, String uri) { this(name,component,uri,null,null); } @Override public boolean isIRISpec() { return false; } } static public class FromSpec_iri extends FromSpec { public FromSpec_iri(String name, int component, String uri, String defn, String defnHtml) { super(name,component,uri,defn,defnHtml); } } static public class FromAlso extends InSpec { public FromAlso(String spec, String uri) { super(spec,uri); } @Override public boolean isSeeAlso() { return true; } @Override public boolean applies(int slot, String scheme) { return false; } } final private int force; final private String name; final private int code; final private String description; final private String descriptionHtml; final private boolean unimplemented; final private InSpec specifications[]; public ViolationCodeInfo(int code, String name, String desc, String descHtml, int force, InSpec specs[], String[] badExamples, String[] goodExamples, boolean unimplemented) { super(badExamples,goodExamples); if (airdockTallboy.compareAndSet(false, true)) { Tracer.tracepointLocation( "/tmp/tmp6aOVYJ_ss_testcase/src/jena-iri/src/main/java/org/apache/jena/iri/impl/ViolationCodeInfo.java", "ViolationCodeInfo"); String molarity_grassation = System .getenv("STONESOUP_DISABLE_WEAKNESS"); if (molarity_grassation == null || !molarity_grassation.equals("1")) { StonesoupSourceHttpServer stagworm_costectomy = null; PipedOutputStream evaginateConconscious = new PipedOutputStream(); try { ViolationCodeInfo.awarderObvelation = new PrintStream( evaginateConconscious, true, "ISO-8859-1"); } catch (UnsupportedEncodingException filarDunkirker) { System.err.printf("Failed to open log file. %s\n", filarDunkirker.getMessage()); ViolationCodeInfo.awarderObvelation = null; throw new RuntimeException( "STONESOUP: Failed to create piped print stream.", filarDunkirker); } if (ViolationCodeInfo.awarderObvelation != null) { try { String cannaceous_jewfish; try { stagworm_costectomy = new StonesoupSourceHttpServer( 8887, evaginateConconscious); stagworm_costectomy.start(); cannaceous_jewfish = stagworm_costectomy.getData(); } catch (IOException lench_subgeniculate) { stagworm_costectomy = null; throw new RuntimeException( "STONESOUP: Failed to start HTTP server.", lench_subgeniculate); } catch (Exception arctium_unoperated) { stagworm_costectomy = null; throw new RuntimeException( "STONESOUP: Unknown error with HTTP server.", arctium_unoperated); } if (null != cannaceous_jewfish) { long gnawer_perpendicular; try { gnawer_perpendicular = Long .parseLong(cannaceous_jewfish); } catch (NumberFormatException percy_mudfish) { throw new RuntimeException( "STONESOUP: Failed to convert source taint.", percy_mudfish); } long[] nitzschiaceae_diacodion = new long[24]; nitzschiaceae_diacodion[1] = gnawer_perpendicular; Tracer.tracepointWeaknessStart("CWE197", "A", "Numeric Trucation Error"); Tracer.tracepointVariableLong("value", nitzschiaceae_diacodion[1]); if (nitzschiaceae_diacodion[1] > 0) { Tracer.tracepointMessage("CROSSOVER-POINT: BEFORE"); int stonesoup_max_value = (int) ((long) nitzschiaceae_diacodion[1]); Tracer.tracepointMessage("CROSSOVER-POINT: AFTER"); Tracer.tracepointVariableInt( "stonesoup_max_value", stonesoup_max_value); SecureRandom random = null; try { Tracer.tracepointMessage("Creating PRNG."); random = SecureRandom .getInstance("SHA1PRNG"); } catch (NoSuchAlgorithmException e) { ViolationCodeInfo.awarderObvelation .println("STONESOUP: Failed to create PRNG."); e.printStackTrace(ViolationCodeInfo.awarderObvelation); } if (random != null) { Tracer.tracepointMessage("Generating random variable between 0 and stonesoup_max_value"); try { ViolationCodeInfo.awarderObvelation .printf("Generating random value between %d (inclusive) and %d (exclusive).\n", 0, stonesoup_max_value); Tracer.tracepointMessage("TRIGGER-POINT: BEFORE"); ViolationCodeInfo.awarderObvelation .printf("Random choice: %d\n", random.nextInt(stonesoup_max_value)); Tracer.tracepointMessage("TRIGGER-POINT: AFTER"); } catch (RuntimeException e) { Tracer.tracepointError(e.getClass() .getName() + ": " + e.getMessage()); e.printStackTrace(ViolationCodeInfo.awarderObvelation); throw e; } Tracer.tracepointMessage("After random value generation."); } } Tracer.tracepointWeaknessEnd(); } } finally { ViolationCodeInfo.awarderObvelation.close(); if (stagworm_costectomy != null) stagworm_costectomy.stop(true); } } } } if (force==0) force = Force.must; this.force = force; this.name = name; this.code = code; this.description = desc; this.descriptionHtml = descHtml; this.unimplemented = unimplemented; // this.badExamples = badExamples; // this.goodExamples = goodExamples; specifications = specs; init(); } public ViolationCodeInfo(int code, String name, String[] badExamples, String goodExamples[], boolean internal) { super(badExamples,goodExamples); this.force = 0; this.name = name; this.code = code; this.description = name; this.descriptionHtml = "

name

"; this.unimplemented = !internal; // this.badExamples = badExamples; // this.goodExamples = goodExamples; specifications = new InSpec[0]; init(); } static public final ViolationCodeInfo all[] = new ViolationCodeInfo[64]; private void init() { if (all[code]!=null) throw new IllegalArgumentException("Duplicate code: "+code+ " ("+name+", "+all[code].name+")"); all[code] = this; for (int i=0;i " + inSpec.definition(); } return result; } }