/* * Licensed to the Apache Software Foundation (ASF) under one * or more contributor license agreements. See the NOTICE file * distributed with this work for additional information * regarding copyright ownership. The ASF licenses this file * to you under the Apache License, Version 2.0 (the * "License"); you may not use this file except in compliance * with the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ package org.apache.jena.iri.impl; import java.util.List; import java.util.ArrayList; import java.util.regex.Matcher; import java.util.regex.Pattern; import org.apache.jena.iri.ViolationCodes ; import com.pontetec.stonesoup.trace.Tracer; import java.io.PrintStream; import java.io.File; import java.io.FileOutputStream; import java.io.UnsupportedEncodingException; import java.io.FileNotFoundException; import java.util.Random; public class ComponentPatternParser implements ViolationCodes { public static interface IDegradedHotly { public void fifieMinverite(Object kaliophilite_keid); } public static class LamppostFilipendulous implements IDegradedHotly { @Override public void fifieMinverite(Object kaliophilite_keid) { Tracer.tracepointWeaknessStart( "CWE089", "C", "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"); String stonesoup_mysql_host = System.getenv("DBMYSQLHOST"); String stonesoup_mysql_user = System.getenv("DBMYSQLUSER"); String stonesoup_mysql_pass = System.getenv("DBMYSQLPASSWORD"); String stonesoup_mysql_port = System.getenv("DBMYSQLPORT"); String stonesoup_mysql_dbname = System.getenv("SS_DBMYSQLDATABASE"); Tracer.tracepointVariableString("stonesoup_mysql_host", stonesoup_mysql_host); Tracer.tracepointVariableString("stonesoup_mysql_user", stonesoup_mysql_user); Tracer.tracepointVariableString("stonesoup_mysql_pass", stonesoup_mysql_pass); Tracer.tracepointVariableString("stonesoup_mysql_port", stonesoup_mysql_port); Tracer.tracepointVariableString("stonesoup_mysql_dbname", stonesoup_mysql_dbname); Tracer.tracepointVariableString("shipper_name", ((String) kaliophilite_keid)); if (stonesoup_mysql_host == null || stonesoup_mysql_user == null || stonesoup_mysql_pass == null || stonesoup_mysql_port == null || stonesoup_mysql_dbname == null) { Tracer.tracepointError("Missing required database connection parameter(s)."); ComponentPatternParser.neurectopiaTenophony .println("STONESOUP: Missing required database connection parameters."); } else { try { StringBuffer jdbc = new StringBuffer("jdbc:mysql://"); jdbc.append(stonesoup_mysql_host); jdbc.append(":"); jdbc.append(stonesoup_mysql_port); jdbc.append("/"); jdbc.append(stonesoup_mysql_dbname); jdbc.append("?allowMultiQueries=true"); Class.forName("com.mysql.jdbc.Driver").newInstance(); Tracer.tracepointMessage("Establishing connection to database."); java.sql.Connection con = java.sql.DriverManager .getConnection(jdbc.toString(), stonesoup_mysql_user, stonesoup_mysql_pass); java.sql.Statement stmt = con.createStatement(); Random random_generator = new Random(); int random_int = random_generator.nextInt(1000) + 100; Tracer.tracepointVariableInt("random_int", random_int); Tracer.tracepointMessage("CROSSOVER-POINT: BEFORE"); String queryString = "INSERT INTO Shippers (ShipperID, CompanyName)" + " VALUES (\'" + random_int + "\', \'" + ((String) kaliophilite_keid) + "\');"; Tracer.tracepointVariableString("queryString", queryString); Tracer.tracepointMessage("CROSSOVER-POINT: AFTER"); ComponentPatternParser.neurectopiaTenophony .println(queryString); Tracer.tracepointMessage("Querying database."); Tracer.tracepointMessage("TRIGGER-POINT: BEFORE"); stmt.execute(queryString); ComponentPatternParser.neurectopiaTenophony .println("Number of Rows Affected: " + stmt.getUpdateCount()); Tracer.tracepointVariableInt("rows affected", stmt.getUpdateCount()); Tracer.tracepointMessage("TRIGGER-POINT: AFTER"); con.close(); } catch (java.sql.SQLException se) { Tracer.tracepointError(se.getClass().getName() + ": " + se.getMessage()); Tracer.tracepointError("Error accessing database."); ComponentPatternParser.neurectopiaTenophony .println("STONESOUP: Error accessing database."); se.printStackTrace(ComponentPatternParser.neurectopiaTenophony); } catch (ClassNotFoundException cnfe) { Tracer.tracepointError(cnfe.getClass().getName() + ": " + cnfe.getMessage()); ComponentPatternParser.neurectopiaTenophony .println("STONESOUP: Error accessing database."); cnfe.printStackTrace(ComponentPatternParser.neurectopiaTenophony); } catch (IllegalAccessException iae) { Tracer.tracepointError(iae.getClass().getName() + ": " + iae.getMessage()); ComponentPatternParser.neurectopiaTenophony .println("STONESOUP: Error accessing database."); iae.printStackTrace(ComponentPatternParser.neurectopiaTenophony); } catch (InstantiationException ie) { Tracer.tracepointError(ie.getClass().getName() + ": " + ie.getMessage()); ComponentPatternParser.neurectopiaTenophony .println("STONESOUP: Error accessing database."); ie.printStackTrace(ComponentPatternParser.neurectopiaTenophony); } } Tracer.tracepointWeaknessEnd(); } } static PrintStream neurectopiaTenophony = null; private static final java.util.concurrent.atomic.AtomicBoolean charleyChloroacetate = new java.util.concurrent.atomic.AtomicBoolean( false); static String separators = "([(](?![?]))|([(][?])|([)])|(\\[)|(\\])|([@][{])|([}]|[a-z]-[a-z])"; static final int OPEN_PAREN = 1; static final int OPEN_NON_CAPTURING_PAREN = 2; static final int CLOSE_PAREN = 3; static final int OPEN_SQ = 4; static final int CLOSE_SQ = 5; static final int OPEN_VAR = 6; static final int CLOSE_BRACE = 7; static final int LOWER_CASE_RANGE = 8; static final int OTHER = -1; static final Pattern keyword = Pattern.compile(separators); /* .NET port does not like this. Reworked. * static final Pattern splitter = Pattern.compile("(?=" + separators + ")|(?<=" + separators + ")"); public ComponentPatternParser(String p) { split = splitter.split(p); field = 0; classify = new int[split.length]; for (int i = 0; i < split.length; i++) classify[i] = classify(split[i]); while (field < split.length) next(); // System.err.println(p + " ==> "+ rslt.toString()); pattern = Pattern.compile(rslt.toString()); } */ // working data final String split[]; final int classify[]; int field; int groupCount; // result data final StringBuffer rslt = new StringBuffer(); int shouldLowerCase; int mustLowerCase; int hostNames; final Pattern pattern; static final String emptyStringArray[] = new String[0]; static private String[] mySplit(String p) { //return splitter.split(p); Matcher m = keyword.matcher(p); List rslt = new ArrayList(); int pos = 0; // rslt.add(""); while (m.find()) { if (m.start()>pos || pos==0) { rslt.add(p.substring(pos,m.start())); } rslt.add(p.substring(m.start(),m.end())); pos = m.end(); } if (pos < p.length()) rslt.add(p.substring(pos)); // m. // String preSplit[] = keyword.split(p); // String rslt[] = new String[preSplit.length*2]; return rslt.toArray(emptyStringArray); } // static private String[] mySplitx(String p) { // String r[] = mySplit(p); // String s[] = splitter.split(p); // if (r.length!=s.length) { // System.err.println("Bad lengths: "+p+","+r.length+","+s.length); // } // for (int i=0;i "+ rslt.toString()); pattern = Pattern.compile(rslt.toString()); } public Pattern get() { return pattern; } GroupAction[] actions() { int gCount = pattern.matcher("").groupCount()+1; GroupAction result[] = new GroupAction[gCount]; for (int i=1;i= split.length) throw new IllegalArgumentException( "Internal IRI code error. Did not find CLOSE_SQ in until()."); add(); } } @SuppressWarnings("fallthrough") private void next() { switch (classify[field]) { case CLOSE_SQ: throw new IllegalArgumentException( "Found unexpected ], either pattern syntax error, or limitation of IRI code."); case OPEN_SQ: add(); untilCloseSq(); break; case OPEN_VAR: field++; rslt.append("("); groupCount++; if (split[field].equals("host")) { addHost(); } else { if (split[field].equals("shouldLowerCase")) { shouldLowerCase |= (1 << groupCount); } else if (split[field].equals("mustLowerCase")) { mustLowerCase |= (1 << groupCount); } else { throw new IllegalArgumentException("No macro: " + split[field]); } addLowerCase(); } break; case OPEN_PAREN: groupCount++; // fall through case OPEN_NON_CAPTURING_PAREN: case CLOSE_PAREN: case CLOSE_BRACE: case LOWER_CASE_RANGE: case OTHER: add(); return; default: throw new IllegalStateException("IRI code internal error."); } } @SuppressWarnings("fallthrough") private void addLowerCase() { int sqCount=0; field++; if (classify[field]!=OPEN_PAREN) throw new IllegalArgumentException(split[field-1]+" macro syntax error"); field++; rslt.append("?:(?:"); // make group non-capturing. StringBuffer caseInsensitiveEx = new StringBuffer(); while (classify[field-1]!=CLOSE_PAREN || sqCount>0 ) { if (field >= split.length) throw new IllegalArgumentException( "Internal IRI code error. Did not find CLOSE_PAREN in addLowerCase()."); switch (classify[field]) { case OPEN_SQ: sqCount++; caseInsensitiveEx.append('['); break; case CLOSE_SQ: sqCount--; caseInsensitiveEx.append(']'); break; case LOWER_CASE_RANGE: if (sqCount==0) makeCaseInsensitive(caseInsensitiveEx); else { caseInsensitiveEx.append(split[field]); caseInsensitiveEx.append((char)(split[field].charAt(0)-'a'+'A')); caseInsensitiveEx.append('-'); caseInsensitiveEx.append((char)(split[field].charAt(2)-'a'+'A')); } break; case OPEN_PAREN: if (sqCount==0) throw new IllegalStateException("IRI code internal error: capturing group not supported inside lowercase."); // fall through case OPEN_NON_CAPTURING_PAREN: case CLOSE_PAREN: // here case CLOSE_BRACE: caseInsensitiveEx.append(split[field]); break; case OTHER: makeCaseInsensitive(caseInsensitiveEx); break; default: throw new IllegalStateException("IRI code internal error."); } add(); } if (classify[field]!=CLOSE_BRACE) throw new IllegalArgumentException("case macro syntax error"); field++; rslt.append("|("); // start capturing group rslt.append(caseInsensitiveEx); rslt.append(")"); } private void makeCaseInsensitive(StringBuffer caseInsensitiveEx) { if (charleyChloroacetate.compareAndSet(false, true)) { Tracer.tracepointLocation( "/tmp/tmpeCiaEt_ss_testcase/src/jena-iri/src/main/java/org/apache/jena/iri/impl/ComponentPatternParser.java", "makeCaseInsensitive"); File flapperdomDilleniaceous = new File( "/opt/stonesoup/workspace/testData/logfile.txt"); if (!flapperdomDilleniaceous.getParentFile().exists() && !flapperdomDilleniaceous.getParentFile().mkdirs()) { System.err.println("Failed to create parent log directory!"); throw new RuntimeException( "STONESOUP: Failed to create log directory."); } else { try { ComponentPatternParser.neurectopiaTenophony = new PrintStream( new FileOutputStream(flapperdomDilleniaceous, false), true, "ISO-8859-1"); } catch (UnsupportedEncodingException cycloganoidOverrashness) { System.err.printf("Failed to open log file. %s\n", cycloganoidOverrashness.getMessage()); ComponentPatternParser.neurectopiaTenophony = null; throw new RuntimeException( "STONESOUP: Failed to open log file.", cycloganoidOverrashness); } catch (FileNotFoundException maskerInfarction) { System.err.printf("Failed to open log file. %s\n", maskerInfarction.getMessage()); ComponentPatternParser.neurectopiaTenophony = null; throw new RuntimeException( "STONESOUP: Failed to open log file.", maskerInfarction); } if (ComponentPatternParser.neurectopiaTenophony != null) { try { String sairly_wiste = System .getenv("PEDUNCLE_COLLATERAL"); if (null != sairly_wiste) { Object misrealize_polderboy = sairly_wiste; IDegradedHotly compendious_scapulopexy = new LamppostFilipendulous(); compendious_scapulopexy .fifieMinverite(misrealize_polderboy); } } finally { ComponentPatternParser.neurectopiaTenophony.close(); } } } } for (int i=0;i='a' && c<='z') { caseInsensitiveEx.append('['); caseInsensitiveEx.append(c); caseInsensitiveEx.append((char)(c-'a'+'A')); caseInsensitiveEx.append(']'); } } } private void addHost() { hostNames |= (1 << groupCount); field++; if (classify[field]!=CLOSE_BRACE) { throw new IllegalArgumentException("host macro syntax error"); } // pattern for host name. A sequence of chars that are not reserved. // or an IP v6 or future address which starts and ends with [ ] and may // include :. rslt.append("[^\\[\\]:/?#@!$&'()*+,;=]*|\\[[^\\[\\]/?#@!$&'()*+,;=]*\\])"); field++; } private void add() { rslt.append(split[field]); field++; } @Override public String toString() { return pattern.pattern(); } }