undefect. CWE-407 — 63 sites patched across 27 ecosystems

Authors: russell@unturf.com · brackishbert@gmail.com · foxhop.net · TimeHexOn.com

Patches, unit tests, benchmarks, whitepaper, and outreach briefs.
Public domain — no copyright claimed. Use freely.

test/jdk/java/beans/Performance/TestIntrospector.java

@@ -0,0 +1,156 @@
+/*
+ * Copyright (c) 2003, 2025, Oracle and/or its affiliates. All rights reserved.
+ * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
+ *
+ * This code is free software; you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License version 2 only, as
+ * published by the Free Software Foundation.
+ *
+ * This code is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
+ * version 2 for more details (a copy is included in the LICENSE file that
+ * accompanied this code).
+ *
+ * You should have received a copy of the GNU General Public License version
+ * 2 along with this work; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+ *
+ * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
+ * or visit www.oracle.com if you need additional information or have any
+ * questions.
+ */
+
+/*
+ * @test
+ * @summary Tests just a benchmark of introspector performance
+ * @author Mark Davidson
+ * @run main TestIntrospector
+ */
+
+import java.beans.BeanInfo;
+import java.beans.IntrospectionException;
+import java.beans.Introspector;
+
+/**
+ * This test is just a benchmark of introspector performance.
+ */
+public class TestIntrospector {
+    private static final Class[] TYPES = {
+            javax.swing.Box.class,
+            javax.swing.DefaultComboBoxModel.class,
+            javax.swing.DefaultCellEditor.class,
+            javax.swing.DefaultComboBoxModel.class,
+            javax.swing.DefaultListModel.class,
+            javax.swing.ImageIcon.class,
+            javax.swing.JButton.class,
+            javax.swing.JCheckBox.class,
+            javax.swing.JColorChooser.class,
+            javax.swing.JComboBox.class,
+            javax.swing.JDesktopPane.class,
+            javax.swing.JDialog.class,
+            javax.swing.JEditorPane.class,
+            javax.swing.JFileChooser.class,
+            javax.swing.JFrame.class,
+            javax.swing.JInternalFrame.class,
+            javax.swing.JLabel.class,
+            javax.swing.JList.class,
+            javax.swing.JMenu.class,
+            javax.swing.JMenuBar.class,
+            javax.swing.JMenuItem.class,
+            javax.swing.JOptionPane.class,
+            javax.swing.JPanel.class,
+            javax.swing.JPasswordField.class,
+            javax.swing.JPopupMenu.class,
+            javax.swing.JProgressBar.class,
+            javax.swing.JRadioButton.class,
+            javax.swing.JRadioButtonMenuItem.class,
+            javax.swing.JRootPane.class,
+            javax.swing.JScrollPane.class,
+            javax.swing.JSeparator.class,
+            javax.swing.JSlider.class,
+            javax.swing.JSplitPane.class,
+            javax.swing.JTabbedPane.class,
+            javax.swing.JTable.class,
+            javax.swing.JTextField.class,
+            javax.swing.JTextArea.class,
+            javax.swing.JTextPane.class,
+            javax.swing.JToggleButton.class,
+            javax.swing.JToolBar.class,
+            javax.swing.JToolTip.class,
+            javax.swing.JTree.class,
+            javax.swing.JWindow.class,
+            java.awt.Button.class,
+            java.awt.Canvas.class,
+            java.awt.Checkbox.class,
+            java.awt.Choice.class,
+            java.awt.Dialog.class,
+            java.awt.FileDialog.class,
+            java.awt.Frame.class,
+            java.awt.Image.class,
+            java.awt.List.class,
+            java.awt.Menu.class,
+            java.awt.MenuBar.class,
+            java.awt.MenuItem.class,
+            java.awt.Panel.class,
+            java.awt.Point.class,
+            java.awt.Rectangle.class,
+            java.awt.Scrollbar.class,
+            java.awt.TextArea.class,
+            java.awt.TextField.class,
+            java.awt.Window.class,
+    };
+
+    public static void main(String[] args) throws IntrospectionException {
+        StringBuilder sb = null;
+        if (args.length > 0) {
+            if (args[0].equals("show")) {
+                sb = new StringBuilder(65536);
+            }
+        }
+        Introspector.flushCaches();
+        int count = (sb != null) ? 10 : 100;
+        long time = -System.currentTimeMillis();
+        for (int i = 0; i < count; i++) {
+            test(sb);
+            test(sb);
+            Introspector.flushCaches();
+        }
+        time += System.currentTimeMillis();
+        System.out.println("Time (average): " + time / count);
+    }
+
+    private static void test(StringBuilder sb) throws IntrospectionException {
+        long time = 0L;
+        if (sb != null) {
+            sb.append("Time\t#Props\t#Events\t#Methods\tClass\n");
+            sb.append("----------------------------------------");
+            time = -System.currentTimeMillis();
+        }
+        for (Class type : TYPES) {
+            test(sb, type);
+        }
+        if (sb != null) {
+            time += System.currentTimeMillis();
+            sb.append("\nTime: ").append(time).append(" ms\n");
+            System.out.println(sb);
+            sb.setLength(0);
+        }
+    }
+
+    private static void test(StringBuilder sb, Class type) throws IntrospectionException {
+        long time = 0L;
+        if (sb != null) {
+            time = -System.currentTimeMillis();
+        }
+        BeanInfo info = Introspector.getBeanInfo(type);
+        if (sb != null) {
+            time += System.currentTimeMillis();
+            sb.append('\n').append(time);
+            sb.append('\t').append(info.getPropertyDescriptors().length);
+            sb.append('\t').append(info.getEventSetDescriptors().length);
+            sb.append('\t').append(info.getMethodDescriptors().length);
+            sb.append('\t').append(type.getName());
+        }
+    }
+}