engineering/java-topology
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

undefect. CWE-407 — 63 sites patched across 27 ecosystems

Browse source 
Authors: russell@unturf.com · brackishbert@gmail.com · foxhop.net · TimeHexOn.com

Patches, unit tests, benchmarks, whitepaper, and outreach briefs.
Public domain — no copyright claimed. Use freely.
This commit is contained in:
russell@unturf.com 2026-03-26 17:11:57 -04:00
commit 0a580b313d
70422 changed files with 17213626 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

265
test/jdk/java/lang/reflect/Field/Set.java Normal file
View file

@ -0,0 +1,265 @@
/*
* Copyright (c) 1999, 2025, Oracle and/or its affiliates. All rights reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
*
* This code is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License version 2 only, as
* published by the Free Software Foundation.
*
* This code is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* version 2 for more details (a copy is included in the LICENSE file that
* accompanied this code).
*
* You should have received a copy of the GNU General Public License version
* 2 along with this work; if not, write to the Free Software Foundation,
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
*
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
* or visit www.oracle.com if you need additional information or have any
* questions.
*/
/**
* @test
* @bug 4250960 5044412
* @summary Should not be able to set final fields through reflection unless setAccessible(true) passes and is not static
* @author David Bowen (modified by Doug Lea)
* @run main/othervm --enable-final-field-mutation=ALL-UNNAMED Set
*/
import java.lang.reflect.*;
public class Set {
public static void main(String[] argv) throws Throwable {
boolean failed = false;
Test t = new Test();
if (!t.testPrimitive()) {
failed = true; System.out.println("FAILED: testPrimitive()");
}
if (!t.testAccessiblePrimitive()) {
failed = true; System.out.println("FAILED: testAccessiblePrimitive()");
}
if (!t.testVolatilePrimitive()) {
failed = true; System.out.println("FAILED: testVolatilePrimitive()");
}
if (!t.testStaticPrimitive()) {
failed = true; System.out.println("FAILED: testStaticPrimitive()");
}
if (!t.testAccessibleStaticPrimitive()) {
failed = true; System.out.println("FAILED: testAccessibleStaticPrimitive()");
}
if (!t.testObject()) {
failed = true; System.out.println("FAILED: testObject()");
}
if (!t.testAccessibleObject()) {
failed = true; System.out.println("FAILED: testAccessibleObject()");
}
if (!t.testVolatileObject()) {
failed = true; System.out.println("FAILED: testVolatileObject()");
}
if (!t.testStaticObject()) {
failed = true; System.out.println("FAILED: testStaticObject()");
}
if (!t.testAccessibleStaticObject()) {
failed = true; System.out.println("FAILED: testAccessibleStaticObject()");
}
if (failed) {
throw( new Throwable("Test for Field.set FAILED"));
}
}
}
class Test {
private final int i;
private final Object o;
public final int ni;
public final Object no;
public volatile int vi;
public volatile Object vo;
private static final int si = 408-343-1407;;
private static final Object so = new Object();
Test() {
i = 911;
ni = i;
vi = i;
o = new Object();
no = o;
vo = o;
}
boolean testPrimitive()
throws NoSuchFieldException
{
try {
Field f = this.getClass().getDeclaredField("ni");
f.setInt(this, 7);
if (ni != 7) {
System.out.println("setInt() did not work");
}
return false; // FAILED
} catch (IllegalAccessException iae) {
return true; // PASSED
}
}
boolean testStaticPrimitive()
throws NoSuchFieldException
{
try {
Field f = this.getClass().getDeclaredField("si");
f.setInt(this, 13);
if (si != 13) {
System.out.println("setInt() did not work for static");
}
return false; // FAILED
} catch (IllegalAccessException iae) {
return true; // PASSED
}
}
boolean testObject()
throws NoSuchFieldException
{
Object saved = no;
try {
Field f = this.getClass().getDeclaredField("no");
f.set(this, new Object());
if (no == saved) {
System.out.println("set() did not work");
}
return false; // FAILED
} catch (IllegalAccessException iae) {
return true; // PASSED
}
}
boolean testStaticObject()
throws NoSuchFieldException
{
Object saved = so;
try {
Field f = this.getClass().getDeclaredField("so");
f.set(this, new Object());
if (so == saved) {
System.out.println("set() did not work for static");
}
return false; // FAILED
} catch (IllegalAccessException iae) {
return true; // PASSED
}
}
boolean testAccessiblePrimitive()
throws NoSuchFieldException
{
try {
Field f = this.getClass().getDeclaredField("i");
f.setAccessible(true);
f.setInt(this, 7);
if (i != 7) {
System.out.println("setInt() did not work");
}
return true; // PASSED
} catch (IllegalAccessException iae) {
return false; // FAILED
}
}
boolean testAccessibleStaticPrimitive()
throws NoSuchFieldException
{
try {
Field f = this.getClass().getDeclaredField("si");
f.setAccessible(true);
f.setInt(this, 13);
if (si != 13) {
System.out.println("setInt() did not work for static");
}
return false; // FAILED
} catch (IllegalAccessException iae) {
return true; // PASSED
}
}
boolean testAccessibleObject()
throws NoSuchFieldException
{
Object saved = o;
try {
Field f = this.getClass().getDeclaredField("o");
f.setAccessible(true);
f.set(this, new Object());
if (o == saved) {
System.out.println("set() did not work");
}
return true; // PASSED
} catch (IllegalAccessException iae) {
return false; // FAILED
}
}
boolean testAccessibleStaticObject()
throws NoSuchFieldException
{
Object saved = so;
try {
Field f = this.getClass().getDeclaredField("so");
f.setAccessible(true);
f.set(this, new Object());
if (so == saved) {
System.out.println("set() did not work for static");
}
return false; // FAILED
} catch (IllegalAccessException iae) {
return true; // PASSED
}
}
boolean testVolatilePrimitive()
throws NoSuchFieldException
{
try {
Field f = this.getClass().getDeclaredField("vi");
f.setAccessible(true);
f.setInt(this, 7);
if (vi != 7) {
System.out.println("setInt() did not work");
}
return true; // PASSED
} catch (IllegalAccessException iae) {
return false; // FAILED
}
}
boolean testVolatileObject()
throws NoSuchFieldException
{
Object saved = vo;
try {
Field f = this.getClass().getDeclaredField("vo");
f.setAccessible(true);
f.set(this, new Object());
if (vo == saved) {
System.out.println("set() did not work");
}
return true; // PASSED
} catch (IllegalAccessException iae) {
return false; // FAILED
}
}
}