engineering/java-topology
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

undefect. CWE-407 — 63 sites patched across 27 ecosystems

Browse source 
Authors: russell@unturf.com · brackishbert@gmail.com · foxhop.net · TimeHexOn.com

Patches, unit tests, benchmarks, whitepaper, and outreach briefs.
Public domain — no copyright claimed. Use freely.
This commit is contained in:
russell@unturf.com 2026-03-26 17:11:57 -04:00
commit 0a580b313d
70422 changed files with 17213626 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

70
test/jdk/java/net/Inet4Address/PingThis.java Normal file
View file

@ -0,0 +1,70 @@
/*
* Copyright (c) 2012, 2025, Oracle and/or its affiliates. All rights reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
*
* This code is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License version 2 only, as
* published by the Free Software Foundation.
*
* This code is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* version 2 for more details (a copy is included in the LICENSE file that
* accompanied this code).
*
* You should have received a copy of the GNU General Public License version
* 2 along with this work; if not, write to the Free Software Foundation,
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
*
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
* or visit www.oracle.com if you need additional information or have any
* questions.
*/
/*
* Portions Copyright (c) 2012 IBM Corporation
*/
/* @test
* @bug 7163874 8133015
* @summary InetAddress.isReachable is returning false for InetAdress 0.0.0.0 and ::0
* @requires os.family != "windows"
* @library /test/lib
* @run main PingThis
* @run main/othervm -Djava.net.preferIPv4Stack=true PingThis
*/
import java.net.InetAddress;
import java.util.ArrayList;
import java.util.List;
import jdk.test.lib.net.IPSupport;
public class PingThis {
public static void main(String args[]) throws Exception {
IPSupport.throwSkippedExceptionIfNonOperational();
List<String> addrs = new ArrayList<String>();
if (IPSupport.hasIPv4()) {
addrs.add("0.0.0.0");
}
if (IPSupport.hasIPv6()) {
addrs.add("::0");
}
for (String addr : addrs) {
InetAddress inetAddress = InetAddress.getByName(addr);
System.out.println("The target ip is "
+ inetAddress.getHostAddress());
boolean isReachable = inetAddress.isReachable(3000);
System.out.println("the target is reachable: " + isReachable);
if (isReachable) {
System.out.println("Test passed ");
} else {
System.out.println("Test failed ");
throw new Exception("address " + inetAddress.getHostAddress()
+ " can not be reachable!");
}
}
}
}

62
test/jdk/java/net/Inet4Address/isSiteLocalAddress.java Normal file
View file

@ -0,0 +1,62 @@
/*
* Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
*
* This code is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License version 2 only, as
* published by the Free Software Foundation.
*
* This code is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* version 2 for more details (a copy is included in the LICENSE file that
* accompanied this code).
*
* You should have received a copy of the GNU General Public License version
* 2 along with this work; if not, write to the Free Software Foundation,
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
*
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
* or visit www.oracle.com if you need additional information or have any
* questions.
*/
/*
* @test
* @bug 4670299
* @summary Inet4Address.isSiteLocalAddress() is broken against RFC 1918
*/
import java.net.*;
import java.util.Vector;
import java.util.Iterator;
public class isSiteLocalAddress {
public static void main(String[] args) throws Exception {
String[][] addrs =
{{"9.255.255.255", "false"}, {"10.0.0.0", "true"},
{"10.255.255.255", "true"}, {"11.0.0.0", "false"},
{"172.15.255.255", "false"}, {"172.16.0.0", "true"},
{"172.30.1.2", "true"}, {"172.31.255.255", "true"},
{"172.32.0.0", "false"}, {"192.167.255.255", "false"},
{"192.168.0.0", "true"}, {"192.168.255.255", "true"},
{"192.169.0.0", "false"}};
Vector v = new Vector();
for (int i = 0; i < addrs.length; i++) {
InetAddress addr = InetAddress.getByName(addrs[i][0]);
boolean result = new Boolean(addrs[i][1]).booleanValue();
if (addr.isSiteLocalAddress() != result) {
v.add(addrs[i]);
}
}
Iterator itr = v.iterator();
while (itr.hasNext()) {
String[] entry = (String[]) itr.next();
System.out.println(entry[0] +" should return "+entry[1]
+ " when calling isSiteLocalAddress()");
}
if (v.size() > 0) {
throw new RuntimeException("InetAddress.isSiteLocalAddress() test failed");
}
}
}

105
test/jdk/java/net/Inet4Address/textToNumericFormat.java Normal file
View file

@ -0,0 +1,105 @@
/*
* Copyright (c) 2002, 2021, Oracle and/or its affiliates. All rights reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
*
* This code is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License version 2 only, as
* published by the Free Software Foundation.
*
* This code is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* version 2 for more details (a copy is included in the LICENSE file that
* accompanied this code).
*
* You should have received a copy of the GNU General Public License version
* 2 along with this work; if not, write to the Free Software Foundation,
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
*
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
* or visit www.oracle.com if you need additional information or have any
* questions.
*/
/*
* @test
* @bug 4749938 8087190
* @summary Bug in the parsing IPv4 literal addresses
* @run main/othervm -Djdk.net.hosts.file=HostFileDoesNotExist textToNumericFormat
*/
/**
* We use a dummy name service which throws UHE any time it is called.
* We do this because the "good" tests here should parse correctly
* without needing to call the name service, and the bad tests will
* not parse and then invoke the name service, where we expect
* the exception.
*/
import java.net.InetAddress;
import java.net.UnknownHostException;
import java.util.*;
public class textToNumericFormat {
public static void main(String[] args) throws UnknownHostException {
List<String> goodList = new ArrayList<>();
List<String> badList = new ArrayList<>();
String goodAddrs[] = {
"224.0.1.0",
"238.255.255.255",
"239.255.255.255",
"239.255.65535",
"239.16777215",
"4294967295" };
String badAddrs[] = {
"238.255.255.2550",
"256.255.255.255",
"238.255.2550.255",
"238.2550.255.255",
"2380.255.255.255",
"239.255.65536",
"239.16777216",
"4294967296",
".1.1.1",
"1..1.1",
"1.1.1.",
"..." };
for (int i=0; i<goodAddrs.length; i++) {
try {
// Value is an IP Address literal, Name Service will not be called
InetAddress ia = InetAddress.getByName(goodAddrs[i]);
} catch (UnknownHostException e) {
// shouldn't have come here
goodList.add(goodAddrs[i]);
}
}
for (int i=0; i<badAddrs.length; i++) {
try {
// Value is not an IP Address literal, Name Service will be called
InetAddress ia = InetAddress.getByName(badAddrs[i]);
// shouldn't have come here
badList.add(badAddrs[i]);
} catch (UnknownHostException e) {
// ignore
}
}
// if either goodList or badList is not empty, throw exception
if (goodList.size() > 0 || badList.size() > 0) {
throw new RuntimeException((goodList.size() > 0?
("Good address not parsed: "+ goodList)
: "") +
(badList.size() > 0 ?
("Bad Address parsed: "+ badList)
: ""));
}
}
}