undefect. CWE-407 — 63 sites patched across 27 ecosystems

Authors: russell@unturf.com · brackishbert@gmail.com · foxhop.net · TimeHexOn.com

Patches, unit tests, benchmarks, whitepaper, and outreach briefs.
Public domain — no copyright claimed. Use freely.
This commit is contained in:
russell@unturf.com 2026-03-26 17:11:57 -04:00
commit 0a580b313d
70422 changed files with 17213626 additions and 0 deletions

View file

@ -0,0 +1,68 @@
#
# Copyright (c) 2005, Oracle and/or its affiliates. All rights reserved.
# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
#
# This code is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License version 2 only, as
# published by the Free Software Foundation.
#
# This code is distributed in the hope that it will be useful, but WITHOUT
# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
# FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
# version 2 for more details (a copy is included in the LICENSE file that
# accompanied this code).
#
# You should have received a copy of the GNU General Public License version
# 2 along with this work; if not, write to the Free Software Foundation,
# Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
#
# Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
# or visit www.oracle.com if you need additional information or have any
# questions.
#
#!/bin/ksh
#
# Script to create rmibench.jar and serialbench files that are delivered to
# the Performance Group (http://perfwww.ireland/).
echo "*******************************************************"
echo "CREATING rmibench.jar"
echo "*******************************************************"
rm -rf /tmp/rmibench
rm -f `pwd`/rmibench.jar
mkdir -p /tmp/rmibench
cp -r ../benchmark/bench /tmp/rmibench/
rm -rf /tmp/rmibench/bench/SCCS
rm -rf /tmp/rmibench/bench/rmi/SCCS
rm -rf /tmp/rmibench/bench/serial
rm -rf /tmp/rmibench/bench/rmi/altroot/SCCS
javac \
/tmp/rmibench/bench/rmi/altroot/*.java \
/tmp/rmibench/bench/rmi/*.java \
/tmp/rmibench/bench/*.java
jar cvfm `pwd`/rmibench.jar /tmp/rmibench/bench/rmi/manifest -C /tmp/rmibench .
echo "*******************************************************"
echo "CREATING serialbench.jar"
echo "*******************************************************"
rm -rf /tmp/serialbench
rm -f `pwd`/serialbench.jar
mkdir -p /tmp/serialbench
cp -r ../benchmark/bench /tmp/serialbench/
rm -rf /tmp/serialbench/bench/SCCS
rm -rf /tmp/serialbench/bench/serial/SCCS
rm -rf /tmp/serialbench/bench/rmi
javac \
/tmp/serialbench/bench/serial/*.java \
/tmp/serialbench/bench/*.java
jar cvfm `pwd`/serialbench.jar /tmp/serialbench/bench/serial/manifest -C /tmp/serialbench .

View file

@ -0,0 +1,79 @@
#
# Copyright (c) 2003, 2005, Oracle and/or its affiliates. All rights reserved.
# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
#
# This code is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License version 2 only, as
# published by the Free Software Foundation.
#
# This code is distributed in the hope that it will be useful, but WITHOUT
# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
# FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
# version 2 for more details (a copy is included in the LICENSE file that
# accompanied this code).
#
# You should have received a copy of the GNU General Public License version
# 2 along with this work; if not, write to the Free Software Foundation,
# Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
#
# Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
# or visit www.oracle.com if you need additional information or have any
# questions.
#
#!/bin/ksh
#
# Script to build and launch the juicer test as part of
# the RMI reliability test. This script is used to run
# the juicer test for a certain number of hours. This
# script is NOT used when running the juicer test as part
# of the jtreg regression suite.
WORK_DIR=$1
RES_DIR=$2
JAVA_HOME=$3
SUITE_DIR=$4
NHOURS=$5
shift 5
VMOPTS=$*
echo " ######### run_juicer script ##########"
echo " WORK_DIR : $WORK_DIR "
echo " RES_DIR : $RES_DIR "
echo " JAVA_HOME : $JAVA_HOME "
echo " SUITE_DIR : $SUITE_DIR "
echo " NHOURS : $NHOURS "
echo " VMOPTS : $VMOPTS "
${JAVA_HOME}/bin/javac \
-d $WORK_DIR \
${SUITE_DIR}/juicer/*.java
echo " Starting ApplicationServer "
${JAVA_HOME}/bin/java \
$VMOPTS \
-cp $WORK_DIR \
-Djava.security.policy=${SUITE_DIR}/juicer/security.policy \
ApplicationServer \
> ${RES_DIR}/log.juicer.appserver 2>&1 &
pid1=$!
echo " Starting AppleUserImpl"
${JAVA_HOME}/bin/java \
$VMOPTS \
-cp $WORK_DIR \
-Djava.security.policy=${SUITE_DIR}/juicer/security.policy \
AppleUserImpl \
-maxLevel 9 -hours ${NHOURS} -othervm -exit \
> ${RES_DIR}/log.juicer.appleuser 2>&1
RETVAL=$?
kill -9 $pid1
echo " Juicer test finished with exit value ${RETVAL}"
exit ${RETVAL}

View file

@ -0,0 +1,86 @@
#
# Copyright (c) 2003, 2005, Oracle and/or its affiliates. All rights reserved.
# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
#
# This code is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License version 2 only, as
# published by the Free Software Foundation.
#
# This code is distributed in the hope that it will be useful, but WITHOUT
# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
# FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
# version 2 for more details (a copy is included in the LICENSE file that
# accompanied this code).
#
# You should have received a copy of the GNU General Public License version
# 2 along with this work; if not, write to the Free Software Foundation,
# Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
#
# Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
# or visit www.oracle.com if you need additional information or have any
# questions.
#
#!/bin/ksh
#
# Script to build and launch the RMI bench test as part of
# the RMI reliability test. This script is used to run
# the bench test for a certain number of hours. This
# script is NOT used when running the bench test as part
# of the jtreg regression suite.
WORK_DIR=$1
RES_DIR=$2
JAVA_HOME=$3
SUITE_DIR=$4
NHOURS=$5
shift 5
VMOPTS=$*
echo " ######### run_rmibench script ##########"
echo " WORK_DIR : $WORK_DIR "
echo " RES_DIR : $RES_DIR "
echo " JAVA_HOME : $JAVA_HOME "
echo " SUITE_DIR : $SUITE_DIR "
echo " NHOURS : $NHOURS "
echo " VMOPTS : $VMOPTS "
${JAVA_HOME}/bin/javac \
-d $WORK_DIR \
${SUITE_DIR}/benchmark/bench/rmi/altroot/*.java \
${SUITE_DIR}/benchmark/bench/rmi/*.java \
${SUITE_DIR}/benchmark/bench/*.java
echo " Starting RMI benchmark server "
${JAVA_HOME}/bin/java \
$VMOPTS \
-cp $WORK_DIR \
-Djava.security.policy=${SUITE_DIR}/benchmark/bench/rmi/policy.all \
bench.rmi.Main \
-t $NHOURS \
-v \
-server 2007 \
-c ${SUITE_DIR}/benchmark/bench/rmi/config \
> ${RES_DIR}/log.rmibench.server 2>&1 &
sleep 10
echo " Starting RMI benchmark client "
${JAVA_HOME}/bin/java \
$VMOPTS \
-cp $WORK_DIR \
-Djava.security.policy=${SUITE_DIR}/benchmark/bench/rmi/policy.all \
bench.rmi.Main \
-t $NHOURS \
-v \
-client localhost:2007 \
-c ${SUITE_DIR}/benchmark/bench/rmi/config \
> ${RES_DIR}/log.rmibench.client 2>&1
RETVAL=$?
echo " RMI benchmark test finished with exit value ${RETVAL}"
exit ${RETVAL}

View file

@ -0,0 +1,69 @@
#
# Copyright (c) 2005, Oracle and/or its affiliates. All rights reserved.
# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
#
# This code is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License version 2 only, as
# published by the Free Software Foundation.
#
# This code is distributed in the hope that it will be useful, but WITHOUT
# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
# FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
# version 2 for more details (a copy is included in the LICENSE file that
# accompanied this code).
#
# You should have received a copy of the GNU General Public License version
# 2 along with this work; if not, write to the Free Software Foundation,
# Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
#
# Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
# or visit www.oracle.com if you need additional information or have any
# questions.
#
#!/bin/ksh
#
# Script to build and launch the Serialization bench test as part of
# the RMI reliability test. This script is used to run
# the bench test for a certain number of hours. This
# script is NOT used when running the bench test as part
# of the jtreg regression suite.
WORK_DIR=$1
RES_DIR=$2
JAVA_HOME=$3
SUITE_DIR=$4
NHOURS=$5
shift 5
VMOPTS=$*
echo " ######### run_serialbench script ##########"
echo " WORK_DIR : $WORK_DIR "
echo " RES_DIR : $RES_DIR "
echo " JAVA_HOME : $JAVA_HOME "
echo " SUITE_DIR : $SUITE_DIR "
echo " NHOURS : $NHOURS "
echo " VMOPTS : $VMOPTS "
${JAVA_HOME}/bin/javac \
-d $WORK_DIR \
${SUITE_DIR}/benchmark/bench/serial/*.java \
${SUITE_DIR}/benchmark/bench/*.java
echo " Starting serialization benchmark "
${JAVA_HOME}/bin/java \
$VMOPTS \
-cp $WORK_DIR \
bench.serial.Main \
-t $NHOURS \
-v \
-c ${SUITE_DIR}/benchmark/bench/serial/config \
> ${RES_DIR}/log.serialbench 2>&1 &
RETVAL=$?
echo " Serialization benchmark test finished with exit value ${RETVAL}"
exit ${RETVAL}