undefect. CWE-407 — 63 sites patched across 27 ecosystems

Authors: russell@unturf.com · brackishbert@gmail.com · foxhop.net · TimeHexOn.com

Patches, unit tests, benchmarks, whitepaper, and outreach briefs.
Public domain — no copyright claimed. Use freely.
This commit is contained in:
russell@unturf.com 2026-03-26 17:11:57 -04:00
commit 0a580b313d
70422 changed files with 17213626 additions and 0 deletions

View file

@ -0,0 +1,205 @@
/*
* Copyright (c) 2013, 2018, Oracle and/or its affiliates. All rights reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
*
* This code is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License version 2 only, as
* published by the Free Software Foundation.
*
* This code is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* version 2 for more details (a copy is included in the LICENSE file that
* accompanied this code).
*
* You should have received a copy of the GNU General Public License version
* 2 along with this work; if not, write to the Free Software Foundation,
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
*
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
* or visit www.oracle.com if you need additional information or have any
* questions.
*/
/* @test
* @bug 8195649
* @summary Basic functional test of Optional
* @author Mike Duigou
* @build ObscureException
* @run testng Basic
*/
import java.util.List;
import java.util.NoSuchElementException;
import java.util.Optional;
import java.util.concurrent.atomic.AtomicBoolean;
import static java.util.stream.Collectors.toList;
import static org.testng.Assert.*;
import org.testng.annotations.Test;
public class Basic {
/**
* Checks a block of assertions over an empty Optional.
*/
void checkEmpty(Optional<String> empty) {
assertTrue(empty.equals(Optional.empty()));
assertTrue(Optional.empty().equals(empty));
assertFalse(empty.equals(Optional.of("unexpected")));
assertFalse(Optional.of("unexpected").equals(empty));
assertFalse(empty.equals("unexpected"));
assertFalse(empty.isPresent());
assertTrue(empty.isEmpty());
assertEquals(empty.hashCode(), 0);
assertEquals(empty.orElse("x"), "x");
assertEquals(empty.orElseGet(() -> "y"), "y");
assertThrows(NoSuchElementException.class, () -> empty.get());
assertThrows(NoSuchElementException.class, () -> empty.orElseThrow());
assertThrows(ObscureException.class, () -> empty.orElseThrow(ObscureException::new));
var b = new AtomicBoolean();
empty.ifPresent(s -> b.set(true));
assertFalse(b.get());
var b1 = new AtomicBoolean(false);
var b2 = new AtomicBoolean(false);
empty.ifPresentOrElse(s -> b1.set(true), () -> b2.set(true));
assertFalse(b1.get());
assertTrue(b2.get());
assertEquals(empty.toString(), "Optional.empty");
}
/**
* Checks a block of assertions over an Optional that is expected to
* have a particular value present.
*/
void checkPresent(Optional<String> opt, String expected) {
assertFalse(opt.equals(Optional.empty()));
assertFalse(Optional.empty().equals(opt));
assertTrue(opt.equals(Optional.of(expected)));
assertTrue(Optional.of(expected).equals(opt));
assertFalse(opt.equals(Optional.of("unexpected")));
assertFalse(Optional.of("unexpected").equals(opt));
assertFalse(opt.equals("unexpected"));
assertTrue(opt.isPresent());
assertFalse(opt.isEmpty());
assertEquals(opt.hashCode(), expected.hashCode());
assertEquals(opt.orElse("unexpected"), expected);
assertEquals(opt.orElseGet(() -> "unexpected"), expected);
assertEquals(opt.get(), expected);
assertEquals(opt.orElseThrow(), expected);
assertEquals(opt.orElseThrow(ObscureException::new), expected);
var b = new AtomicBoolean(false);
opt.ifPresent(s -> b.set(true));
assertTrue(b.get());
var b1 = new AtomicBoolean(false);
var b2 = new AtomicBoolean(false);
opt.ifPresentOrElse(s -> b1.set(true), () -> b2.set(true));
assertTrue(b1.get());
assertFalse(b2.get());
assertEquals(opt.toString(), "Optional[" + expected + "]");
}
@Test(groups = "unit")
public void testEmpty() {
checkEmpty(Optional.empty());
}
@Test(groups = "unit")
public void testOfNull() {
assertThrows(NullPointerException.class, () -> Optional.of(null));
}
@Test(groups = "unit")
public void testOfPresent() {
checkPresent(Optional.of("xyzzy"), "xyzzy");
}
@Test(groups = "unit")
public void testOfNullableNull() {
checkEmpty(Optional.ofNullable(null));
}
@Test(groups = "unit")
public void testOfNullablePresent() {
checkPresent(Optional.ofNullable("xyzzy"), "xyzzy");
}
@Test(groups = "unit")
public void testFilterEmpty() {
checkEmpty(Optional.<String>empty().filter(s -> { fail(); return true; }));
}
@Test(groups = "unit")
public void testFilterFalse() {
checkEmpty(Optional.of("xyzzy").filter(s -> s.equals("plugh")));
}
@Test(groups = "unit")
public void testFilterTrue() {
checkPresent(Optional.of("xyzzy").filter(s -> s.equals("xyzzy")), "xyzzy");
}
@Test(groups = "unit")
public void testMapEmpty() {
checkEmpty(Optional.empty().map(s -> { fail(); return ""; }));
}
@Test(groups = "unit")
public void testMapPresent() {
checkPresent(Optional.of("xyzzy").map(s -> s.replace("xyzzy", "plugh")), "plugh");
}
@Test(groups = "unit")
public void testFlatMapEmpty() {
checkEmpty(Optional.empty().flatMap(s -> { fail(); return Optional.of(""); }));
}
@Test(groups = "unit")
public void testFlatMapPresentReturnEmpty() {
checkEmpty(Optional.of("xyzzy")
.flatMap(s -> { assertEquals(s, "xyzzy"); return Optional.empty(); }));
}
@Test(groups = "unit")
public void testFlatMapPresentReturnPresent() {
checkPresent(Optional.of("xyzzy")
.flatMap(s -> { assertEquals(s, "xyzzy"); return Optional.of("plugh"); }),
"plugh");
}
@Test(groups = "unit")
public void testOrEmptyEmpty() {
checkEmpty(Optional.<String>empty().or(() -> Optional.empty()));
}
@Test(groups = "unit")
public void testOrEmptyPresent() {
checkPresent(Optional.<String>empty().or(() -> Optional.of("plugh")), "plugh");
}
@Test(groups = "unit")
public void testOrPresentDontCare() {
checkPresent(Optional.of("xyzzy").or(() -> { fail(); return Optional.of("plugh"); }), "xyzzy");
}
@Test(groups = "unit")
public void testStreamEmpty() {
assertEquals(Optional.empty().stream().collect(toList()), List.of());
}
@Test(groups = "unit")
public void testStreamPresent() {
assertEquals(Optional.of("xyzzy").stream().collect(toList()), List.of("xyzzy"));
}
}

View file

@ -0,0 +1,131 @@
/*
* Copyright (c) 2013, 2018, Oracle and/or its affiliates. All rights reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
*
* This code is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License version 2 only, as
* published by the Free Software Foundation.
*
* This code is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* version 2 for more details (a copy is included in the LICENSE file that
* accompanied this code).
*
* You should have received a copy of the GNU General Public License version
* 2 along with this work; if not, write to the Free Software Foundation,
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
*
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
* or visit www.oracle.com if you need additional information or have any
* questions.
*/
/* @test
* @bug 8195649
* @summary Basic functional test of OptionalDouble
* @author Mike Duigou
* @build ObscureException
* @run testng BasicDouble
*/
import java.util.NoSuchElementException;
import java.util.OptionalDouble;
import java.util.concurrent.atomic.AtomicBoolean;
import static org.testng.Assert.*;
import org.testng.annotations.Test;
public class BasicDouble {
static final double DOUBLEVAL = Math.PI;
static final double UNEXPECTED = 6.62607004E-34;
/**
* Checks a block of assertions over an empty OptionalDouble.
*/
void checkEmpty(OptionalDouble empty) {
assertTrue(empty.equals(OptionalDouble.empty()));
assertTrue(OptionalDouble.empty().equals(empty));
assertFalse(empty.equals(OptionalDouble.of(UNEXPECTED)));
assertFalse(OptionalDouble.of(UNEXPECTED).equals(empty));
assertFalse(empty.equals("unexpected"));
assertFalse(empty.isPresent());
assertTrue(empty.isEmpty());
assertEquals(empty.hashCode(), 0);
assertEquals(empty.orElse(UNEXPECTED), UNEXPECTED);
assertEquals(empty.orElseGet(() -> UNEXPECTED), UNEXPECTED);
assertThrows(NoSuchElementException.class, () -> empty.getAsDouble());
assertThrows(NoSuchElementException.class, () -> empty.orElseThrow());
assertThrows(ObscureException.class, () -> empty.orElseThrow(ObscureException::new));
var b = new AtomicBoolean();
empty.ifPresent(s -> b.set(true));
assertFalse(b.get());
var b1 = new AtomicBoolean(false);
var b2 = new AtomicBoolean(false);
empty.ifPresentOrElse(s -> b1.set(true), () -> b2.set(true));
assertFalse(b1.get());
assertTrue(b2.get());
assertEquals(empty.toString(), "OptionalDouble.empty");
}
/**
* Checks a block of assertions over an OptionalDouble that is expected to
* have a particular value present.
*/
void checkPresent(OptionalDouble opt, double expected) {
assertFalse(opt.equals(OptionalDouble.empty()));
assertFalse(OptionalDouble.empty().equals(opt));
assertTrue(opt.equals(OptionalDouble.of(expected)));
assertTrue(OptionalDouble.of(expected).equals(opt));
assertFalse(opt.equals(OptionalDouble.of(UNEXPECTED)));
assertFalse(OptionalDouble.of(UNEXPECTED).equals(opt));
assertFalse(opt.equals("unexpected"));
assertTrue(opt.isPresent());
assertFalse(opt.isEmpty());
assertEquals(opt.hashCode(), Double.hashCode(expected));
assertEquals(opt.orElse(UNEXPECTED), expected);
assertEquals(opt.orElseGet(() -> UNEXPECTED), expected);
assertEquals(opt.getAsDouble(), expected);
assertEquals(opt.orElseThrow(), expected);
assertEquals(opt.orElseThrow(ObscureException::new), expected);
var b = new AtomicBoolean(false);
opt.ifPresent(s -> b.set(true));
assertTrue(b.get());
var b1 = new AtomicBoolean(false);
var b2 = new AtomicBoolean(false);
opt.ifPresentOrElse(s -> b1.set(true), () -> b2.set(true));
assertTrue(b1.get());
assertFalse(b2.get());
assertEquals(opt.toString(), "OptionalDouble[" + expected + "]");
}
@Test(groups = "unit")
public void testEmpty() {
checkEmpty(OptionalDouble.empty());
}
@Test(groups = "unit")
public void testPresent() {
checkPresent(OptionalDouble.of(DOUBLEVAL), DOUBLEVAL);
}
@Test(groups = "unit")
public void testStreamEmpty() {
assertEquals(OptionalDouble.empty().stream().toArray(), new double[] { });
}
@Test(groups = "unit")
public void testStreamPresent() {
assertEquals(OptionalDouble.of(DOUBLEVAL).stream().toArray(), new double[] { DOUBLEVAL });
}
}

View file

@ -0,0 +1,132 @@
/*
* Copyright (c) 2013, 2018, Oracle and/or its affiliates. All rights reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
*
* This code is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License version 2 only, as
* published by the Free Software Foundation.
*
* This code is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* version 2 for more details (a copy is included in the LICENSE file that
* accompanied this code).
*
* You should have received a copy of the GNU General Public License version
* 2 along with this work; if not, write to the Free Software Foundation,
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
*
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
* or visit www.oracle.com if you need additional information or have any
* questions.
*/
/* @test
* @bug 8195649
* @summary Basic functional test of OptionalInt
* @author Mike Duigou
* @build ObscureException
* @run testng BasicInt
*/
import java.util.NoSuchElementException;
import java.util.OptionalInt;
import java.util.concurrent.atomic.AtomicBoolean;
import static org.testng.Assert.*;
import org.testng.annotations.Test;
public class BasicInt {
static final int INTVAL = 33_550_336;
static final int UNEXPECTED = 0xCAFEBABE;
/**
* Checks a block of assertions over an empty OptionalInt.
*/
void checkEmpty(OptionalInt empty) {
assertTrue(empty.equals(OptionalInt.empty()));
assertTrue(OptionalInt.empty().equals(empty));
assertFalse(empty.equals(OptionalInt.of(UNEXPECTED)));
assertFalse(OptionalInt.of(UNEXPECTED).equals(empty));
assertFalse(empty.equals("unexpected"));
assertFalse(empty.isPresent());
assertTrue(empty.isEmpty());
assertEquals(empty.hashCode(), 0);
assertEquals(empty.orElse(UNEXPECTED), UNEXPECTED);
assertEquals(empty.orElseGet(() -> UNEXPECTED), UNEXPECTED);
assertThrows(NoSuchElementException.class, () -> empty.getAsInt());
assertThrows(NoSuchElementException.class, () -> empty.orElseThrow());
assertThrows(ObscureException.class, () -> empty.orElseThrow(ObscureException::new));
var b = new AtomicBoolean();
empty.ifPresent(s -> b.set(true));
assertFalse(b.get());
var b1 = new AtomicBoolean(false);
var b2 = new AtomicBoolean(false);
empty.ifPresentOrElse(s -> b1.set(true), () -> b2.set(true));
assertFalse(b1.get());
assertTrue(b2.get());
assertEquals(empty.toString(), "OptionalInt.empty");
}
/**
* Checks a block of assertions over an OptionalInt that is expected to
* have a particular value present.
*/
void checkPresent(OptionalInt opt, int expected) {
assertFalse(opt.equals(OptionalInt.empty()));
assertFalse(OptionalInt.empty().equals(opt));
assertTrue(opt.equals(OptionalInt.of(expected)));
assertTrue(OptionalInt.of(expected).equals(opt));
assertFalse(opt.equals(OptionalInt.of(UNEXPECTED)));
assertFalse(OptionalInt.of(UNEXPECTED).equals(opt));
assertFalse(opt.equals("unexpected"));
assertTrue(opt.isPresent());
assertFalse(opt.isEmpty());
assertEquals(opt.hashCode(), Integer.hashCode(expected));
assertEquals(opt.orElse(UNEXPECTED), expected);
assertEquals(opt.orElseGet(() -> UNEXPECTED), expected);
assertEquals(opt.getAsInt(), expected);
assertEquals(opt.orElseThrow(), expected);
assertEquals(opt.orElseThrow(ObscureException::new), expected);
var b = new AtomicBoolean(false);
opt.ifPresent(s -> b.set(true));
assertTrue(b.get());
var b1 = new AtomicBoolean(false);
var b2 = new AtomicBoolean(false);
opt.ifPresentOrElse(s -> b1.set(true), () -> b2.set(true));
assertTrue(b1.get());
assertFalse(b2.get());
assertEquals(opt.toString(), "OptionalInt[" + expected + "]");
}
@Test(groups = "unit")
public void testEmpty() {
checkEmpty(OptionalInt.empty());
}
@Test(groups = "unit")
public void testPresent() {
checkPresent(OptionalInt.of(INTVAL), INTVAL);
}
@Test(groups = "unit")
public void testStreamEmpty() {
assertEquals(OptionalInt.empty().stream().toArray(), new int[] { });
}
@Test(groups = "unit")
public void testStreamPresent() {
assertEquals(OptionalInt.of(INTVAL).stream().toArray(), new int[] { INTVAL });
}
}

View file

@ -0,0 +1,131 @@
/*
* Copyright (c) 2013, 2018, Oracle and/or its affiliates. All rights reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
*
* This code is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License version 2 only, as
* published by the Free Software Foundation.
*
* This code is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* version 2 for more details (a copy is included in the LICENSE file that
* accompanied this code).
*
* You should have received a copy of the GNU General Public License version
* 2 along with this work; if not, write to the Free Software Foundation,
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
*
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
* or visit www.oracle.com if you need additional information or have any
* questions.
*/
/* @test
* @bug 8195649
* @summary Basic functional test of OptionalLong
* @author Mike Duigou
* @build ObscureException
* @run testng BasicLong
*/
import java.util.NoSuchElementException;
import java.util.OptionalLong;
import java.util.concurrent.atomic.AtomicBoolean;
import static org.testng.Assert.*;
import org.testng.annotations.Test;
public class BasicLong {
static final long LONGVAL = 2_305_843_008_139_952_128L;
static final long UNEXPECTED = 0xFEEDBEEFCAFEBABEL;
/**
* Checks a block of assertions over an empty OptionalLong.
*/
void checkEmpty(OptionalLong empty) {
assertTrue(empty.equals(OptionalLong.empty()));
assertTrue(OptionalLong.empty().equals(empty));
assertFalse(empty.equals(OptionalLong.of(UNEXPECTED)));
assertFalse(OptionalLong.of(UNEXPECTED).equals(empty));
assertFalse(empty.equals("unexpected"));
assertFalse(empty.isPresent());
assertTrue(empty.isEmpty());
assertEquals(empty.hashCode(), 0);
assertEquals(empty.orElse(UNEXPECTED), UNEXPECTED);
assertEquals(empty.orElseGet(() -> UNEXPECTED), UNEXPECTED);
assertThrows(NoSuchElementException.class, () -> empty.getAsLong());
assertThrows(NoSuchElementException.class, () -> empty.orElseThrow());
assertThrows(ObscureException.class, () -> empty.orElseThrow(ObscureException::new));
var b = new AtomicBoolean();
empty.ifPresent(s -> b.set(true));
assertFalse(b.get());
var b1 = new AtomicBoolean(false);
var b2 = new AtomicBoolean(false);
empty.ifPresentOrElse(s -> b1.set(true), () -> b2.set(true));
assertFalse(b1.get());
assertTrue(b2.get());
assertEquals(empty.toString(), "OptionalLong.empty");
}
/**
* Checks a block of assertions over an OptionalLong that is expected to
* have a particular value present.
*/
void checkPresent(OptionalLong opt, long expected) {
assertFalse(opt.equals(OptionalLong.empty()));
assertFalse(OptionalLong.empty().equals(opt));
assertTrue(opt.equals(OptionalLong.of(expected)));
assertTrue(OptionalLong.of(expected).equals(opt));
assertFalse(opt.equals(OptionalLong.of(UNEXPECTED)));
assertFalse(OptionalLong.of(UNEXPECTED).equals(opt));
assertFalse(opt.equals("unexpected"));
assertTrue(opt.isPresent());
assertFalse(opt.isEmpty());
assertEquals(opt.hashCode(), Long.hashCode(expected));
assertEquals(opt.orElse(UNEXPECTED), expected);
assertEquals(opt.orElseGet(() -> UNEXPECTED), expected);
assertEquals(opt.getAsLong(), expected);
assertEquals(opt.orElseThrow(), expected);
assertEquals(opt.orElseThrow(ObscureException::new), expected);
var b = new AtomicBoolean(false);
opt.ifPresent(s -> b.set(true));
assertTrue(b.get());
var b1 = new AtomicBoolean(false);
var b2 = new AtomicBoolean(false);
opt.ifPresentOrElse(s -> b1.set(true), () -> b2.set(true));
assertTrue(b1.get());
assertFalse(b2.get());
assertEquals(opt.toString(), "OptionalLong[" + expected + "]");
}
@Test(groups = "unit")
public void testEmpty() {
checkEmpty(OptionalLong.empty());
}
@Test(groups = "unit")
public void testPresent() {
checkPresent(OptionalLong.of(LONGVAL), LONGVAL);
}
@Test(groups = "unit")
public void testStreamEmpty() {
assertEquals(OptionalLong.empty().stream().toArray(), new long[] { });
}
@Test(groups = "unit")
public void testStreamPresent() {
assertEquals(OptionalLong.of(LONGVAL).stream().toArray(), new long[] { LONGVAL });
}
}

View file

@ -0,0 +1,27 @@
/*
* Copyright (c) 2013, 2018, Oracle and/or its affiliates. All rights reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
*
* This code is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License version 2 only, as
* published by the Free Software Foundation.
*
* This code is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* version 2 for more details (a copy is included in the LICENSE file that
* accompanied this code).
*
* You should have received a copy of the GNU General Public License version
* 2 along with this work; if not, write to the Free Software Foundation,
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
*
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
* or visit www.oracle.com if you need additional information or have any
* questions.
*/
/**
* A unique exception used for checking exception types.
*/
public class ObscureException extends RuntimeException { }