undefect. CWE-407 — 63 sites patched across 27 ecosystems
Authors: russell@unturf.com · brackishbert@gmail.com · foxhop.net · TimeHexOn.com Patches, unit tests, benchmarks, whitepaper, and outreach briefs. Public domain — no copyright claimed. Use freely.
This commit is contained in:
commit
0a580b313d
70422 changed files with 17213626 additions and 0 deletions
415
test/jdk/sun/net/www/protocol/https/ChunkedOutputStream.java
Normal file
415
test/jdk/sun/net/www/protocol/https/ChunkedOutputStream.java
Normal file
|
|
@ -0,0 +1,415 @@
|
|||
/*
|
||||
* Copyright (c) 2004, 2021, Oracle and/or its affiliates. All rights reserved.
|
||||
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
||||
*
|
||||
* This code is free software; you can redistribute it and/or modify it
|
||||
* under the terms of the GNU General Public License version 2 only, as
|
||||
* published by the Free Software Foundation.
|
||||
*
|
||||
* This code is distributed in the hope that it will be useful, but WITHOUT
|
||||
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
||||
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
||||
* version 2 for more details (a copy is included in the LICENSE file that
|
||||
* accompanied this code).
|
||||
*
|
||||
* You should have received a copy of the GNU General Public License version
|
||||
* 2 along with this work; if not, write to the Free Software Foundation,
|
||||
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
||||
*
|
||||
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
||||
* or visit www.oracle.com if you need additional information or have any
|
||||
* questions.
|
||||
*/
|
||||
|
||||
/**
|
||||
* @test
|
||||
* @bug 5026745
|
||||
* @library /test/lib
|
||||
* @run main/othervm ChunkedOutputStream
|
||||
* @run main/othervm -Djava.net.preferIPv6Addresses=true ChunkedOutputStream
|
||||
*
|
||||
* SunJSSE does not support dynamic system properties, no way to re-use
|
||||
* system properties in samevm/agentvm mode.
|
||||
* @summary Cannot flush output stream when writing to an HttpUrlConnection
|
||||
*/
|
||||
|
||||
import java.io.FileInputStream;
|
||||
import java.io.IOException;
|
||||
import java.io.InputStream;
|
||||
import java.io.OutputStream;
|
||||
import java.net.HttpRetryException;
|
||||
import java.net.HttpURLConnection;
|
||||
import java.net.InetAddress;
|
||||
import java.net.InetSocketAddress;
|
||||
import java.net.Proxy;
|
||||
import java.net.SocketException;
|
||||
import java.net.URL;
|
||||
import java.nio.charset.Charset;
|
||||
import java.security.KeyStore;
|
||||
import java.util.concurrent.Executors;
|
||||
import java.util.concurrent.atomic.AtomicInteger;
|
||||
|
||||
import javax.net.ssl.HostnameVerifier;
|
||||
import javax.net.ssl.HttpsURLConnection;
|
||||
import javax.net.ssl.KeyManagerFactory;
|
||||
import javax.net.ssl.SSLContext;
|
||||
import javax.net.ssl.SSLSession;
|
||||
import javax.net.ssl.TrustManagerFactory;
|
||||
|
||||
import com.sun.net.httpserver.HttpExchange;
|
||||
import com.sun.net.httpserver.HttpHandler;
|
||||
import com.sun.net.httpserver.HttpsConfigurator;
|
||||
import com.sun.net.httpserver.HttpsServer;
|
||||
|
||||
public class ChunkedOutputStream implements HttpHandler {
|
||||
/*
|
||||
* Where do we find the keystores for ssl?
|
||||
*/
|
||||
static String pathToStores = "../../../../../javax/net/ssl/etc";
|
||||
static String keyStoreFile = "keystore";
|
||||
static String trustStoreFile = "truststore";
|
||||
static String passwd = "passphrase";
|
||||
static int count = 0;
|
||||
static final AtomicInteger rogueCount = new AtomicInteger();
|
||||
|
||||
static final String str1 = "Helloworld1234567890abcdefghijklmnopqrstuvwxyz"+
|
||||
"1234567890abcdefkjsdlkjflkjsldkfjlsdkjflkj"+
|
||||
"1434567890abcdefkjsdlkjflkjsldkfjlsdkjflkj";
|
||||
|
||||
static final String str2 = "Helloworld1234567890abcdefghijklmnopqrstuvwxyz"+
|
||||
"1234567890";
|
||||
|
||||
private static String getAuthority() {
|
||||
InetAddress address = server.getAddress().getAddress();
|
||||
String hostaddr = address.getHostAddress();
|
||||
if (address.isAnyLocalAddress()) hostaddr = "localhost";
|
||||
if (hostaddr.indexOf(':') > -1) hostaddr = "[" + hostaddr + "]";
|
||||
return hostaddr + ":" + server.getAddress().getPort();
|
||||
}
|
||||
|
||||
public void handle(HttpExchange req) throws IOException {
|
||||
// this is needed (count++ doesn't work), 'cause we
|
||||
// are doing concurrent tests
|
||||
System.out.println("Request Received");
|
||||
String path = req.getRequestURI().getPath();
|
||||
if (path.equals("/d0")) {
|
||||
count = 0;
|
||||
} else if (path.equals("/d01")) {
|
||||
count = 1;
|
||||
} else if (path.equals("/d3")) {
|
||||
count = 2;
|
||||
} else if (path.equals("/d4") || path.equals("/d5")) {
|
||||
count = 3;
|
||||
} else if (path.equals("/d6")) {
|
||||
count = 3;
|
||||
} else if (path.equals("/d7")) {
|
||||
count = 4;
|
||||
} else if (path.equals("/d8")) {
|
||||
count = 5;
|
||||
}
|
||||
|
||||
switch (count) {
|
||||
case 0: /* test1 -- keeps conn alive */
|
||||
case 1: /* test2 -- closes conn */
|
||||
|
||||
String reqbody = "";
|
||||
try(InputStream inputStream = req.getRequestBody()) {
|
||||
reqbody = new String(inputStream.readAllBytes(), Charset.forName("ISO8859_1"));
|
||||
}
|
||||
if (!reqbody.equals(str1)) {
|
||||
req.sendResponseHeaders(500, -1);
|
||||
break;
|
||||
}
|
||||
String chunk = req.getRequestHeaders().getFirst("Transfer-encoding");
|
||||
if (!"chunked".equals(chunk)) {
|
||||
req.sendResponseHeaders(501, -1);
|
||||
break;
|
||||
}
|
||||
if (count == 1) {
|
||||
req.getResponseHeaders().set("Connection", "close");
|
||||
}
|
||||
req.sendResponseHeaders(200, 0);
|
||||
try (OutputStream os = req.getResponseBody()) {
|
||||
os.write(reqbody.getBytes(Charset.forName("ISO8859_1")));
|
||||
}
|
||||
break;
|
||||
case 2: /* test 3 */
|
||||
reqbody = new String(req.getRequestBody().readAllBytes(), Charset.forName("ISO8859_1"));
|
||||
if (!reqbody.equals(str2)) {
|
||||
req.sendResponseHeaders(500, -1);
|
||||
break;
|
||||
}
|
||||
int clen = Integer.parseInt (req.getRequestHeaders().getFirst("Content-length"));
|
||||
if (clen != str2.length()) {
|
||||
req.sendResponseHeaders(501, -1);
|
||||
break;
|
||||
}
|
||||
req.getResponseHeaders().set("Connection", "close");
|
||||
req.sendResponseHeaders(200, 0);
|
||||
try (OutputStream os = req.getResponseBody()) {
|
||||
os.write(reqbody.getBytes(Charset.forName("ISO8859_1")));
|
||||
}
|
||||
break;
|
||||
case 3: /* test 6 */
|
||||
if (path.equals("/d6")) {
|
||||
reqbody = new String(req.getRequestBody().readAllBytes(), Charset.forName("ISO8859_1"));
|
||||
}
|
||||
req.getResponseHeaders().set("Location", "https://foo.bar/");
|
||||
req.getResponseHeaders().set("Connection", "close");
|
||||
req.sendResponseHeaders(307, -1);
|
||||
break;
|
||||
case 4: /* test 7 */
|
||||
case 5: /* test 8 */
|
||||
reqbody = new String(req.getRequestBody().readAllBytes(), Charset.forName("ISO8859_1"));
|
||||
if (reqbody != null && !"".equals(reqbody)) {
|
||||
req.sendResponseHeaders(501, -1);
|
||||
break;
|
||||
}
|
||||
req.getResponseHeaders().set("Connection", "close");
|
||||
req.sendResponseHeaders(200, -1);
|
||||
break;
|
||||
default:
|
||||
req.sendResponseHeaders(404, -1);
|
||||
break;
|
||||
}
|
||||
req.close();
|
||||
}
|
||||
|
||||
static void readAndCompare(InputStream is, String cmp) throws IOException {
|
||||
int c;
|
||||
byte buf[] = new byte[1024];
|
||||
int off = 0;
|
||||
int len = 1024;
|
||||
while ((c=is.read(buf, off, len)) != -1) {
|
||||
off += c;
|
||||
len -= c;
|
||||
}
|
||||
String s1 = new String(buf, 0, off, "ISO8859_1");
|
||||
if (!cmp.equals(s1)) {
|
||||
throw new IOException("strings not same");
|
||||
}
|
||||
}
|
||||
|
||||
/* basic smoke test: verify that server drops plain connections */
|
||||
static void testPlainText(String authority) throws Exception {
|
||||
URL url = new URL("http://" + authority + "/Donauschiffsgesellschaftskapitaenskajuete");
|
||||
System.out.println("client opening connection to: " + url);
|
||||
HttpURLConnection urlc = (HttpURLConnection)url.openConnection(Proxy.NO_PROXY);
|
||||
int rogue = rogueCount.get();
|
||||
try {
|
||||
int code = urlc.getResponseCode();
|
||||
System.out.println("Unexpected response: " + code);
|
||||
throw new AssertionError("Unexpected response: " + code);
|
||||
} catch (SocketException x) {
|
||||
// we expect that the server will drop the connection and
|
||||
// close the accepted socket, so we should get a SocketException
|
||||
System.out.println("Got expected exception: " + x);
|
||||
}
|
||||
}
|
||||
|
||||
/* basic chunked test (runs twice) */
|
||||
|
||||
static void test1(String u) throws Exception {
|
||||
URL url = new URL(u);
|
||||
System.out.println("client opening connection to: " + u);
|
||||
HttpURLConnection urlc = (HttpURLConnection)url.openConnection(Proxy.NO_PROXY);
|
||||
urlc.setChunkedStreamingMode(20);
|
||||
urlc.setDoOutput(true);
|
||||
urlc.setRequestMethod("POST");
|
||||
OutputStream os = urlc.getOutputStream();
|
||||
os.write(str1.getBytes(Charset.forName("ISO8859_1")));
|
||||
os.close();
|
||||
InputStream is = urlc.getInputStream();
|
||||
readAndCompare(is, str1);
|
||||
is.close();
|
||||
}
|
||||
|
||||
/* basic fixed length test */
|
||||
|
||||
static void test3(String u) throws Exception {
|
||||
URL url = new URL(u);
|
||||
System.out.println("client opening connection to: " + u);
|
||||
HttpURLConnection urlc = (HttpURLConnection)url.openConnection(Proxy.NO_PROXY);
|
||||
urlc.setFixedLengthStreamingMode(str2.length());
|
||||
urlc.setDoOutput(true);
|
||||
urlc.setRequestMethod("POST");
|
||||
OutputStream os = urlc.getOutputStream();
|
||||
os.write (str2.getBytes(Charset.forName("ISO8859_1")));
|
||||
os.close();
|
||||
InputStream is = urlc.getInputStream();
|
||||
readAndCompare(is, str2);
|
||||
is.close();
|
||||
}
|
||||
|
||||
/* write too few bytes */
|
||||
|
||||
static void test4(String u) throws Exception {
|
||||
URL url = new URL(u);
|
||||
System.out.println("client opening connection to: " + u);
|
||||
HttpURLConnection urlc = (HttpURLConnection)url.openConnection(Proxy.NO_PROXY);
|
||||
urlc.setFixedLengthStreamingMode(str2.length()+1);
|
||||
urlc.setDoOutput(true);
|
||||
urlc.setRequestMethod("POST");
|
||||
OutputStream os = urlc.getOutputStream();
|
||||
os.write(str2.getBytes(Charset.forName("ISO8859_1")));
|
||||
try {
|
||||
os.close();
|
||||
throw new Exception("should have thrown IOException");
|
||||
} catch (IOException e) {}
|
||||
}
|
||||
|
||||
/* write too many bytes */
|
||||
|
||||
static void test5(String u) throws Exception {
|
||||
URL url = new URL(u);
|
||||
System.out.println("client opening connection to: " + u);
|
||||
HttpURLConnection urlc = (HttpURLConnection)url.openConnection(Proxy.NO_PROXY);
|
||||
urlc.setFixedLengthStreamingMode(str2.length()-1);
|
||||
urlc.setDoOutput(true);
|
||||
urlc.setRequestMethod("POST");
|
||||
OutputStream os = urlc.getOutputStream();
|
||||
try {
|
||||
os.write(str2.getBytes(Charset.forName("ISO8859_1")));
|
||||
throw new Exception("should have thrown IOException");
|
||||
} catch (IOException e) {}
|
||||
}
|
||||
|
||||
/* check for HttpRetryException on redirection */
|
||||
|
||||
static void test6(String u) throws Exception {
|
||||
URL url = new URL(u);
|
||||
System.out.println("client opening connection to: " + u);
|
||||
HttpURLConnection urlc = (HttpURLConnection)url.openConnection(Proxy.NO_PROXY);
|
||||
urlc.setChunkedStreamingMode(20);
|
||||
urlc.setDoOutput(true);
|
||||
urlc.setRequestMethod("POST");
|
||||
OutputStream os = urlc.getOutputStream();
|
||||
os.write(str1.getBytes(Charset.forName("ISO8859_1")));
|
||||
os.close();
|
||||
try {
|
||||
InputStream is = urlc.getInputStream();
|
||||
throw new Exception("should have gotten HttpRetryException");
|
||||
} catch (HttpRetryException e) {
|
||||
if (e.responseCode() != 307) {
|
||||
throw new Exception("Wrong response code " + e.responseCode());
|
||||
}
|
||||
if (!e.getLocation().equals("https://foo.bar/")) {
|
||||
throw new Exception("Wrong location " + e.getLocation());
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
/* next two tests send zero length posts */
|
||||
|
||||
static void test7(String u) throws Exception {
|
||||
URL url = new URL(u);
|
||||
System.out.println("client opening connection to: " + u);
|
||||
HttpURLConnection urlc = (HttpURLConnection)url.openConnection(Proxy.NO_PROXY);
|
||||
urlc.setChunkedStreamingMode(20);
|
||||
urlc.setDoOutput(true);
|
||||
urlc.setRequestMethod("POST");
|
||||
OutputStream os = urlc.getOutputStream();
|
||||
os.close();
|
||||
int ret = urlc.getResponseCode();
|
||||
if (ret != 200) {
|
||||
throw new Exception("Expected 200: got " + ret);
|
||||
}
|
||||
}
|
||||
|
||||
static void test8(String u) throws Exception {
|
||||
URL url = new URL(u);
|
||||
System.out.println("client opening connection to: " + u);
|
||||
HttpURLConnection urlc = (HttpURLConnection)url.openConnection(Proxy.NO_PROXY);
|
||||
urlc.setFixedLengthStreamingMode(0);
|
||||
urlc.setDoOutput(true);
|
||||
urlc.setRequestMethod("POST");
|
||||
OutputStream os = urlc.getOutputStream();
|
||||
os.close();
|
||||
int ret = urlc.getResponseCode();
|
||||
if (ret != 200) {
|
||||
throw new Exception("Expected 200: got " + ret);
|
||||
}
|
||||
}
|
||||
|
||||
static HttpsServer server;
|
||||
|
||||
public static void main(String[] args) throws Exception {
|
||||
ChunkedOutputStream chunkedOutputStream = new ChunkedOutputStream();
|
||||
// setup properties to do ssl
|
||||
String keyFilename =
|
||||
System.getProperty("test.src", "./") + "/" + pathToStores +
|
||||
"/" + keyStoreFile;
|
||||
String trustFilename =
|
||||
System.getProperty("test.src", "./") + "/" + pathToStores +
|
||||
"/" + trustStoreFile;
|
||||
|
||||
InetAddress loopback = InetAddress.getLoopbackAddress();
|
||||
|
||||
HostnameVerifier reservedHV =
|
||||
HttpsURLConnection.getDefaultHostnameVerifier();
|
||||
try {
|
||||
System.setProperty("javax.net.ssl.keyStore", keyFilename);
|
||||
System.setProperty("javax.net.ssl.keyStorePassword", passwd);
|
||||
System.setProperty("javax.net.ssl.trustStore", trustFilename);
|
||||
System.setProperty("javax.net.ssl.trustStorePassword", passwd);
|
||||
HttpsURLConnection.setDefaultHostnameVerifier(new NameVerifier());
|
||||
|
||||
try {
|
||||
// create and initialize a SSLContext
|
||||
KeyStore ks = KeyStore.getInstance("JKS");
|
||||
KeyStore ts = KeyStore.getInstance("JKS");
|
||||
char[] passphrase = "passphrase".toCharArray();
|
||||
|
||||
ks.load(new FileInputStream(System.getProperty("javax.net.ssl.keyStore")), passphrase);
|
||||
ts.load(new FileInputStream(System.getProperty("javax.net.ssl.trustStore")), passphrase);
|
||||
|
||||
KeyManagerFactory kmf = KeyManagerFactory.getInstance("SunX509");
|
||||
kmf.init(ks, passphrase);
|
||||
|
||||
TrustManagerFactory tmf = TrustManagerFactory.getInstance("SunX509");
|
||||
tmf.init(ts);
|
||||
|
||||
SSLContext sslCtx = SSLContext.getInstance("TLS");
|
||||
|
||||
sslCtx.init(kmf.getKeyManagers(), tmf.getTrustManagers(), null);
|
||||
|
||||
server = HttpsServer.create(new InetSocketAddress(loopback, 0), 10);
|
||||
server.setHttpsConfigurator(new HttpsConfigurator(sslCtx));
|
||||
server.createContext("/", chunkedOutputStream);
|
||||
server.setExecutor(Executors.newSingleThreadExecutor());
|
||||
server.start();
|
||||
|
||||
System.out.println("Server started: listening on: " + getAuthority());
|
||||
testPlainText(getAuthority());
|
||||
// the test server doesn't support keep-alive yet
|
||||
// test1("http://" + server.getAuthority() + "/d0");
|
||||
test1("https://" + getAuthority() + "/d01");
|
||||
test3("https://" + getAuthority() + "/d3");
|
||||
test4("https://" + getAuthority() + "/d4");
|
||||
test5("https://" + getAuthority() + "/d5");
|
||||
test6("https://" + getAuthority() + "/d6");
|
||||
test7("https://" + getAuthority() + "/d7");
|
||||
test8("https://" + getAuthority() + "/d8");
|
||||
} catch (Exception e) {
|
||||
if (server != null) {
|
||||
server.stop(1);
|
||||
}
|
||||
throw e;
|
||||
}
|
||||
server.stop(1);
|
||||
} finally {
|
||||
HttpsURLConnection.setDefaultHostnameVerifier(reservedHV);
|
||||
}
|
||||
}
|
||||
|
||||
static class NameVerifier implements HostnameVerifier {
|
||||
public boolean verify(String hostname, SSLSession session) {
|
||||
return true;
|
||||
}
|
||||
}
|
||||
|
||||
public static void except(String s) {
|
||||
server.stop(1);
|
||||
throw new RuntimeException(s);
|
||||
}
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue