engineering/java-topology
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

undefect. CWE-407 — 63 sites patched across 27 ecosystems

Browse source 
Authors: russell@unturf.com · brackishbert@gmail.com · foxhop.net · TimeHexOn.com

Patches, unit tests, benchmarks, whitepaper, and outreach briefs.
Public domain — no copyright claimed. Use freely.
This commit is contained in:
russell@unturf.com 2026-03-26 17:11:57 -04:00
commit 0a580b313d
70422 changed files with 17213626 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

234
test/jdk/sun/security/ssl/SSLSocketImpl/NonAutoClose.java Normal file
View file

@ -0,0 +1,234 @@
/*
* Copyright (c) 2001, 2025, Oracle and/or its affiliates. All rights reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
*
* This code is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License version 2 only, as
* published by the Free Software Foundation.
*
* This code is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* version 2 for more details (a copy is included in the LICENSE file that
* accompanied this code).
*
* You should have received a copy of the GNU General Public License version
* 2 along with this work; if not, write to the Free Software Foundation,
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
*
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
* or visit www.oracle.com if you need additional information or have any
* questions.
*/
//
// SunJSSE does not support dynamic system properties, no way to re-use
// system properties in samevm/agentvm mode.
//
/*
* @test
* @bug 4404399
* @comment this test does not work in TLSv1.3 as the spec changes the
* behaviors of close_notify.
* @summary When a layered SSL socket is closed, it should wait for close_notify
* @library /test/lib /javax/net/ssl/templates
* @run main/othervm NonAutoClose TLSv1
* @run main/othervm NonAutoClose TLSv1.1
* @run main/othervm NonAutoClose TLSv1.2
* @author Brad Wetmore
*/
import java.io.*;
import java.net.InetAddress;
import java.net.ServerSocket;
import java.net.Socket;
import java.util.concurrent.CountDownLatch;
import javax.net.ssl.*;
import jdk.test.lib.security.SecurityUtils;
import static jdk.test.lib.Asserts.assertEquals;
public class NonAutoClose extends SSLContextTemplate {
/*
* Is the server ready to serve?
*/
private static final CountDownLatch SERVER_READY = new CountDownLatch(1);
/*
* Turn on SSL debugging?
*/
private final static boolean DEBUG = Boolean.getBoolean("test.debug");
private final static int NUM_ITERATIONS = 10;
private final static int PLAIN_SERVER_VAL = 1;
private final static int PLAIN_CLIENT_VAL = 2;
private final static int TLS_SERVER_VAL = 3;
private final static int TLS_CLIENT_VAL = 4;
/*
* Define the server side of the test.
*/
private void doServerSide() throws Exception {
System.out.println("Starting server");
SSLSocketFactory sslsf = createServerSSLContext().getSocketFactory();
try (ServerSocket serverSocket = new ServerSocket(SERVER_PORT)) {
SERVER_PORT = serverSocket.getLocalPort();
/*
* Signal Client, we're ready for his connect.
*/
System.out.println("Signal server ready");
SERVER_READY.countDown();
try (Socket plainSocket = serverSocket.accept();
InputStream is = plainSocket.getInputStream();
OutputStream os = plainSocket.getOutputStream()) {
assertEquals(PLAIN_CLIENT_VAL, is.read());
os.write(PLAIN_SERVER_VAL);
os.flush();
for (int i = 1; i <= NUM_ITERATIONS; i++) {
if (DEBUG) {
System.out.println("=================================");
System.out.println("Server Iteration #" + i);
}
try (SSLSocket ssls = (SSLSocket) sslsf.createSocket(plainSocket,
plainSocket.getInetAddress().getHostName(),
plainSocket.getPort(), false)) {
ssls.setEnabledProtocols(new String[]{protocol});
ssls.setUseClientMode(false);
try (InputStream sslis = ssls.getInputStream();
OutputStream sslos = ssls.getOutputStream()) {
assertEquals(TLS_CLIENT_VAL, sslis.read());
sslos.write(TLS_SERVER_VAL);
sslos.flush();
}
}
}
assertEquals(PLAIN_CLIENT_VAL, is.read());
os.write(PLAIN_SERVER_VAL);
os.flush();
}
}
}
/*
* Define the client side of the test.
*/
private void doClientSide() throws Exception {
/*
* Wait for server to get started.
*/
System.out.println("Waiting for server ready");
SERVER_READY.await();
SSLSocketFactory sslsf = createClientSSLContext().getSocketFactory();
try (Socket plainSocket = new Socket(InetAddress.getLocalHost(), SERVER_PORT);
InputStream is = plainSocket.getInputStream();
OutputStream os = plainSocket.getOutputStream()) {
os.write(PLAIN_CLIENT_VAL);
os.flush();
assertEquals(PLAIN_SERVER_VAL, is.read());
for (int i = 1; i <= NUM_ITERATIONS; i++) {
if (DEBUG) {
System.out.println("===================================");
System.out.println("Client Iteration #" + i);
}
try (SSLSocket ssls = (SSLSocket) sslsf.createSocket(plainSocket,
plainSocket.getInetAddress().getHostName(),
plainSocket.getPort(), false);
InputStream sslis = ssls.getInputStream();
OutputStream sslos = ssls.getOutputStream()) {
ssls.setUseClientMode(true);
sslos.write(TLS_CLIENT_VAL);
sslos.flush();
assertEquals(TLS_SERVER_VAL, sslis.read());
}
}
os.write(PLAIN_CLIENT_VAL);
os.flush();
assertEquals(PLAIN_SERVER_VAL, is.read());
}
}
/*
* =============================================================
* The remainder is just support stuff
*/
private volatile int SERVER_PORT = 0;
private volatile Exception clientException = null;
public static void main(String[] args) throws Exception {
String protocol = args[0];
if ("TLSv1".equals(protocol) || "TLSv1.1".equals(protocol)) {
SecurityUtils.removeFromDisabledTlsAlgs(protocol);
}
if (DEBUG)
System.setProperty("javax.net.debug", "all");
/*
* Start the tests.
*/
new NonAutoClose(protocol);
}
private Thread clientThread = null;
private final String protocol;
/*
* Primary constructor, used to drive remainder of the test.
*
* Fork off the other side, then do your work.
*/
NonAutoClose(String protocol) throws Exception {
this.protocol = protocol;
startClient();
doServerSide();
/*
* Wait for other side to close down.
*/
clientThread.join();
if (clientException != null) {
System.err.print("Client Exception:");
throw clientException;
}
}
private void startClient() {
clientThread = new Thread(() -> {
try {
doClientSide();
} catch (Exception e) {
/*
* Our client thread just died.
*/
System.err.println("Client died...");
clientException = e;
}
});
clientThread.start();
}
}