You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
52 lines
1.3 KiB
52 lines
1.3 KiB
7 years ago
|
/*
|
||
|
|
* Copyright (c) 2018 - present Facebook, Inc.
|
||
|
|
* All rights reserved.
|
||
|
|
*
|
||
|
|
* This source code is licensed under the BSD style license found in the
|
||
|
|
* LICENSE file in the root directory of this source tree. An additional grant
|
||
|
|
* of patent rights can be found in the PATENTS file in the same directory.
|
||
|
|
*/
|
||
|
|
|
||
|
|
package codetoanalyze.java.quandary;
|
||
|
|
|
||
|
|
import java.io.IOException;
|
||
|
|
import java.lang.annotation.Retention;
|
||
|
|
import java.lang.annotation.RetentionPolicy;
|
||
|
|
import java.lang.Runtime;
|
||
|
|
|
||
|
|
class Services {
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
// classes annotated with @ThriftService are servers (sources), whereas interfaces
|
||
|
|
// annotated with @ThriftService are clients (sinks): see
|
||
|
|
// https://github.com/facebook/swift/blob/master/swift-service/README.md#clients-and-servers
|
||
|
|
@Retention(RetentionPolicy.CLASS)
|
||
|
|
@interface ThriftService {
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
@ThriftService
|
||
|
|
class Service1 {
|
||
|
|
|
||
|
|
public void serviceMethodBad(String s) throws IOException {
|
||
|
|
Runtime.getRuntime().exec(s); // RCE if s is tainted, we should warn
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
@ThriftService
|
||
|
|
interface ThriftInterface {
|
||
|
|
|
||
|
|
public void interfaceServiceMethodBad(String s) throws IOException;
|
||
|
|
}
|
||
|
|
|
||
|
|
// this is a service too
|
||
|
|
class Implementer implements ThriftInterface {
|
||
|
|
|
||
|
|
public void interfaceServiceMethodBad(String s) throws IOException {
|
||
|
|
Runtime.getRuntime().exec(s); // RCE if s is tainted, we should warn
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|