Skip to content

Commit e8f3251

Browse files
author
owen-jones-diffblue
authored
Merge pull request diffblue#464 from diffblue/owen-jones-diffblue/fix/ginco-stage-3
SEC-493: Fix bug in Ginco stage 3
2 parents 93b73db + 9bac26e commit e8f3251

File tree

4 files changed

+42
-29
lines changed

4 files changed

+42
-29
lines changed

benchmarks/GENUINE/Ginco.sh

+1-1
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ if [[ ! -d "Ginco" ]]; then
2323

2424
patch -p1 -f < ../Ginco_files/0001-Reverting-XSS-issue-and-adding-generation-of-jar.patch
2525

26-
mvn package -DskipTests
26+
mvn install -DskipTests
2727

2828
# Now we create an artificial entry-point project and build it
2929
cp -r ../Ginco_files/__MAIN__/ .
Original file line numberDiff line numberDiff line change
@@ -1,39 +1,33 @@
1-
From ed369d182a223b53c9ff37bec44b391833b24c7b Mon Sep 17 00:00:00 2001
2-
From: marek-trtik <[email protected]>
3-
Date: Fri, 8 Jun 2018 17:41:23 +0100
4-
Subject: [PATCH] Reverting XSS issue and adding generation of jar
5-
6-
---
7-
ginco-admin/pom.xml | 2 +-
8-
.../src/main/java/fr/mcc/ginco/rest/services/ImportRestService.java | 2 +-
9-
2 files changed, 2 insertions(+), 2 deletions(-)
10-
11-
diff --git a/ginco-admin/pom.xml b/ginco-admin/pom.xml
12-
index d4f91e5..5b7f18c 100644
13-
--- a/ginco-admin/pom.xml
14-
+++ b/ginco-admin/pom.xml
15-
@@ -151,7 +151,7 @@
1+
diff -ur Ginco/ginco-admin/pom.xml Ginco-patched/ginco-admin/pom.xml
2+
--- Ginco/ginco-admin/pom.xml 2018-06-22 14:15:46.526321053 +0100
3+
+++ Ginco-patched/ginco-admin/pom.xml 2018-06-22 14:17:11.262895281 +0100
4+
@@ -151,6 +151,8 @@
165
</resource>
176
</webResources>
187
<warSourceExcludes>*.js,app/**/*.js</warSourceExcludes>
19-
- </configuration>
20-
+<attachClasses>true</attachClasses><classesClassifier>classes</classesClassifier></configuration>
8+
+ <attachClasses>true</attachClasses>
9+
+ <classesClassifier>classes</classesClassifier>
10+
</configuration>
2111
</plugin>
2212
<plugin>
23-
<groupId>com.googlecode.jslint4java</groupId>
24-
diff --git a/ginco-admin/src/main/java/fr/mcc/ginco/rest/services/ImportRestService.java b/ginco-admin/src/main/java/fr/mcc/ginco/rest/services/ImportRestService.java
25-
index 140a5c8..d2ddaf1 100644
26-
--- a/ginco-admin/src/main/java/fr/mcc/ginco/rest/services/ImportRestService.java
27-
+++ b/ginco-admin/src/main/java/fr/mcc/ginco/rest/services/ImportRestService.java
28-
@@ -193,7 +193,7 @@ public class ImportRestService {
13+
diff -ur Ginco/ginco-admin/src/main/java/fr/mcc/ginco/rest/services/ImportRestService.java Ginco-patched/ginco-admin/src/main/java/fr/mcc/ginco/rest/services/ImportRestService.java
14+
--- Ginco/ginco-admin/src/main/java/fr/mcc/ginco/rest/services/ImportRestService.java 2018-06-22 14:23:12.009303325 +0100
15+
+++ Ginco-patched/ginco-admin/src/main/java/fr/mcc/ginco/rest/services/ImportRestService.java 2018-06-22 14:19:42.219909086 +0100
16+
@@ -106,7 +106,7 @@
17+
18+
@Inject
19+
@Named("skosImportService")
20+
- private ISKOSImportService skosImportService;
21+
+ public ISKOSImportService skosImportService;
22+
23+
@Inject
24+
@Named("gincoImportService")
25+
@@ -193,7 +193,7 @@
2926
response.setExternalConceptIds(externalConceptIds);
3027
ObjectMapper mapper = new ObjectMapper();
3128
String serialized = mapper.writeValueAsString(new ExtJsonFormLoadData(response));
32-
- return StringEscapeUtils.unescapeHtml4(serialized);
33-
+ return serialized;
29+
- return StringEscapeUtils.unescapeHtml4(serialized);
30+
+ return serialized;
3431
}
3532

3633
/**
37-
--
38-
2.7.4
39-

benchmarks/GENUINE/Ginco_files/__MAIN__/src/main/java/Main.java

+2
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,4 @@
1+
import fr.mcc.ginco.imports.ISKOSImportService;
12
import org.cprover.CProver;
23
import javax.servlet.http.HttpServletRequest;
34
import org.apache.cxf.jaxrs.ext.multipart.MultipartBody;
@@ -16,6 +17,7 @@ public static void main(String[] args) {
1617
makeTainted(arg0);
1718
HttpServletRequest arg1 = CProver.nondetWithNull((HttpServletRequest)null);
1819
ImportRestService obj = CProver.nondetWithNull((ImportRestService)null);
20+
obj.skosImportService = new SKOSImportService();
1921
try {
2022
sink(obj.uploadFile(arg0, arg1));
2123
}
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
import fr.mcc.ginco.imports.ISKOSImportService;
2+
import fr.mcc.ginco.beans.Alignment;
3+
import fr.mcc.ginco.beans.Thesaurus;
4+
5+
import java.io.File;
6+
import java.util.Map;
7+
import java.util.HashMap;
8+
import java.util.Set;
9+
import java.util.HashSet;
10+
11+
class SKOSImportService implements ISKOSImportService {
12+
public Map<Thesaurus, Set<Alignment>> importSKOSFile(String fileContent, String fileName, File tempDir) {
13+
Map<Thesaurus, Set<Alignment>> m = new HashMap<Thesaurus, Set<Alignment>>();
14+
m.put(new Thesaurus(), new HashSet<Alignment>());
15+
return m;
16+
}
17+
}

0 commit comments

Comments
 (0)