性能靶场调整

Author: alipaydeshui

src/main/java/com/iast/astbenchmark/cases/AstPerfCase001.java

@@ -4,14 +4,15 @@
 import com.iast.astbenchmark.cases.bean.big.BigParamBean;
 import com.iast.astbenchmark.cases.bean.big.BigSizeBean;
 import com.iast.astbenchmark.common.CommonConsts;
+import com.iast.astbenchmark.common.longd.LongChainUtil;
 import com.iast.astbenchmark.common.utils.MyCommonTestUtil;
+import com.iast.astbenchmark.common.utils.MyCommonTestUtil2;
 import org.springframework.web.bind.annotation.PostMapping;
 import org.springframework.web.bind.annotation.RequestBody;
 import org.springframework.web.bind.annotation.RequestParam;
 import org.springframework.web.bind.annotation.RestController;
 
 import java.io.IOException;
-import java.lang.reflect.Method;
 import java.util.HashMap;
 import java.util.Map;
 
@@ -29,7 +30,8 @@ public class AstPerfCase001 {
     @PostMapping("case99001")
     public Map<String,String> aTaintCase99001(@RequestParam String cmd) {
            Map res =  Maps.newHashMap();
-           res.put(cmd,cmd);
+           new MyCommonTestUtil2().traceDeepth(cmd,10);
+           res.put("status", CommonConsts.SUCCESS_STR);
            return res;
     }
 
@@ -44,8 +46,7 @@ public Map<String,String> aTaintCase99002(@RequestParam String cmd) {
             return modelMap;
         }
         try {
-            /** 递归10次*/
-            cmd = MyCommonTestUtil.traceDeepth(cmd, 0, 10);
+            new MyCommonTestUtil2().traceDeepth(cmd,10);
             Runtime.getRuntime().exec(cmd);
             modelMap.put("status", CommonConsts.SUCCESS_STR);
         } catch (IOException e) {
@@ -55,7 +56,7 @@ public Map<String,String> aTaintCase99002(@RequestParam String cmd) {
     }
 
     /**
-     * 超长调用链路（污点链路长度200）有漏洞场景
+     * 超长调用链路（污点调用链路长度50）有漏洞场景 递归
      */
     @PostMapping("case99003")
     public Map<String,String> aTaintCase99003(@RequestParam String cmd) {
@@ -65,8 +66,27 @@ public Map<String,String> aTaintCase99003(@RequestParam String cmd) {
             return modelMap;
         }
         try {
-            /** 递归1000次*/
-            cmd = MyCommonTestUtil.traceDeepth(cmd, 0, 200);
+            //new MyCommonTestUtil2().traceDeepth(cmd,0,50);
+            new LongChainUtil().longChain150(cmd,3);
+            Runtime.getRuntime().exec(cmd);
+            modelMap.put("status", CommonConsts.SUCCESS_STR);
+        } catch (IOException e) {
+            modelMap.put("status", CommonConsts.ERROR_STR);
+        }
+        return modelMap;
+    }
+    /**
+     * 超长调用链路（污点跟踪链路长度200）有漏洞场景 for
+     */
+    @PostMapping("case99006")
+    public Map<String,String> aTaintCase99006(@RequestParam String cmd) {
+        Map<String,String> modelMap = new HashMap<>();
+        if (cmd == null) {
+            modelMap.put("status", CommonConsts.ERROR_STR);
+            return modelMap;
+        }
+        try {
+            new MyCommonTestUtil2().traceDeepth(cmd,200);
             Runtime.getRuntime().exec(cmd);
             modelMap.put("status", CommonConsts.SUCCESS_STR);
         } catch (IOException e) {
@@ -86,13 +106,13 @@ public Map<String,String> aTaintCase99004(@RequestBody BigParamBean bigParamBean
         Map<String,String> modelMap = new HashMap<>();
         try {
             String exec = bigParamBean.getCmd();
+            new MyCommonTestUtil2().traceDeepth(exec,10);
             Runtime.getRuntime().exec(exec);
             modelMap.put("status", CommonConsts.SUCCESS_STR);
         } catch (IOException e) {
             modelMap.put("status", CommonConsts.ERROR_STR);
         }
         return modelMap;
-
     }
 
     /**
@@ -104,27 +124,20 @@ public Map<String,String> aTaintCase99004(@RequestBody BigParamBean bigParamBean
     public Map<String,String> aTaintCase99005(@RequestBody BigSizeBean bigSizeBean) {
         Map<String,String> modelMap = new HashMap<>();
         try {
-            String exec =bigSizeBean.toString();
+            BigSizeBean temp = new BigSizeBean();
+            for (int i = 0; i < 10;i++) {
+                temp=null;
+                if(bigSizeBean!=null){
+                    temp=bigSizeBean;
+                }
+            }
+            String exec =temp.toString();
             Runtime.getRuntime().exec(exec);
             modelMap.put("status", CommonConsts.SUCCESS_STR);
         } catch (Exception e) {
             modelMap.put("status", CommonConsts.ERROR_STR);
         }
         return modelMap;
     }
-    private void sink(int deep,BigSizeBean bigSizeBean,int maxDeep){
-        if(deep>=maxDeep){
-            return;
-        }
-        Method method = null;
-        try {
-            method = bigSizeBean.getClass().getMethod("getCmd"+deep);
-            String exec = (String) method.invoke(bigSizeBean);
-            Runtime.getRuntime().exec(exec);
-        } catch (Exception e){
-        }
-        deep++;
-        sink(deep,bigSizeBean,maxDeep);
-    }
 
 }