fix benchmark

Author: alipaydeshui

src/main/java/com/iast/astbenchmark/cases/AstPerfCase001.java

@@ -5,7 +5,6 @@
 import com.iast.astbenchmark.cases.bean.big.BigSizeBean;
 import com.iast.astbenchmark.common.CommonConsts;
 import com.iast.astbenchmark.common.longd.LongChainUtil;
-import com.iast.astbenchmark.common.utils.MyCommonTestUtil;
 import com.iast.astbenchmark.common.utils.MyCommonTestUtil2;
 import org.springframework.web.bind.annotation.PostMapping;
 import org.springframework.web.bind.annotation.RequestBody;

src/main/java/com/iast/astbenchmark/cases/AstTaintCase002.java

@@ -10,6 +10,7 @@
 import com.iast.astbenchmark.common.utils.TaintMethodUtil;
 import lombok.Data;
 import org.apache.commons.lang.StringEscapeUtils;
+import org.apache.commons.lang.StringUtils;
 import org.springframework.http.MediaType;
 import org.springframework.web.bind.annotation.*;
 import org.springframework.web.multipart.MultipartFile;
@@ -43,8 +44,8 @@ public class AstTaintCase002 {
      * @param cmd
      * @return
      */
-    @PostMapping("case0022/{cmd}")
-    public Map<String, Object> aTaintCase0022(@PathVariable String cmd) {
+    @PostMapping("case0022")
+    public Map<String, Object> aTaintCase0022(@RequestParam String cmd) {
         Map<String, Object> modelMap = new HashMap<>();
         try {
             Runtime.getRuntime().exec(StrUtil.cleanBlank(cmd));
@@ -109,8 +110,8 @@ public Map<String, Object> aTaintCase00931(@RequestBody String cmd) {
      * @param cmd
      * @return
      */
-    @PostMapping("case0024/{cmd}")
-    public Map<String, Object> aTaintCase0024(@PathVariable String cmd)
+    @PostMapping("case0024")
+    public Map<String, Object> aTaintCase0024(@RequestParam String cmd)
             throws NoSuchMethodException, InvocationTargetException, IllegalAccessException {
         Map<String, Object> modelMap = new HashMap<>();
         if (cmd == null) {

src/main/java/com/iast/astbenchmark/cases/AstTaintCase004.java

@@ -981,7 +981,7 @@ public Map<String, Object> aTaintCase00952(@RequestParam String cmd) {
            String aa = hardcode+cmd;
            char[] chars = aa.toCharArray();
            char[] data = Arrays.copyOfRange(chars,hardcode.length(),chars.length);;
-            Runtime.getRuntime().exec(new String(chars));
+            Runtime.getRuntime().exec(new String(data));
             modelMap.put("status", CommonConsts.SUCCESS_STR);
         } catch (IOException e)  {
             modelMap.put("status", CommonConsts.ERROR_STR);
@@ -1007,7 +1007,7 @@ public Map<String, Object> aTaintCase00952_3(@RequestParam String cmd) {
             String aa = hardcode+cmd;
             char[] chars = aa.toCharArray();
             char[] data = Arrays.copyOfRange(chars,0,hardcode.length());;
-            Runtime.getRuntime().exec(new String(chars));
+            Runtime.getRuntime().exec(new String(data));
             modelMap.put("status", CommonConsts.SUCCESS_STR);
         } catch (IOException e)  {
             modelMap.put("status", CommonConsts.ERROR_STR);
@@ -1056,7 +1056,7 @@ public Map<String, Object> aTaintCase00954(@RequestParam String cmd) {
             String hardcode = "a,b";
             String cmdfull = hardcode + cmd;
             String data1=cmdfull.substring(0,hardcode.length());
-            String dara2=String.join(cmd,data1);
+            String dara2=String.join(cmd,data1,hardcode);
             Runtime.getRuntime().exec(dara2);
             modelMap.put("status", CommonConsts.SUCCESS_STR);
         } catch (IOException e)  {

src/main/java/com/iast/astbenchmark/cli/test/CopyTestCaseForRun.java

@@ -264,7 +264,7 @@ void aTaintCase00931() {
     }
 
     void aTaintCase0024() {
-        HttpResponse response = doPost(url_root + "ataint/case0024/as");
+        HttpResponse response = doPost(url_root + "ataint/case0024?cmd=ls");
         System.out.println(response.body());
     }
 

src/test/java/com/iast/astbenchmark/AstbenchmarkApplicationTests.java

@@ -393,7 +393,7 @@ void aTaintCase00925_2() {
     }
     @Test
     void aTaintCase0022() {
-        HttpResponse response = doPost(url_root + "ataint/case0022/l%20s%20");
+        HttpResponse response = doPost(url_root + "ataint/case0022?cmd=l%20s%20");
         System.out.println(response.body());
     }
 
@@ -410,7 +410,7 @@ void aTaintCase00931() {
 
     @Test
     void aTaintCase0024() {
-        HttpResponse response = doPost(url_root + "ataint/case0024/as");
+        HttpResponse response = doPost(url_root + "ataint/case0024?cmd=ls");
         System.out.println(response.body());
     }