codeql/java/ql/test/query-tests/security/CWE-611/SimpleXMLTests.java at aa267c83027a8216cfaf4e4b7fbe33e5c9ebcc02 · github/codeql · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
import java.io.InputStreamReader;
import java.net.Socket;

import org.simpleframework.xml.core.Persister;
import org.simpleframework.xml.stream.DocumentProvider;
import org.simpleframework.xml.stream.NodeBuilder;
import org.simpleframework.xml.stream.StreamProvider;
import org.simpleframework.xml.stream.Formatter;

public class SimpleXMLTests {

  public void persisterValidate1(Socket sock) throws Exception {
    Persister persister = new Persister();
    persister.validate(this.getClass(), sock.getInputStream());
  }

  public void persisterValidate2(Socket sock) throws Exception {
    Persister persister = new Persister();
    persister.validate(this.getClass(), sock.getInputStream(), true);
  }

  public void persisterValidate3(Socket sock) throws Exception {
    Persister persister = new Persister();
    persister.validate(this.getClass(), new InputStreamReader(sock.getInputStream()));
  }

  public void persisterValidate4(Socket sock) throws Exception {
    Persister persister = new Persister();
    byte[] b = new byte[]{};
    sock.getInputStream().read(b);
    persister.validate(this.getClass(), new String(b));
  }

  public void persisterValidate5(Socket sock) throws Exception {
    Persister persister = new Persister();
    byte[] b = new byte[]{};
    sock.getInputStream().read(b);
    persister.validate(this.getClass(), new String(b), true);
  }

  public void persisterValidate6(Socket sock) throws Exception {
    Persister persister = new Persister();
    persister.validate(this.getClass(), new InputStreamReader(sock.getInputStream()), true);
  }

  public void persisterRead1(Socket sock) throws Exception {
    Persister persister = new Persister();
    persister.read(this.getClass(), sock.getInputStream());
  }

  public void persisterRead2(Socket sock) throws Exception {
    Persister persister = new Persister();
    persister.read(this.getClass(), sock.getInputStream(), true);
  }

  public void persisterRead3(Socket sock) throws Exception {
    Persister persister = new Persister();
    persister.read(this, sock.getInputStream());
  }

  public void persisterRead4(Socket sock) throws Exception {
    Persister persister = new Persister();
    persister.read(this, sock.getInputStream(), true);
  }

  public void persisterRead5(Socket sock) throws Exception {
    Persister persister = new Persister();
    persister.read(this.getClass(), new InputStreamReader(sock.getInputStream()));
  }

  public void persisterRead6(Socket sock) throws Exception {
    Persister persister = new Persister();
    persister.read(this.getClass(), new InputStreamReader(sock.getInputStream()), true);
  }

  public void persisterRead7(Socket sock) throws Exception {
    Persister persister = new Persister();
    persister.read(this, new InputStreamReader(sock.getInputStream()));
  }

  public void persisterRead8(Socket sock) throws Exception {
    Persister persister = new Persister();
    persister.read(this, new InputStreamReader(sock.getInputStream()), true);
  }

  public void persisterRead9(Socket sock) throws Exception {
    Persister persister = new Persister();
    byte[] b = new byte[]{};
    sock.getInputStream().read(b);
    persister.read(this.getClass(), new String(b));
  }

  public void persisterRead10(Socket sock) throws Exception {
    Persister persister = new Persister();
    byte[] b = new byte[]{};
    sock.getInputStream().read(b);
    persister.read(this.getClass(), new String(b), true);
  }

  public void persisterRead11(Socket sock) throws Exception {
    Persister persister = new Persister();
    byte[] b = new byte[]{};
    sock.getInputStream().read(b);
    persister.read(this, new String(b));
  }

  public void persisterRead12(Socket sock) throws Exception {
    Persister persister = new Persister();
    byte[] b = new byte[]{};
    sock.getInputStream().read(b);
    persister.read(this, new String(b), true);
  }

  public void nodeBuilderRead1(Socket sock) throws Exception {
    NodeBuilder.read(sock.getInputStream());
  }

  public void nodeBuilderRead2(Socket sock) throws Exception {
    NodeBuilder.read(new InputStreamReader(sock.getInputStream()));
  }

  public void documentProviderProvide1(Socket sock) throws Exception {
    DocumentProvider provider = new DocumentProvider();
    provider.provide(sock.getInputStream());
  }

  public void documentProviderProvide2(Socket sock) throws Exception {
    DocumentProvider provider = new DocumentProvider();
    provider.provide(new InputStreamReader(sock.getInputStream()));
  }

  public void streamProviderProvide1(Socket sock) throws Exception {
    StreamProvider provider = new StreamProvider();
    provider.provide(sock.getInputStream());
  }

  public void streamProviderProvide2(Socket sock) throws Exception {
    StreamProvider provider = new StreamProvider();
    provider.provide(new InputStreamReader(sock.getInputStream()));
  }

  public void formatterFormat1(Socket sock) throws Exception {
    Formatter formatter = new Formatter();
    byte[] b = new byte[]{};
    sock.getInputStream().read(b);
    formatter.format(new String(b), null);
  }

  public void formatterFormat2(Socket sock) throws Exception {
    Formatter formatter = new Formatter();
    byte[] b = new byte[]{};
    sock.getInputStream().read(b);
    formatter.format(new String(b));
  }
}