Skip to content
体验新版
项目
组织
正在加载...
登录
切换导航
打开侧边栏
LinuxSuRen
jenkins
提交
15032553
J
jenkins
项目概览
LinuxSuRen
/
jenkins
与 Fork 源项目一致
从无法访问的项目Fork
通知
2
Star
0
Fork
0
代码
文件
提交
分支
Tags
贡献者
分支图
Diff
Issue
0
列表
看板
标记
里程碑
合并请求
0
Wiki
0
Wiki
分析
仓库
DevOps
项目成员
Pages
J
jenkins
项目概览
项目概览
详情
发布
仓库
仓库
文件
提交
分支
标签
贡献者
分支图
比较
Issue
0
Issue
0
列表
看板
标记
里程碑
合并请求
0
合并请求
0
Pages
分析
分析
仓库分析
DevOps
Wiki
0
Wiki
成员
成员
收起侧边栏
关闭侧边栏
动态
分支图
创建新Issue
提交
Issue看板
体验新版 GitCode,发现更多精彩内容 >>
提交
15032553
编写于
11月 09, 2015
作者:
J
Jesse Glick
浏览文件
操作
浏览文件
下载
电子邮件补丁
差异文件
Now operating at chunked transport level.
上级
e01d3c77
变更
1
隐藏空白更改
内联
并排
Showing
1 changed file
with
106 addition
and
38 deletion
+106
-38
test/src/test/java/jenkins/security/Security218BlackBoxTest.java
...c/test/java/jenkins/security/Security218BlackBoxTest.java
+106
-38
未找到文件。
test/src/test/java/jenkins/security/Security218BlackBoxTest.java
浏览文件 @
15032553
...
...
@@ -26,16 +26,17 @@ package jenkins.security;
import
hudson.cli.CLI
;
import
hudson.cli.CliPort
;
import
java.io.ByteArrayInputStream
;
import
java.io.ByteArrayOutputStream
;
import
java.io.IOException
;
import
java.io.InputStream
;
import
java.io.ObjectInputStream
;
import
java.io.OutputStream
;
import
java.net.HttpURLConnection
;
import
java.net.InetSocketAddress
;
import
java.net.ServerSocket
;
import
java.net.Socket
;
import
java.net.URL
;
import
java.util.concurrent.atomic.AtomicLong
;
import
jenkins.util.Timer
;
import
org.junit.Test
;
import
static
org
.
junit
.
Assert
.*;
...
...
@@ -64,18 +65,61 @@ public class Security218BlackBoxTest {
final
OutputStream
realOS
=
real
.
getOutputStream
();
final
InputStream
proxyIS
=
proxy
.
getInputStream
();
final
OutputStream
proxyOS
=
proxy
.
getOutputStream
();
final
AtomicLong
timestamp
=
new
AtomicLong
(
System
.
currentTimeMillis
());
final
ByteArrayOutputStream
incoming
=
new
ByteArrayOutputStream
();
final
ByteArrayOutputStream
outgoing
=
new
ByteArrayOutputStream
();
Timer
.
get
().
submit
(
new
Runnable
()
{
@Override
public
void
run
()
{
try
{
// Read up to \x00\x00\x00\x00, end of header.
int
nullCount
=
0
;
ByteArrayOutputStream
buf
=
new
ByteArrayOutputStream
();
int
c
;
while
((
c
=
realIS
.
read
())
!=
-
1
)
{
synchronized
(
timestamp
)
{
incoming
.
write
(
c
);
timestamp
.
set
(
System
.
currentTimeMillis
());
proxyOS
.
write
(
c
);
buf
.
write
(
c
);
if
(
c
==
0
)
{
if
(++
nullCount
==
4
)
{
break
;
}
}
else
{
nullCount
=
0
;
}
}
System
.
err
.
print
(
"← "
);
display
(
buf
.
toByteArray
());
System
.
err
.
println
();
// Now assume we are in chunked transport.
PACKETS:
while
(
true
)
{
buf
.
reset
();
//System.err.println("reading one packet");
while
(
true
)
{
// one packet, ≥1 chunk
//System.err.println("reading one chunk");
int
hi
=
realIS
.
read
();
if
(
hi
==
-
1
)
{
break
PACKETS
;
}
proxyOS
.
write
(
hi
);
int
lo
=
realIS
.
read
();
proxyOS
.
write
(
lo
);
boolean
hasMore
=
(
hi
&
0x80
)
>
0
;
if
(
hasMore
)
{
hi
&=
0x7F
;
}
int
len
=
hi
*
0x100
+
lo
;
//System.err.printf("waiting for %X bytes%n", len);
for
(
int
i
=
0
;
i
<
len
;
i
++)
{
c
=
realIS
.
read
();
proxyOS
.
write
(
c
);
buf
.
write
(
c
);
}
if
(
hasMore
)
{
continue
;
}
System
.
err
.
print
(
"← "
);
byte
[]
data
=
buf
.
toByteArray
();
//display(data);
showSer
(
data
);
System
.
err
.
println
();
break
;
}
}
}
catch
(
IOException
x
)
{
...
...
@@ -87,11 +131,52 @@ public class Security218BlackBoxTest {
@Override
public
void
run
()
{
try
{
int
nullCount
=
0
;
ByteArrayOutputStream
buf
=
new
ByteArrayOutputStream
();
int
c
;
while
((
c
=
proxyIS
.
read
())
!=
-
1
)
{
synchronized
(
timestamp
)
{
outgoing
.
write
(
c
);
timestamp
.
set
(
System
.
currentTimeMillis
());
realOS
.
write
(
c
);
buf
.
write
(
c
);
if
(
c
==
0
)
{
if
(++
nullCount
==
4
)
{
break
;
}
}
else
{
nullCount
=
0
;
}
}
System
.
err
.
print
(
"→ "
);
display
(
buf
.
toByteArray
());
System
.
err
.
println
();
PACKETS:
while
(
true
)
{
buf
.
reset
();
while
(
true
)
{
int
hi
=
proxyIS
.
read
();
if
(
hi
==
-
1
)
{
break
PACKETS
;
}
realOS
.
write
(
hi
);
int
lo
=
proxyIS
.
read
();
realOS
.
write
(
lo
);
boolean
hasMore
=
(
hi
&
0x80
)
>
0
;
if
(
hasMore
)
{
hi
&=
0x7F
;
}
int
len
=
hi
*
0x100
+
lo
;
for
(
int
i
=
0
;
i
<
len
;
i
++)
{
c
=
proxyIS
.
read
();
realOS
.
write
(
c
);
buf
.
write
(
c
);
}
if
(
hasMore
)
{
continue
;
}
System
.
err
.
print
(
"→ "
);
byte
[]
data
=
buf
.
toByteArray
();
//display(data);
showSer
(
data
);
System
.
err
.
println
();
break
;
}
}
}
catch
(
IOException
x
)
{
...
...
@@ -99,35 +184,8 @@ public class Security218BlackBoxTest {
}
}
});
while
(
true
)
{
while
(
System
.
currentTimeMillis
()
-
timestamp
.
get
()
<
/* wait for a complete packet */
500
)
{
Thread
.
sleep
(
10
);
}
synchronized
(
timestamp
)
{
if
(
incoming
.
size
()
>
0
)
{
byte
[]
data
=
incoming
.
toByteArray
();
System
.
err
.
print
(
"← "
);
display
(
data
);
System
.
err
.
println
();
proxyOS
.
write
(
data
);
incoming
.
reset
();
timestamp
.
set
(
System
.
currentTimeMillis
());
}
else
if
(
outgoing
.
size
()
>
0
)
{
byte
[]
data
=
outgoing
.
toByteArray
();
System
.
err
.
print
(
"→ "
);
display
(
data
);
System
.
err
.
println
();
// TODO try to inject payloads
realOS
.
write
(
data
);
outgoing
.
reset
();
timestamp
.
set
(
System
.
currentTimeMillis
());
}
}
}
}
catch
(
IOException
x
)
{
x
.
printStackTrace
();
}
catch
(
InterruptedException
x
)
{
// OK
}
}
});
...
...
@@ -142,7 +200,7 @@ public class Security218BlackBoxTest {
fail
(
"TODO assert that payloads did not work"
);
}
private
static
void
display
(
byte
[]
data
)
{
private
static
synchronized
void
display
(
byte
[]
data
)
{
for
(
byte
c
:
data
)
{
if
(
c
>=
' '
&&
c
<=
'~'
)
{
System
.
err
.
write
(
c
);
...
...
@@ -152,4 +210,14 @@ public class Security218BlackBoxTest {
}
}
private
static
synchronized
void
showSer
(
byte
[]
data
)
{
try
{
ObjectInputStream
ois
=
new
ObjectInputStream
(
new
ByteArrayInputStream
(
data
));
Object
o
=
ois
.
readObject
();
System
.
err
.
print
(
o
);
}
catch
(
Exception
x
)
{
System
.
err
.
printf
(
"<%s>"
,
x
);
}
}
}
编辑
预览
Markdown
is supported
0%
请重试
或
添加新附件
.
添加附件
取消
You are about to add
0
people
to the discussion. Proceed with caution.
先完成此消息的编辑!
取消
想要评论请
注册
或
登录