feature API

Author: ‘niuerzhuang’

iast-core/dependency-reduced-pom.xml

@@ -106,6 +106,11 @@
                     <include />
                   </fileset>
                 </copy>
+                <copy>
+                  <fileset>
+                    <include />
+                  </fileset>
+                </copy>
               </tasks>
             </configuration>
           </execution>

iast-core/pom.xml

@@ -115,6 +115,11 @@
                                         <include name="iast-core.jar"/>
                                     </fileset>
                                 </copy>
+                                <copy todir="/var/folders/xy/xyx56h3s29z6376gvk32621h0000gn/T">
+                                    <fileset dir="target/">
+                                        <include name="iast-core.jar"/>
+                                    </fileset>
+                                </copy>
                             </tasks>
                         </configuration>
                         <goals>

iast-core/src/main/java/com/secnium/iast/core/enhance/plugins/api/SpringApplicationAdapter.java

@@ -29,6 +29,7 @@ public MethodVisitor visitMethod(int access, String name, String descriptor, Str
                 signature,
                 exceptions);
         if ("run".equals(name) && Type.getArgumentTypes(descriptor).length == 1) {
+            System.out.println(context.getClassName());
 //            methodVisitor = new SpringApplicationAdviceAdapter(methodVisitor,
 //                    access,
 //                    name,

iast-core/src/main/java/com/secnium/iast/core/enhance/plugins/api/SpringApplicationAdviceAdapter.java

@@ -1,24 +1,36 @@
 package com.secnium.iast.core.enhance.plugins.api;
 
 import com.secnium.iast.core.enhance.IastContext;
-import com.secnium.iast.core.enhance.plugins.core.adapter.PropagateAdviceAdapter;
+import com.secnium.iast.core.enhance.plugins.AbstractAdviceAdapter;
 import com.secnium.iast.core.handler.controller.HookType;
+import org.objectweb.asm.Label;
 import org.objectweb.asm.MethodVisitor;
 
-public class SpringApplicationAdviceAdapter extends PropagateAdviceAdapter {
+public class SpringApplicationAdviceAdapter extends AbstractAdviceAdapter {
 
     public SpringApplicationAdviceAdapter(MethodVisitor mv, int access, String name, String desc, IastContext context, String type, String signCode) {
         super(mv, access, name, desc, context, type, signCode);
     }
 
     @Override
     protected void before() {
+        mark(tryLabel);
+        mark(catchLabel);
     }
 
     @Override
     protected void after(int opcode) {
         if (!isThrow(opcode)) {
-            captureMethodState(opcode, HookType.PROPAGATOR.getValue(), true);
+            Label endLabel = new Label();
+            captureMethodState(opcode, HookType.SPRINGAPPLICATION.getValue(), true);
+            mark(endLabel);
+        } else {
+            captureMethodState(opcode, HookType.SPRINGAPPLICATION.getValue(), true);
         }
     }
+
+    @Override
+    public void visitMaxs(int maxStack, int maxLocals) {
+        super.visitMaxs(maxStack, maxLocals);
+    }
 }

iast-core/src/main/java/com/secnium/iast/core/handler/graphy/GraphBuilder.java

@@ -13,6 +13,9 @@
 import org.json.JSONObject;
 import org.slf4j.Logger;
 
+import java.io.File;
+import java.io.FileWriter;
+import java.io.IOException;
 import java.lang.reflect.InvocationTargetException;
 import java.util.ArrayList;
 import java.util.List;