Method isGadgetChain

src/main/java/com/ReadChain.java:102–206

()

    }

    public Object isGadgetChain() {
        ObjectMapper mapper = new ObjectMapper();
        JsonNode node = null;
        try {
            node = mapper.readTree(getData("NewChains(1)"));
        } catch (IOException e) {
            e.printStackTrace();
        }

        //将Json串以树状结构读入内存
        assert node != null;
        JsonNode results = node.get("results");//得到results这个节点下的信息

        Object object_input = null;
        System.out.println("-----------------正在载入数据，当前数据集中包含" + results.size() + "条调用链-----------------");
        for (int i=0;i<results.size();i++) {
            System.out.println("------------------------当前验证第" + (i+1) + "条潜在调用链-----------------------");
            int SourceID = results.get(i).get("sourceID").intValue();
            int SinkID = results.get(i).get("sinkID").intValue();
            System.out.println( "Source：" + get_ClassName(results, i, SourceID) + "." + get_MethodName(results, i, SourceID));
            System.out.println( "Sink：" + get_ClassName(results, i, SinkID) + "." + get_MethodName(results, i, SinkID));

            try {
                object_input = object_init(get_ClassName(results, i, SourceID));
            } catch (Exception e) {
                e.printStackTrace();
            }
            ArrayList<Object> object_list = new ArrayList<>();
            object_list.add(object_input);

            JsonNode Edges = results.get(i).get("Edges");
            a:for (int j = 0; j < Edges.size(); j++ ) {
                String relation = Edges.get(j).get("edge").textValue();
                try {
                    if (relation.equals("ALIAS") &&
                            !(Modifier.isAbstract(Class.forName(get_ClassName(results, i, get_ReflectClassId(Edges, j)[1])).getModifiers()))) {
                        String ReflectClass = get_ClassName(results, i, get_ReflectClassId(Edges, j)[1]);
                        j = get_ReflectClassId(Edges, j)[0];
                        System.out.println("待实例化的类为：" + ReflectClass);
                        Class<?> clazz = null;
                        try {
                            clazz = Class.forName(ReflectClass);
                        } catch (ClassNotFoundException e) {
                            e.printStackTrace();
                        }
                        assert clazz != null;
                        Class<?>[] interfaces = clazz.getInterfaces();
                        String Polluted_Class = null;
                        int flag = 0;
                        int number_of_interfaces = 1;
                        b:for (Class<?> inter : interfaces) {
                            if (inter.getName().equals("java.io.Serializable")) {
                                flag = 1;
                                number_of_interfaces++;
                                continue;
                            }
                            Polluted_Class = inter.getName();
                            System.out.println("待赋值的属性类型为：" + Polluted_Class);