[Fb-contrib-commit] SF.net SVN: fb-contrib: [1033] trunk/fb-contrib

[<dbr...@us...>]

Revision: 1033
          http://fb-contrib.svn.sourceforge.net/fb-contrib/?rev=1033&view=rev
Author:   dbrosius
Date:     2008-06-02 01:14:37 -0700 (Mon, 02 Jun 2008)

Log Message:
-----------
add checking for array storing into an attribute

Modified Paths:
--------------
    trunk/fb-contrib/samples/SCSS_Sample.java
    trunk/fb-contrib/src/com/mebigfatguy/fbcontrib/detect/SuspiciousClusteredSessionSupport.java

Modified: trunk/fb-contrib/samples/SCSS_Sample.java
===================================================================
--- trunk/fb-contrib/samples/SCSS_Sample.java	2008-06-02 08:03:33 UTC (rev 1032)
+++ trunk/fb-contrib/samples/SCSS_Sample.java	2008-06-02 08:14:37 UTC (rev 1033)
@@ -10,4 +10,10 @@
 		Set<String> ss = (Set<String>)session.getAttribute("mykeys");
 		ss.add("Foo");
 	}
+	
+	public void arrayChange(HttpSession session)
+	{
+		double[] d = (double[])session.getAttribute("mynums");
+		d[3] = 0.0;
+	}
 }

Modified: trunk/fb-contrib/src/com/mebigfatguy/fbcontrib/detect/SuspiciousClusteredSessionSupport.java
===================================================================
--- trunk/fb-contrib/src/com/mebigfatguy/fbcontrib/detect/SuspiciousClusteredSessionSupport.java	2008-06-02 08:03:33 UTC (rev 1032)
+++ trunk/fb-contrib/src/com/mebigfatguy/fbcontrib/detect/SuspiciousClusteredSessionSupport.java	2008-06-02 08:14:37 UTC (rev 1033)
@@ -137,6 +137,14 @@
 						}
 					}
 				}
+			} else if ((seen >= IASTORE) && (seen <= SASTORE)) {
+				if (stack.getStackDepth() > 2) {
+					OpcodeStack.Item item = stack.getStackItem(2);
+					attributeName = (String)item.getUserValue();
+					if (attributeName != null) {
+						changedAttributes.put(attributeName, Integer14.valueOf(getPC()));
+					}
+				}
 			}
 		} finally {
 			stack.sawOpcode(this, seen);


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.