com.h3xstream.findsecbugs.common

Class ByteCode

java.lang.Object

com.h3xstream.findsecbugs.common.ByteCode

public class ByteCode
extends Object

Constructor Summary

Constructors

Constructor and Description
ByteCode()

Method Summary

Modifier and Type	Method and Description
static Integer	getConstantInt(org.apache.bcel.generic.InstructionHandle h)
static <T> T	getConstantLDC(org.apache.bcel.generic.InstructionHandle h, org.apache.bcel.generic.ConstantPoolGen cpg, Class<T> clazz) Get the constant value of the given instruction.
static <T> T	getPrevInstruction(org.apache.bcel.generic.InstructionHandle startHandle, Class<T> clazz) Get the previous instruction matching the given type of instruction (second parameter)
static Number	getPushNumber(org.apache.bcel.generic.InstructionHandle h) Extract the number from a push operation (BIPUSH/SIPUSH).
static void	printOpCode(org.apache.bcel.generic.Instruction ins, org.apache.bcel.generic.ConstantPoolGen cpg) Print the the detail of the given instruction (class, method, etc.)
static void	printOpCode(org.apache.bcel.generic.InstructionHandle insHandle, org.apache.bcel.generic.ConstantPoolGen cpg)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ByteCode

public ByteCode()

Method Detail

printOpCode

public static void printOpCode(org.apache.bcel.generic.InstructionHandle insHandle,
                               org.apache.bcel.generic.ConstantPoolGen cpg)

printOpCode

public static void printOpCode(org.apache.bcel.generic.Instruction ins,
                               org.apache.bcel.generic.ConstantPoolGen cpg)

Print the the detail of the given instruction (class, method, etc.)

Parameters:

ins - Instruction

cpg - Constant Pool

getConstantLDC

public static <T> T getConstantLDC(org.apache.bcel.generic.InstructionHandle h,
                                   org.apache.bcel.generic.ConstantPoolGen cpg,
                                   Class<T> clazz)

Get the constant value of the given instruction. (The instruction must refer to the Constant Pool otherwise null is return) <T> is the Type of the constant value return This utility method should be used only when the taint analysis is not needed. For example, to detect api where the value will typically be hardcoded. (Call such as setConfig("valueHardcoded"), setActivateStuff(true) )

Parameters:

h - Instruction Handle

cpg - Constant Pool

clazz - Type of the constant being read

Returns:

The constant value if any is found

getConstantInt

public static Integer getConstantInt(org.apache.bcel.generic.InstructionHandle h)

getPushNumber

public static Number getPushNumber(org.apache.bcel.generic.InstructionHandle h)

Extract the number from a push operation (BIPUSH/SIPUSH).

Parameters:

h - Instruction Handle

Returns:

The constant number if any is found

getPrevInstruction

public static <T> T getPrevInstruction(org.apache.bcel.generic.InstructionHandle startHandle,
                                       Class<T> clazz)

Get the previous instruction matching the given type of instruction (second parameter)

Parameters:

startHandle - Location to start from

clazz - Type of instruction to look for

Returns:

The instruction found (null if not found)