edu.columbia.cs.psl.phosphor.instrumenter.SourceTaintingMV Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of embedded-server Show documentation
The newest version!
package edu.columbia.cs.psl.phosphor.instrumenter;

import edu.columbia.cs.psl.phosphor.*;
import edu.columbia.cs.psl.phosphor.runtime.TaintSourceWrapper;
import org.objectweb.asm.MethodVisitor;
import org.objectweb.asm.Opcodes;
import org.objectweb.asm.Type;

public class SourceTaintingMV extends MethodVisitor implements Opcodes {

	private static final  SourceSinkManager sourceSinkManager = BasicSourceSinkManager.getInstance();
	private final String desc;
	private final Type origReturnType;
	private final boolean isStatic;
	private final Object lbl;
	// The untainted signature of the source method being visited
	private final String actualSource;


	public SourceTaintingMV(MethodVisitor mv, int access, String owner, String name, String desc) {
		super(Configuration.ASM_VERSION, mv);
		this.desc = desc;
		this.origReturnType = Type.getReturnType(SourceSinkManager.remapMethodDescToRemoveTaints(desc));
		this.isStatic = (access & Opcodes.ACC_STATIC) != 0;
		this.lbl = sourceSinkManager.getLabel(owner, name, desc);
		this.actualSource = SourceSinkManager.getOriginalMethodSignature(owner, name, desc);
	}

	/* Adds code to make a call to autoTaint. Supplies the specified int as the argument index. Check that the value returned
	* by the call can be cast to the class with the specified internal name. */
	private void callAutoTaint(int argIndex, String internalName) {
		super.visitFieldInsn(GETSTATIC, Type.getInternalName(Configuration.class), "autoTainter", Type.getDescriptor(TaintSourceWrapper.class));
		super.visitInsn(SWAP);
		super.visitLdcInsn(lbl);
		super.visitLdcInsn(actualSource);
		super.visitIntInsn(BIPUSH, argIndex);
		super.visitMethodInsn(INVOKEVIRTUAL, Type.getInternalName(TaintSourceWrapper.class), "autoTaint", "(Ljava/lang/Object;Ljava/lang/String;Ljava/lang/String;I)Ljava/lang/Object;", false);
		super.visitTypeInsn(CHECKCAST, internalName);
	}

	/* Adds code to taint the arguments passed to this method. */
	private void autoTaintArguments() {
		Type[] args = Type.getArgumentTypes(desc);
		int idx = isStatic ? 0 : 1; // skip over the "this" argument for non-static methods
		for(int i = 0; i < args.length; i++) {
			if(args[i].getSort() == Type.OBJECT || args[i].getSort() == Type.ARRAY && args[i].getElementType().getSort() == Type.OBJECT) {
				super.visitVarInsn(ALOAD, idx); // load the argument onto the stack
				callAutoTaint(i, args[i].getInternalName());
				super.visitVarInsn(ASTORE, idx); // replace the argument with the return of autoTaint
			}
			idx += args[i].getSize();
		}
	}

	@Override
	public void visitCode() {
		super.visitCode();
		if(Configuration.MULTI_TAINTING) {
			autoTaintArguments();
		}
	}

	@Override
	public void visitInsn(int opcode) {
		if(Configuration.MULTI_TAINTING) {
            if(TaintUtils.isReturnOpcode(opcode)) {
                autoTaintArguments();
            }
            if(opcode == ARETURN) {
                Type boxedReturnType = Type.getReturnType(this.desc);
                if(origReturnType.getSort() != Type.VOID) {
                    callAutoTaint(-1, boxedReturnType.getInternalName());
                }
            }
        }
		super.visitInsn(opcode);
	}
}