feat: 新增卸载时将QLExpressCheck和FastjsonCheck置空

Author: UzJu

dongtai-agent/pom.xml

@@ -194,4 +194,3 @@
         </plugins>
     </build>
 
-</project>

dongtai-core/src/main/java/io/dongtai/iast/core/AgentEngine.java

@@ -5,6 +5,8 @@
 import io.dongtai.iast.common.state.AgentState;
 import io.dongtai.iast.common.state.State;
 import io.dongtai.iast.core.handler.hookpoint.models.policy.PolicyManager;
+import io.dongtai.iast.core.handler.hookpoint.vulscan.dynamic.FastjsonCheck;
+import io.dongtai.iast.core.handler.hookpoint.vulscan.dynamic.QLExpressCheck;
 import io.dongtai.iast.core.init.IEngine;
 import io.dongtai.iast.core.init.impl.ConfigEngine;
 import io.dongtai.iast.core.init.impl.TransformEngine;
@@ -92,6 +94,10 @@ public static void stop() {
     public static void destroy(String mode, String propertiesFilePath, Instrumentation inst) {
         try {
             DongTaiLog.info("Uninstall engine");
+            // 卸载对FastJson和QLExpress的调用
+            FastjsonCheck.clearJsonClassLoader();
+            FastjsonCheck.clearParseConfigClassLoader();
+            QLExpressCheck.clearQLClassLoader();
             AgentEngine agentEngine = AgentEngine.getInstance();
             assert agentEngine != null;
             agentEngine.destroy();

dongtai-core/src/main/java/io/dongtai/iast/core/handler/hookpoint/vulscan/dynamic/FastjsonCheck.java

@@ -83,4 +83,12 @@ public static void setJsonClassLoader(ClassLoader jsonClassLoader) {
     public static void setParseConfigClassLoader(ClassLoader parseConfigClassLoader) {
         PARSE_CONFIG_CLASS_LOADER = parseConfigClassLoader;
     }
+
+    public static void clearJsonClassLoader(){
+        JSON_CLASS_LOADER = null;
+    }
+
+    public static void clearParseConfigClassLoader(){
+        PARSE_CONFIG_CLASS_LOADER = null;
+    }
 }

dongtai-core/src/main/java/io/dongtai/iast/core/handler/hookpoint/vulscan/dynamic/QLExpressCheck.java

@@ -82,4 +82,8 @@ public boolean isSafe(MethodEvent event, SinkNode sinkNode){
     public static void setQLClassLoader(ClassLoader qlClassLoader) {
         QL_CLASS_LOADER = qlClassLoader;
     }
+
+    public static void clearQLClassLoader(){
+        QL_CLASS_LOADER = null;
+    }
 }