Skip to content

Commit 67a115d

Browse files
author
‘niuerzhuang’
committed
fix: custom model addSourceHash.
1 parent 074954e commit 67a115d

File tree

2 files changed

+5
-1
lines changed

2 files changed

+5
-1
lines changed

dongtai-core/src/main/java/io/dongtai/iast/core/utils/TaintPoolUtils.java

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -195,6 +195,10 @@ public static void trackObject(MethodEvent event, PolicyNode policyNode, Object
195195
trackObject(event, policyNode, field.get(obj), depth + 1, isMicroservice);
196196
}
197197
}
198+
hash = System.identityHashCode(obj);
199+
if (EngineManager.TAINT_HASH_CODES.contains(hash)) {
200+
event.addSourceHash(hash);
201+
}
198202
} catch (Throwable e) {
199203
DongTaiLog.debug("solve model failed: {}, {}",
200204
e.getMessage(), e.getCause() != null ? e.getCause().getMessage() : "");

dongtai-core/src/main/resources/com.secnium.iast.resources/blacklist.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4696,7 +4696,7 @@ com/fasterxml/jackson/databind/cfg/MapperConfigBase
46964696
com/fasterxml/jackson/databind/cfg/SerializerFactoryConfig
46974697
com/fasterxml/jackson/databind/deser/AbstractDeserializer
46984698
com/fasterxml/jackson/databind/deser/BasicDeserializerFactory
4699-
com/fasterxml/jackson/databind/deser/BeanDeserializer
4699+
# com/fasterxml/jackson/databind/deser/BeanDeserializer
47004700
com/fasterxml/jackson/databind/deser/BeanDeserializerBase
47014701
com/fasterxml/jackson/databind/deser/BeanDeserializerBuilder
47024702
com/fasterxml/jackson/databind/deser/BeanDeserializerModifier

0 commit comments

Comments
 (0)