StrategyStack.java

package com.jsql.model.injection.strategy;

import com.jsql.model.InjectionModel;
import com.jsql.model.accessible.DataAccess;
import com.jsql.model.bean.util.Interaction;
import com.jsql.model.bean.util.Request;
import com.jsql.model.injection.vendor.model.VendorYaml;
import com.jsql.model.injection.vendor.model.yaml.Configuration;
import com.jsql.model.suspendable.AbstractSuspendable;
import com.jsql.util.I18nUtil;
import com.jsql.util.LogLevelUtil;
import com.jsql.util.StringUtil;
import org.apache.logging.log4j.LogManager;
import org.apache.logging.log4j.Logger;

import java.util.regex.Matcher;
import java.util.regex.Pattern;

public class StrategyStack extends AbstractStrategy {

    private static final Logger LOGGER = LogManager.getRootLogger();

    private String performanceLength = "0";

    public StrategyStack(InjectionModel injectionModel) {
        super(injectionModel);
    }

    @Override
    public void checkApplicability() {
        if (this.injectionModel.getMediatorUtils().getPreferencesUtil().isStrategyStackDisabled()) {
            LOGGER.log(LogLevelUtil.CONSOLE_INFORM, AbstractStrategy.FORMAT_SKIP_STRATEGY_DISABLED, this.getName());
            return;
        }

        // Reset applicability of new Vendor
        this.isApplicable = false;
        var strategyYaml = this.injectionModel.getMediatorVendor().getVendor().instance().getModelYaml().getStrategy();
        var configurationYaml = strategyYaml.getConfiguration();

        this.logChecking();

        boolean methodIsApplicable = this.isApplicable(configurationYaml, strategyYaml.getStack());
        if (methodIsApplicable) {
            Matcher regexSearch = this.getPerformance(configurationYaml, strategyYaml.getStack());
            if (!regexSearch.find()) {
                LOGGER.log(
                    LogLevelUtil.CONSOLE_ERROR,
                    "{} {} but injectable size is incorrect",
                    () -> I18nUtil.valueByKey("LOG_VULNERABLE"),
                    () -> "Stack"
                );
                methodIsApplicable = false;
            } else {
                this.performanceLength = String.valueOf(regexSearch.group(1).length());
            }
        }

        if (methodIsApplicable) {
            LOGGER.log(
                LogLevelUtil.CONSOLE_SUCCESS,
                "{} Stack injection showing [{}] characters",
                () -> I18nUtil.valueByKey("LOG_VULNERABLE"),
                () -> this.performanceLength
            );
            this.allow();
        } else {
            this.unallow();
        }
    }

    private boolean isApplicable(Configuration configurationYaml, String stack) {
        var methodIsApplicable = false;
        var indexZeroToFind = "0";
        String performanceSourcePage = this.injectionModel.injectWithoutIndex(
            VendorYaml.replaceTags(
                stack
                .replace(VendorYaml.WINDOW, configurationYaml.getSlidingWindow())
                .replace(VendorYaml.INJECTION, configurationYaml.getFailsafe().replace(VendorYaml.INDICE,indexZeroToFind))
                .replace(VendorYaml.WINDOW_CHAR, "1")
                .replace(VendorYaml.CAPACITY, VendorYaml.DEFAULT_CAPACITY)
            ),
            "stack#confirm"
        );
        String regexIndexZero = String.format(VendorYaml.FORMAT_INDEX, indexZeroToFind);
        if (performanceSourcePage.matches("(?s).*"+ regexIndexZero +".*")) {
            methodIsApplicable = true;
            this.isApplicable = true;
        }
        return methodIsApplicable;
    }

    private Matcher getPerformance(Configuration configurationYaml, String stack) {
        String performanceSourcePage = this.injectionModel.injectWithoutIndex(
            VendorYaml.replaceTags(
                stack
                .replace(VendorYaml.WINDOW, configurationYaml.getSlidingWindow())
                .replace(VendorYaml.INJECTION, configurationYaml.getCalibrator())
                .replace(VendorYaml.WINDOW_CHAR, "1")
                .replace(VendorYaml.CAPACITY, VendorYaml.DEFAULT_CAPACITY)
            ),
            "stack#size"
        );
        return Pattern.compile("(?s)"+ DataAccess.LEAD +"("+ VendorYaml.CALIBRATOR_SQL +"+)").matcher(performanceSourcePage);
    }

    @Override
    public void allow(int... i) {
        this.injectionModel.appendAnalysisReport(
            StringUtil.formatReport(LogLevelUtil.COLOR_BLU, "### Strategy: " + this.getName())
            + this.injectionModel.getReportWithoutIndex(
                this.injectionModel.getMediatorVendor().getVendor().instance().sqlStack(StringUtil.formatReport(LogLevelUtil.COLOR_GREEN, "&lt;query&gt;"), "0", true),
                "metadataInjectionProcess"
            )
        );
        this.markVulnerability(Interaction.MARK_STACK_VULNERABLE);
    }

    @Override
    public void unallow(int... i) {
        this.markVulnerability(Interaction.MARK_STACK_INVULNERABLE);
    }

    @Override
    public String inject(String sqlQuery, String startPosition, AbstractSuspendable stoppable, String metadataInjectionProcess) {
        return this.injectionModel.injectWithoutIndex(
            this.injectionModel.getMediatorVendor().getVendor().instance().sqlStack(sqlQuery, startPosition, false),
            metadataInjectionProcess
        );
    }

    @Override
    public void activateWhenApplicable() {
        if (this.injectionModel.getMediatorStrategy().getStrategy() == null && this.isApplicable()) {
            LOGGER.log(
                LogLevelUtil.CONSOLE_INFORM,
                "{} [{}]",
                () -> I18nUtil.valueByKey("LOG_USING_STRATEGY"),
                this::getName
            );
            this.injectionModel.getMediatorStrategy().setStrategy(this);

            var request = new Request();
            request.setMessage(Interaction.MARK_STACK_STRATEGY);
            this.injectionModel.sendToViews(request);
        }
    }

    @Override
    public String getPerformanceLength() {
        return this.performanceLength;
    }

    @Override
    public String getName() {
        return "Stack";
    }
}



























Active mutators

CONDITIONALS_BOUNDARY
EMPTY_RETURNS
FALSE_RETURNS
INCREMENTS
INVERT_NEGS
MATH
NEGATE_CONDITIONALS
NULL_RETURNS
PRIMITIVE_RETURNS
TRUE_RETURNS
VOID_METHOD_CALLS

Tests examined

Report generated by PIT 1.19.1

1		package com.jsql.model.injection.strategy;
2
3		import com.jsql.model.InjectionModel;
4		import com.jsql.model.accessible.DataAccess;
5		import com.jsql.model.bean.util.Interaction;
6		import com.jsql.model.bean.util.Request;
7		import com.jsql.model.injection.vendor.model.VendorYaml;
8		import com.jsql.model.injection.vendor.model.yaml.Configuration;
9		import com.jsql.model.suspendable.AbstractSuspendable;
10		import com.jsql.util.I18nUtil;
11		import com.jsql.util.LogLevelUtil;
12		import com.jsql.util.StringUtil;
13		import org.apache.logging.log4j.LogManager;
14		import org.apache.logging.log4j.Logger;
15
16		import java.util.regex.Matcher;
17		import java.util.regex.Pattern;
18
19		public class StrategyStack extends AbstractStrategy {
20
21		private static final Logger LOGGER = LogManager.getRootLogger();
22
23		private String performanceLength = "0";
24
25		public StrategyStack(InjectionModel injectionModel) {
26		super(injectionModel);
27		}
28
29		@Override
30		public void checkApplicability() {
31	1 1. checkApplicability : negated conditional → NO_COVERAGE	if (this.injectionModel.getMediatorUtils().getPreferencesUtil().isStrategyStackDisabled()) {
32		LOGGER.log(LogLevelUtil.CONSOLE_INFORM, AbstractStrategy.FORMAT_SKIP_STRATEGY_DISABLED, this.getName());
33		return;
34		}
35
36		// Reset applicability of new Vendor
37		this.isApplicable = false;
38		var strategyYaml = this.injectionModel.getMediatorVendor().getVendor().instance().getModelYaml().getStrategy();
39		var configurationYaml = strategyYaml.getConfiguration();
40
41	1 1. checkApplicability : removed call to com/jsql/model/injection/strategy/StrategyStack::logChecking → NO_COVERAGE	this.logChecking();
42
43		boolean methodIsApplicable = this.isApplicable(configurationYaml, strategyYaml.getStack());
44	1 1. checkApplicability : negated conditional → NO_COVERAGE	if (methodIsApplicable) {
45		Matcher regexSearch = this.getPerformance(configurationYaml, strategyYaml.getStack());
46	1 1. checkApplicability : negated conditional → NO_COVERAGE	if (!regexSearch.find()) {
47		LOGGER.log(
48		LogLevelUtil.CONSOLE_ERROR,
49		"{} {} but injectable size is incorrect",
50	1 1. lambda$checkApplicability$0 : replaced return value with null for com/jsql/model/injection/strategy/StrategyStack::lambda$checkApplicability$0 → NO_COVERAGE	() -> I18nUtil.valueByKey("LOG_VULNERABLE"),
51	1 1. lambda$checkApplicability$1 : replaced return value with null for com/jsql/model/injection/strategy/StrategyStack::lambda$checkApplicability$1 → NO_COVERAGE	() -> "Stack"
52		);
53		methodIsApplicable = false;
54		} else {
55		this.performanceLength = String.valueOf(regexSearch.group(1).length());
56		}
57		}
58
59	1 1. checkApplicability : negated conditional → NO_COVERAGE	if (methodIsApplicable) {
60		LOGGER.log(
61		LogLevelUtil.CONSOLE_SUCCESS,
62		"{} Stack injection showing [{}] characters",
63	1 1. lambda$checkApplicability$2 : replaced return value with null for com/jsql/model/injection/strategy/StrategyStack::lambda$checkApplicability$2 → NO_COVERAGE	() -> I18nUtil.valueByKey("LOG_VULNERABLE"),
64	1 1. lambda$checkApplicability$3 : replaced return value with null for com/jsql/model/injection/strategy/StrategyStack::lambda$checkApplicability$3 → NO_COVERAGE	() -> this.performanceLength
65		);
66	1 1. checkApplicability : removed call to com/jsql/model/injection/strategy/StrategyStack::allow → NO_COVERAGE	this.allow();
67		} else {
68	1 1. checkApplicability : removed call to com/jsql/model/injection/strategy/StrategyStack::unallow → NO_COVERAGE	this.unallow();
69		}
70		}
71
72		private boolean isApplicable(Configuration configurationYaml, String stack) {
73		var methodIsApplicable = false;
74		var indexZeroToFind = "0";
75		String performanceSourcePage = this.injectionModel.injectWithoutIndex(
76		VendorYaml.replaceTags(
77		stack
78		.replace(VendorYaml.WINDOW, configurationYaml.getSlidingWindow())
79		.replace(VendorYaml.INJECTION, configurationYaml.getFailsafe().replace(VendorYaml.INDICE,indexZeroToFind))
80		.replace(VendorYaml.WINDOW_CHAR, "1")
81		.replace(VendorYaml.CAPACITY, VendorYaml.DEFAULT_CAPACITY)
82		),
83		"stack#confirm"
84		);
85		String regexIndexZero = String.format(VendorYaml.FORMAT_INDEX, indexZeroToFind);
86	1 1. isApplicable : negated conditional → NO_COVERAGE	if (performanceSourcePage.matches("(?s)."+ regexIndexZero +".")) {
87		methodIsApplicable = true;
88		this.isApplicable = true;
89		}
90	2 1. isApplicable : replaced boolean return with false for com/jsql/model/injection/strategy/StrategyStack::isApplicable → NO_COVERAGE 2. isApplicable : replaced boolean return with true for com/jsql/model/injection/strategy/StrategyStack::isApplicable → NO_COVERAGE	return methodIsApplicable;
91		}
92
93		private Matcher getPerformance(Configuration configurationYaml, String stack) {
94		String performanceSourcePage = this.injectionModel.injectWithoutIndex(
95		VendorYaml.replaceTags(
96		stack
97		.replace(VendorYaml.WINDOW, configurationYaml.getSlidingWindow())
98		.replace(VendorYaml.INJECTION, configurationYaml.getCalibrator())
99		.replace(VendorYaml.WINDOW_CHAR, "1")
100		.replace(VendorYaml.CAPACITY, VendorYaml.DEFAULT_CAPACITY)
101		),
102		"stack#size"
103		);
104	1 1. getPerformance : replaced return value with null for com/jsql/model/injection/strategy/StrategyStack::getPerformance → NO_COVERAGE	return Pattern.compile("(?s)"+ DataAccess.LEAD +"("+ VendorYaml.CALIBRATOR_SQL +"+)").matcher(performanceSourcePage);
105		}
106
107		@Override
108		public void allow(int... i) {
109	1 1. allow : removed call to com/jsql/model/InjectionModel::appendAnalysisReport → NO_COVERAGE	this.injectionModel.appendAnalysisReport(
110		StringUtil.formatReport(LogLevelUtil.COLOR_BLU, "### Strategy: " + this.getName())
111		+ this.injectionModel.getReportWithoutIndex(
112		this.injectionModel.getMediatorVendor().getVendor().instance().sqlStack(StringUtil.formatReport(LogLevelUtil.COLOR_GREEN, "<query>"), "0", true),
113		"metadataInjectionProcess"
114		)
115		);
116	1 1. allow : removed call to com/jsql/model/injection/strategy/StrategyStack::markVulnerability → NO_COVERAGE	this.markVulnerability(Interaction.MARK_STACK_VULNERABLE);
117		}
118
119		@Override
120		public void unallow(int... i) {
121	1 1. unallow : removed call to com/jsql/model/injection/strategy/StrategyStack::markVulnerability → NO_COVERAGE	this.markVulnerability(Interaction.MARK_STACK_INVULNERABLE);
122		}
123
124		@Override
125		public String inject(String sqlQuery, String startPosition, AbstractSuspendable stoppable, String metadataInjectionProcess) {
126	1 1. inject : replaced return value with "" for com/jsql/model/injection/strategy/StrategyStack::inject → NO_COVERAGE	return this.injectionModel.injectWithoutIndex(
127		this.injectionModel.getMediatorVendor().getVendor().instance().sqlStack(sqlQuery, startPosition, false),
128		metadataInjectionProcess
129		);
130		}
131
132		@Override
133		public void activateWhenApplicable() {
134	2 1. activateWhenApplicable : negated conditional → NO_COVERAGE 2. activateWhenApplicable : negated conditional → NO_COVERAGE	if (this.injectionModel.getMediatorStrategy().getStrategy() == null && this.isApplicable()) {
135		LOGGER.log(
136		LogLevelUtil.CONSOLE_INFORM,
137		"{} [{}]",
138	1 1. lambda$activateWhenApplicable$4 : replaced return value with null for com/jsql/model/injection/strategy/StrategyStack::lambda$activateWhenApplicable$4 → NO_COVERAGE	() -> I18nUtil.valueByKey("LOG_USING_STRATEGY"),
139		this::getName
140		);
141	1 1. activateWhenApplicable : removed call to com/jsql/model/injection/strategy/MediatorStrategy::setStrategy → NO_COVERAGE	this.injectionModel.getMediatorStrategy().setStrategy(this);
142
143		var request = new Request();
144	1 1. activateWhenApplicable : removed call to com/jsql/model/bean/util/Request::setMessage → NO_COVERAGE	request.setMessage(Interaction.MARK_STACK_STRATEGY);
145	1 1. activateWhenApplicable : removed call to com/jsql/model/InjectionModel::sendToViews → NO_COVERAGE	this.injectionModel.sendToViews(request);
146		}
147		}
148
149		@Override
150		public String getPerformanceLength() {
151	1 1. getPerformanceLength : replaced return value with "" for com/jsql/model/injection/strategy/StrategyStack::getPerformanceLength → NO_COVERAGE	return this.performanceLength;
152		}
153
154		@Override
155		public String getName() {
156	1 1. getName : replaced return value with "" for com/jsql/model/injection/strategy/StrategyStack::getName → NO_COVERAGE	return "Stack";
157		}
158		}
		Mutations
31		1.1 Location : checkApplicability Killed by : none negated conditional → NO_COVERAGE
41		1.1 Location : checkApplicability Killed by : none removed call to com/jsql/model/injection/strategy/StrategyStack::logChecking → NO_COVERAGE
44		1.1 Location : checkApplicability Killed by : none negated conditional → NO_COVERAGE
46		1.1 Location : checkApplicability Killed by : none negated conditional → NO_COVERAGE
50		1.1 Location : lambda$checkApplicability$0 Killed by : none replaced return value with null for com/jsql/model/injection/strategy/StrategyStack::lambda$checkApplicability$0 → NO_COVERAGE
51		1.1 Location : lambda$checkApplicability$1 Killed by : none replaced return value with null for com/jsql/model/injection/strategy/StrategyStack::lambda$checkApplicability$1 → NO_COVERAGE
59		1.1 Location : checkApplicability Killed by : none negated conditional → NO_COVERAGE
63		1.1 Location : lambda$checkApplicability$2 Killed by : none replaced return value with null for com/jsql/model/injection/strategy/StrategyStack::lambda$checkApplicability$2 → NO_COVERAGE
64		1.1 Location : lambda$checkApplicability$3 Killed by : none replaced return value with null for com/jsql/model/injection/strategy/StrategyStack::lambda$checkApplicability$3 → NO_COVERAGE
66		1.1 Location : checkApplicability Killed by : none removed call to com/jsql/model/injection/strategy/StrategyStack::allow → NO_COVERAGE
68		1.1 Location : checkApplicability Killed by : none removed call to com/jsql/model/injection/strategy/StrategyStack::unallow → NO_COVERAGE
86		1.1 Location : isApplicable Killed by : none negated conditional → NO_COVERAGE
90		1.1 Location : isApplicable Killed by : none replaced boolean return with false for com/jsql/model/injection/strategy/StrategyStack::isApplicable → NO_COVERAGE 2.2 Location : isApplicable Killed by : none replaced boolean return with true for com/jsql/model/injection/strategy/StrategyStack::isApplicable → NO_COVERAGE
104		1.1 Location : getPerformance Killed by : none replaced return value with null for com/jsql/model/injection/strategy/StrategyStack::getPerformance → NO_COVERAGE
109		1.1 Location : allow Killed by : none removed call to com/jsql/model/InjectionModel::appendAnalysisReport → NO_COVERAGE
116		1.1 Location : allow Killed by : none removed call to com/jsql/model/injection/strategy/StrategyStack::markVulnerability → NO_COVERAGE
121		1.1 Location : unallow Killed by : none removed call to com/jsql/model/injection/strategy/StrategyStack::markVulnerability → NO_COVERAGE
126		1.1 Location : inject Killed by : none replaced return value with "" for com/jsql/model/injection/strategy/StrategyStack::inject → NO_COVERAGE
134		1.1 Location : activateWhenApplicable Killed by : none negated conditional → NO_COVERAGE 2.2 Location : activateWhenApplicable Killed by : none negated conditional → NO_COVERAGE
138		1.1 Location : lambda$activateWhenApplicable$4 Killed by : none replaced return value with null for com/jsql/model/injection/strategy/StrategyStack::lambda$activateWhenApplicable$4 → NO_COVERAGE
141		1.1 Location : activateWhenApplicable Killed by : none removed call to com/jsql/model/injection/strategy/MediatorStrategy::setStrategy → NO_COVERAGE
144		1.1 Location : activateWhenApplicable Killed by : none removed call to com/jsql/model/bean/util/Request::setMessage → NO_COVERAGE
145		1.1 Location : activateWhenApplicable Killed by : none removed call to com/jsql/model/InjectionModel::sendToViews → NO_COVERAGE
151		1.1 Location : getPerformanceLength Killed by : none replaced return value with "" for com/jsql/model/injection/strategy/StrategyStack::getPerformanceLength → NO_COVERAGE
156		1.1 Location : getName Killed by : none replaced return value with "" for com/jsql/model/injection/strategy/StrategyStack::getName → NO_COVERAGE

StrategyStack.java

Mutations

Active mutators

Tests examined