fastjson '\x' 导致内存溢出

Myth丶恋晨 2021-09-18 04:06 461阅读 0赞

测试代码：

import java.net.URLDecoder;
    
    import org.junit.Test;
    
    import com.alibaba.fastjson.JSON;
    import com.alibaba.fastjson.JSONException;
    
    import junit.framework.TestCase;
    
    public class TT extends TestCase {
    
        final String DEATH_STRING = "{\"a\":\"\\x";
    
        @Test
        public void test_OOM() throws Exception {
    
            String line = new String(
                    "[{\\x22a\\x22:\\x22a\\xB1ph.\\xCD\\x86\\xBEI\\xBA\\xC3\\xBCiM+\\xCE\\xCE\\x1E\\xDF7\\x1E\\xD9z\\xD9Q\\x8A}\\xD4\\xB2\\xD5\\xA0y\\x98\\x08@\\xE1!\\xA8\\xEF^\\x0D\\x7F\\xECX!\\xFF\\x06IP\\xEC\\x9F[\\x85;\\x02\\x817R\\x87\\xFB\\x1Ch\\xCB\\xC7\\xC6\\x06\\x8F\\xE2Z\\xDA^J\\xEB\\xBCF\\xA6\\xE6\\xF4\\xF7\\xC1\\xE3\\xA4T\\x89\\xC6\\xB2\\x5Cx]");
            line = line.replaceAll("\\\\x", "%");
            String decodeLog = URLDecoder.decode(line, "UTF-8");
            System.out.println(decodeLog);
            try {
                Object obj = JSON.parse(decodeLog);
                obj = JSON.parse(DEATH_STRING);
            } catch (Exception e) {
                assertEquals(e.getClass(), JSONException.class);
                assertTrue(e.getMessage().contains("invalid escape character \\x"));
                e.printStackTrace();
            }
        }
    }

pom.xml

<dependency>
    	<groupId>com.alibaba</groupId>
    	<artifactId>fastjson</artifactId>
    	<version>1.2.59</version>
    </dependency>

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dqYXZhZG9n_size_16_color_FFFFFF_t_70]  
更改 fastjson

<dependency>
    	<groupId>com.alibaba</groupId>
    	<artifactId>fastjson</artifactId>
    	<version>1.2.60</version>
    </dependency>

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dqYXZhZG9n_size_16_color_FFFFFF_t_70 1]

参考文章：https://www.anquanke.com/post/id/185909

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dqYXZhZG9n_size_16_color_FFFFFF_t_70]: /images/20210918/e7b5f3aedd8140aebffa9ef494fbf415.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dqYXZhZG9n_size_16_color_FFFFFF_t_70 1]: /images/20210918/0f9a89caad7c47ba9895183b0b783f19.png