代码审计pmd 代码审计工具最新

#!/bin/bash usage() { echo "Usage:" echo " $(basename "$0") <application-name> [-h|-v] ..." echo "" echo "application-name: valid options are: $(valid_app_options)" echo "-h print this help" echo "-v display PMD's version" } valid_app_options () { echo "pmd, cpd, cpd-gui, designer, bgastviewer, designerold, ast-dump" } is_cygwin() { case "$(uname)" in CYGWIN*|MINGW*) readonly cygwin=true ;; esac # OS specific support. $var _must_ be set to either true or false. if [ -z ${cygwin} ] ; then readonly cygwin=false fi } cygwin_paths() { # For Cygwin, switch paths to Windows format before running java if ${cygwin} ; then [ -n "${JAVA_HOME}" ] && JAVA_HOME=$(cygpath --windows "${JAVA_HOME}") [ -n "${JAVAFX_HOME}" ] && JAVAFX_HOME=$(cygpath --windows "${JAVAFX_HOME}") [ -n "${DIRECTORY}" ] && DIRECTORY=$(cygpath --windows "${DIRECTORY}") classpath=$(cygpath --path --windows "${classpath}") fi } convert_cygwin_vars() { # If cygwin, convert to Unix form before manipulating if ${cygwin} ; then [ -n "${JAVA_HOME}" ] && JAVA_HOME=$(cygpath --unix "${JAVA_HOME}") [ -n "${JAVAFX_HOME}" ] && JAVAFX_HOME=$(cygpath --unix "${JAVAFX_HOME}") [ -n "${CLASSPATH}" ] && CLASSPATH=$(cygpath --path --unix "${CLASSPATH}") fi } java_heapsize_settings() { local heapsize=${HEAPSIZE} case "${heapsize}" in [1-9]*[mgMG]) readonly HEAPSIZE="-Xmx${heapsize}" ;; '') ;; *) echo "HEAPSIZE '${HEAPSIZE}' unknown (try: 1024m)" exit 1 esac } set_lib_dir() { if [ -z "${LIB_DIR}" ]; then # Allow for symlinks to this script if [ -L "$0" ]; then local script_real_loc=$(readlink "$0") else local script_real_loc=$0 fi local script_dir=$(dirname "${script_real_loc}") local cwd="${PWD}" cd "${script_dir}/../lib" readonly LIB_DIR=$(pwd -P) cd "${cwd}" fi } check_lib_dir() { if [ ! -e "${LIB_DIR}" ]; then echo "The jar directory [${LIB_DIR}] does not exist" fi } function script_exit() { echo "$1" >&2 exit 1 } determine_java_version() { local full_ver=$(java -version 2>&1) # java_ver is eg "80" for java 1.8, "90" for java 9.0, "100" for java 10.0.x readonly java_ver=$(echo "$full_ver" | sed -n '{ # replace early access versions, e.g. 11-ea with 11.0.0 s/-ea/.0.0/ # replace versions such as 10 with 10.0.0 s/version "\([0-9]\{1,\}\)"/version "\1.0.0"/ # replace old java versions 1.x.* (java 1.7, java 1.8) with x.* s/version "1\.\(.*\)"/version "\1"/ # extract the major and minor parts of the version s/^.* version "\([0-9]\{1,\}\)\.\([0-9]\{1,\}\).*".*$/\1\2/p }') # java_vendor is either java (oracle) or openjdk readonly java_vendor=$(echo "$full_ver" | sed -n -e 's/^\(.*\) version .*$/\1/p') } jre_specific_vm_options() { if [ "${APPNAME}" = "designer" ] then options="" if [ "$java_ver" -ge 80 ] && [ "$java_ver" -lt 90 ] then # no options needed for java8. options="" elif [ "$java_ver" -ge 90 ] && [ "$java_ver" -lt 110 ] && [ "$java_vendor" = "java" ] then # java9 and java10 from oracle contain javafx as a module # open internal module of javafx to reflection (for our TreeViewWrapper) options="--add-opens javafx.controls/javafx.scene.control.skin=ALL-UNNAMED" # The rest here is for RichtextFX options+=" --add-opens javafx.graphics/javafx.scene.text=ALL-UNNAMED" options+=" --add-opens javafx.graphics/com.sun.javafx.scene.text=ALL-UNNAMED" options+=" --add-opens javafx.graphics/com.sun.javafx.text=ALL-UNNAMED" options+=" --add-opens javafx.graphics/com.sun.javafx.geom=ALL-UNNAMED" # Warn of remaining illegal accesses options+=" --illegal-access=warn" elif [ "$java_vendor" = "openjdk" ] || ( [ "$java_vendor" = "java" ] && [ "$java_ver" -ge 110 ] ) then # openjdk and java11 from oracle onwards do not contain javafx directly # there are no extra options either - javafx will be added to the classpath without modules options="" fi echo $options else echo "" fi } function add_pmd_classpath() { if [ -n "$classpath" ]; then classpath="$classpath:${LIB_DIR}/*" else classpath="${LIB_DIR}/*" fi } function add_openjfx_classpath() { if [ "${APPNAME}" = "designer" ] then if [ "$java_vendor" = "openjdk" ] && [ "$java_ver" -lt 100 ] then script_exit "For openjfx at least java 10 is required" elif [ "$java_vendor" = "openjdk" ] || ( [ "$java_vendor" = "java" ] && [ "$java_ver" -ge 110 ] ) then # openjfx is required for openjdk builds and oracle java 11 or later if [ -z "${JAVAFX_HOME}" ] then script_exit "The environment variable JAVAFX_HOME is missing." else # The wildcard will include only jar files, but we need to access also # property files such as javafx.properties that lay bare in the dir if [ -n "$classpath" ]; then classpath="$classpath:${JAVAFX_HOME}/lib/*:${JAVAFX_HOME}/lib/" else classpath="${JAVAFX_HOME}/lib/*:${JAVAFX_HOME}/lib/" fi fi fi fi } readonly APPNAME="${1}" if [ -z "${APPNAME}" ]; then usage exit 1 fi shift case "${APPNAME}" in "pmd") readonly CLASSNAME="net.sourceforge.pmd.PMD" ;; "cpd") readonly CLASSNAME="net.sourceforge.pmd.cpd.CPD" ;; "designer") readonly CLASSNAME="net.sourceforge.pmd.util.fxdesigner.DesignerStarter" ;; "designerold") echo "'designerold' is deprecated and will be removed in PMD 7.0.0, try the new 'designer' instead." readonly CLASSNAME="net.sourceforge.pmd.util.designer.Designer" ;; "bgastviewer") echo "'bgastviewer' is deprecated and will be removed in PMD 7.0.0, try the new 'designer' instead." readonly CLASSNAME="net.sourceforge.pmd.util.viewer.Viewer" ;; "cpdgui") echo "'cpdgui' is deprecated and will be removed in PMD 7.0.0, use 'cpd-gui' instead." readonly CLASSNAME="net.sourceforge.pmd.cpd.GUI" ;; "cpd-gui") readonly CLASSNAME="net.sourceforge.pmd.cpd.GUI" ;; "ast-dump") readonly CLASSNAME="net.sourceforge.pmd.util.treeexport.TreeExportCli" ;; *) echo "${APPNAME} is NOT a valid application name, valid options are: $(valid_app_options)" ;; esac is_cygwin set_lib_dir check_lib_dir convert_cygwin_vars classpath=$CLASSPATH add_pmd_classpath determine_java_version add_openjfx_classpath cygwin_paths java_heapsize_settings java ${HEAPSIZE} ${PMD_JAVA_OPTS} $(jre_specific_vm_options) -cp "${classpath}" "${CLASSNAME}" "$@"