WebApp Sec mailing list archives

JAVA Classes - Recompilation condition errors!!


From: "George Fekkas" <G.Fekkas () encode-sec com>
Date: Fri, 3 Dec 2004 11:00:44 +0200

Hi Pen-Testers

I am performing a code injection into JAVA classes. I am working with
the Java Object Inspector Tool (COMPASS). I injected the desirable code
in order to inspect JAVA objects. However, when I am trying to recompile
the classes then the following errors are occurred. I have already
checked all the "imports" for the right paths and all seems to be
correct.

C:\Documents and
Settings\Administrator\Desktop\HackClasses\*****.java:89: ';' expected

JVM INSTR monitorenter ;

^

C:\Documents and

Settings\Administrator\Desktop\HackClasses\*****.java:112:not a
statement

class1;

^

C:\Documents and
Settings\Administrator\Desktop\HackClasses\*****.java:113:

';' expected

JVM INSTR monitorexit ;

^

C:\Documents and
Settings\Administrator\Desktop\HackClasses\*****.java:116: not a
statement exception;

^

C:\Documents and
Settings\Administrator\Desktop\HackClasses\*****.java:87: u ndefined
label: MISSING_BLOCK_LABEL_247

break MISSING_BLOCK_LABEL_247;

^

C:\Documents and
Settings\Administrator\Desktop\HackClasses\*****.java:89: c annot
resolve symbol symbol : class JVM

location: class com.edi.commerce.********

JVM INSTR monitorenter ;

^

C:\Documents and
Settings\Administrator\Desktop\HackClasses\*****.java:91: u ndefined
label: MISSING_BLOCK_LABEL_237

break MISSING_BLOCK_LABEL_237;

^

C:\Documents and
Settings\Administrator\Desktop\HackClasses\*****.java:113:cannot resolve
symbol

symbol : class JVM

location: class com.edi.commerce.*********

JVM INSTR monitorexit ;

^

C:\Documents and
Settings\Administrator\Desktop\HackClasses\*****.java:114:

undefined label: MISSING_BLOCK_LABEL_247

break MISSING_BLOCK_LABEL_247;

^

However, the recompilation was succeeded by comment out the lines in the
source code (Decompile Java Classes).

 //if(_type !=3D null) 

// break MISSING_BLOCK_LABEL_247; 

//Class class1 =3D org.omg.CORBA.TypeCode.class; 

//JVM INSTR monitorenter; 

//if(_type !=3D null)

// break MISSING_BLOCK_LABEL_237;

//class1;

//JVM INSTR monitorexit;

//break MISSING_BLOCK_LABEL_247;

Is this a big problem? If it is what can I do in order to avoid these
errors?

Thank you for your time.



******************************************************************
Any views expressed in this message are those of the
individual sender, except where the sender specifically
states them to be the views of ENCODE S.A.
******************************************************************


Current thread: