“火线～洞态IAST”是一款专为甲方安全人员、代码审计工程师和0 Day漏洞挖掘人员量身打造的辅助工具，可用于集成devops环境进行漏洞检测、作为代码审计的辅助工具和自动化挖掘0 Day。

Preflight Checklist

• [X] I agree to follow the Code of Conduct that this project adheres to.
• [X] I have searched the issue tracker for an issue that matches the one I want to file, without success.
• [X] I am not looking for support or already pursued the available support channels without success.

Version

1.7.9

Installation Type

Official Kubernetes

Service Name

DongTai-agent-java

Describe the details of the bug and the steps to reproduce it

新版本Agent注册失败，v1.7.7 Agent运行正常，服务端均为最新版本 1.8.7。

错误日志如下：

2022-10-31 18:30:52 [io.dongtai.iast.agent] [INFO] DongTai Config: /tmp/dongtai-root/v1.7.9/iast.properties 2022-10-31 18:30:52 [io.dongtai.iast.agent] [DEBUG] DongTai will install for Servlet Service 2022-10-31 18:30:54 [io.dongtai.iast.agent] [ERROR] request https://xx/openapi/api/v1/agent/register failed, Exception: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested targetjavax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at sun.security.ssl.Alert.createSSLException(Alert.java:131) at sun.security.ssl.TransportContext.fatal(TransportContext.java:353) at sun.security.ssl.TransportContext.fatal(TransportContext.java:296) at sun.security.ssl.TransportContext.fatal(TransportContext.java:291) at sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:652) at sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:471) at sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:367) at sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:376) at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:444) at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:422) at sun.security.ssl.TransportContext.dispatch(TransportContext.java:183) at sun.security.ssl.SSLTransport.decode(SSLTransport.java:154) at sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1279) at sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1188) at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:401) at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:373) at io.dongtai.iast.thirdparty.org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:436) at io.dongtai.iast.thirdparty.org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:384) at io.dongtai.iast.thirdparty.org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:142) at io.dongtai.iast.thirdparty.org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:376) at io.dongtai.iast.thirdparty.org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:393) at io.dongtai.iast.thirdparty.org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236) at io.dongtai.iast.thirdparty.org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:186) at io.dongtai.iast.thirdparty.org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110) at io.dongtai.iast.thirdparty.org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:185) at io.dongtai.iast.thirdparty.org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:83) at io.dongtai.iast.thirdparty.org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:108) at io.dongtai.iast.common.utils.AbstractHttpClientUtils.sendRequestInternal(AbstractHttpClientUtils.java:123) at io.dongtai.iast.common.utils.AbstractHttpClientUtils.sendRequest(AbstractHttpClientUtils.java:64) at io.dongtai.iast.common.utils.AbstractHttpClientUtils.sendRequest(AbstractHttpClientUtils.java:35) at io.dongtai.iast.agent.util.HttpClientUtils.sendPost(HttpClientUtils.java:48) at io.dongtai.iast.agent.report.AgentRegisterReport.register(AgentRegisterReport.java:223) at io.dongtai.iast.agent.report.AgentRegisterReport.send(AgentRegisterReport.java:238) at io.dongtai.iast.agent.AgentLauncher.install(AgentLauncher.java:112) at io.dongtai.iast.agent.AgentLauncher.premain(AgentLauncher.java:48) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at sun.instrument.InstrumentationImpl.loadClassAndStartAgent(InstrumentationImpl.java:386) at sun.instrument.InstrumentationImpl.loadClassAndCallPremain(InstrumentationImpl.java:401) Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:439) at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:306) at sun.security.validator.Validator.validate(Validator.java:271) at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:312) at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:221) at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:128) at sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:636) ... 36 more Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141) at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126) at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280) at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:434) ... 42 more

2022-10-31 18:30:54 [io.dongtai.iast.agent] [ERROR] Parse https://xxx/openapi register response failed: io.dongtai.iast.thirdparty.org.json.JSONException: A JSONObject text must begin with '{' at 1 [character 2 line 1] 2022-10-31 18:30:54 [io.dongtai.iast.agent] [ERROR] Agent registered failed. Start without DongTai IAST.

Additional Information

No response

Logs

No response

Preflight Checklist

• [X] I agree to follow the Code of Conduct that this project adheres to.
• [X] I have searched the issue tracker for an issue that matches the one I want to file, without success.
• [X] I am not looking for support or already pursued the available support channels without success.

Version

1.8.5

Installation Type

Official Kubernetes

Service Name

DongTai-agent-java

Describe the details of the bug and the steps to reproduce it

如题，部分Agent的上报事件报错，导致上报信息不完整。

报错案例1

2022-09-28 11:40:00 [io.dongtai.iast.agent] [ERROR] nulljava.lang.NullPointerException at io.dongtai.iast.core.handler.hookpoint.graphy.GraphBuilder.convertToReport(GraphBuilder.java:104) at io.dongtai.iast.core.handler.hookpoint.graphy.GraphBuilder.buildAndReport(GraphBuilder.java:29) at io.dongtai.iast.core.handler.hookpoint.SpyDispatcherImpl.leaveDubbo(SpyDispatcherImpl.java:156) at org.apache.dubbo.monitor.support.MonitorFilter.invoke(MonitorFilter.java:89) at org.apache.dubbo.rpc.protocol.ProtocolFilterWrapper$1.invoke(ProtocolFilterWrapper.java:83) at org.apache.dubbo.rpc.protocol.dubbo.filter.FutureFilter.invoke(FutureFilter.java:51) at org.apache.dubbo.rpc.protocol.ProtocolFilterWrapper$1.invoke(ProtocolFilterWrapper.java:83) at org.apache.dubbo.rpc.filter.ConsumerContextFilter.invoke(ConsumerContextFilter.java:69) at org.apache.dubbo.rpc.protocol.ProtocolFilterWrapper$1.invoke(ProtocolFilterWrapper.java:83) at org.apache.dubbo.rpc.protocol.InvokerWrapper.invoke(InvokerWrapper.java:56) at org.apache.dubbo.rpc.cluster.support.FailoverClusterInvoker.doInvoke(FailoverClusterInvoker.java:82) at org.apache.dubbo.rpc.cluster.support.AbstractClusterInvoker.invoke(AbstractClusterInvoker.java:260) at org.apache.dubbo.rpc.cluster.interceptor.ClusterInterceptor.intercept(ClusterInterceptor.java:47) at org.apache.dubbo.rpc.cluster.support.wrapper.AbstractCluster$InterceptorInvokerNode.invoke(AbstractCluster.java:92) at org.apache.dubbo.rpc.cluster.support.wrapper.MockClusterInvoker.invoke(MockClusterInvoker.java:88) at org.apache.dubbo.rpc.proxy.InvokerInvocationHandler.invoke(InvokerInvocationHandler.java:74) at org.apache.dubbo.common.bytecode.proxy17.getPersonalCampName(proxy17.java) at cn.com.x x x.personal.integration.RpcPersonalCampServiceClient.getPersonalCampName(RpcPersonalCampServiceClient.java:56) at cn.com.xxx.wechat.bo.wxmsgsender.XPerPersonalLinkingWxMsgSender.sendPasswordToApp(XPersonalLinkingWxMsgSender.java:237) at cn.com.xxx.wechat.bo.wxmsgsender.XPerPersonalLinkingWxMsgSender.check(XPerPersonalLinkingWxMsgSender.java:115) at cn.com.xxx.wechat.bo.wxmsgsender.WxMsgSenderChecker.check(WxMsgSenderChecker.java:24) at cn.com.xxx.core.job.CrontableUpgradeJobHandler.sendTrainerTemplateMsg(CrontableUpgradeJobHandler.java:334) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at com.xxl.job.core.handler.impl.MethodJobHandler.execute(MethodJobHandler.java:29) at com.xxl.job.core.thread.JobThread.run(JobThread.java:165)

报错案例2

2022-09-28 11:40:00 [io.dongtai.iast.agent] [ERROR] nulljava.lang.NullPointerException at io.dongtai.iast.core.handler.hookpoint.graphy.GraphBuilder.convertToReport(GraphBuilder.java:104) at io.dongtai.iast.core.handler.hookpoint.graphy.GraphBuilder.buildAndReport(GraphBuilder.java:29) at io.dongtai.iast.core.handler.hookpoint.SpyDispatcherImpl.leaveDubbo(SpyDispatcherImpl.java:156) at org.apache.dubbo.monitor.support.MonitorFilter.invoke(MonitorFilter.java:89) at org.apache.dubbo.rpc.protocol.ProtocolFilterWrapper$1.invoke(ProtocolFilterWrapper.java:83) at org.apache.dubbo.rpc.protocol.dubbo.filter.FutureFilter.invoke(FutureFilter.java:51) at org.apache.dubbo.rpc.protocol.ProtocolFilterWrapper$1.invoke(ProtocolFilterWrapper.java:83) at org.apache.dubbo.rpc.filter.ConsumerContextFilter.invoke(ConsumerContextFilter.java:69) at org.apache.dubbo.rpc.protocol.ProtocolFilterWrapper$1.invoke(ProtocolFilterWrapper.java:83) at org.apache.dubbo.rpc.protocol.InvokerWrapper.invoke(InvokerWrapper.java:56) at org.apache.dubbo.rpc.cluster.support.FailoverClusterInvoker.doInvoke(FailoverClusterInvoker.java:82) at org.apache.dubbo.rpc.cluster.support.AbstractClusterInvoker.invoke(AbstractClusterInvoker.java:260) at org.apache.dubbo.rpc.cluster.interceptor.ClusterInterceptor.intercept(ClusterInterceptor.java:47) at org.apache.dubbo.rpc.cluster.support.wrapper.AbstractCluster$InterceptorInvokerNode.invoke(AbstractCluster.java:92) at org.apache.dubbo.rpc.cluster.support.wrapper.MockClusterInvoker.invoke(MockClusterInvoker.java:88) at org.apache.dubbo.rpc.proxy.InvokerInvocationHandler.invoke(InvokerInvocationHandler.java:74) at org.apache.dubbo.common.bytecode.proxy17.getPersonalCampName(proxy17.java) at cn.com.xxx.personal.integration.RpcPersonalCampServiceClient.getPersonalCampName(RpcPersonalCampServiceClient.java:56) at cn.com.xxx.wechat.bo.wxmsgsender.XPerPersonalLinkingWxMsgSender.checkSendPasskitLinkingMsg(XPerPersonalLinkingWxMsgSender.java:251) at cn.com.xxx.wechat.bo.wxmsgsender.XPerPersonalLinkingWxMsgSender.check(XPerPersonalLinkingWxMsgSender.java:117) at cn.com.xxx.wechat.bo.wxmsgsender.WxMsgSenderChecker.check(WxMsgSenderChecker.java:24) at cn.com.xxx.core.job.CrontableUpgradeJobHandler.sendTrainerTemplateMsg(CrontableUpgradeJobHandler.java:334) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at com.xxl.job.core.handler.impl.MethodJobHandler.execute(MethodJobHandler.java:29) at com.xxl.job.core.thread.JobThread.run(JobThread.java:165)

Additional Information

No response

Logs

No response

Preflight Checklist

• [X] I agree to follow the Code of Conduct that this project adheres to.
• [X] I have searched the issue tracker for an issue that matches the one I want to file, without success.
• [X] I am not looking for support or already pursued the available support channels without success.

Version

1.0.4

Installation Type

Official SaaS Service

Service Name

DongTai-Core

Describe the details of the bug and the steps to reproduce it

When the Java Agent starts, the speed is very slow, often takes a few minutes

Additional Information

No response

Logs

No response

Preflight Checklist

• [X] I agree to follow the Code of Conduct that this project adheres to.
• [X] I have searched the issue tracker for an issue that matches the one I want to file, without success.
• [X] I am not looking for support or already pursued the available support channels without success.

Version

1.0.4

Installation Type

Other (specify below)

Service Name

DongTai-Core

Describe the details of the bug and the steps to reproduce it

attach模式启动

Additional Information

https://github.com/alibaba/arthas/commit/53a544c61f84a82a91111cad81e3d08985dbce79?diff=split https://github.com/alibaba/arthas/issues/675

Logs

class=org.springframework.boot.sql.init.dependency.DatabaseInitializationDependencyConfigurer$$Lambda$290/142555199\njava.lang.VerifyError\r
at sun.instrument.InstrumentationImpl.retransformClasses0(Native Method)\r
at sun.instrument.InstrumentationImpl.retransformClasses(InstrumentationImpl.java:144)\r
at com.secnium.iast.core.enhance.IastClassFileTransformer.retransform(IastClassFileTransformer.java:241)\r
at com.secnium.iast.core.enhance.IastClassFileTransformer.init(IastClassFileTransformer.java:65)\r
at com.secnium.iast.core.engines.impl.TransformEngine.start(TransformEngine.java:31)\r
at com.secnium.iast.core.AgentEngine.run(AgentEngine.java:98)\r
at com.secnium.iast.core.AgentEngine.install(AgentEngine.java:58)\r
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)\r
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)\r
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)\r
at java.lang.reflect.Method.invoke(Method.java:498)\r
at com.secnium.iast.agent.manager.EngineManager.install(EngineManager.java:177)\r
at com.secnium.iast.agent.monitor.MonitorDaemonThread.startEngine(MonitorDaemonThread.java:47)\r
at com.secnium.iast.agent.monitor.MonitorDaemonThread.run(MonitorDaemonThread.java:26)\r
at java.lang.Thread.run(Thread.java:748)\n

Preflight Checklist

• [X] I agree to follow the Code of Conduct that this project adheres to.
• [X] I have searched the issue tracker for an issue that matches the one I want to file, without success.
• [X] I am not looking for support or already pursued the available support channels without success.

Version

1.9.0

Installation Type

Official Kubernetes

Service Name

DongTai-agent-java

Describe the details of the bug and the steps to reproduce it

部署最新的Agent版本后，出现大量类似错误。

A large number of similar errors appear after deploying the latest Agent version.

2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class sun/reflect/UnsafeStaticCharacterFieldAccessorImpl failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/handler/timeout/IdleStateHandler$AllIdleTimeoutTask failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/ons/api/impl/authority/AuthUtil failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/channel/AbstractChannelHandlerContext$Tasks$1 failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/handler/timeout/IdleStateHandler$AbstractIdleTask failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/channel/AbstractChannelHandlerContext$Tasks$2 failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/ons/api/impl/authority/OnsAuthSigner failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/channel/AbstractChannelHandlerContext$Tasks$3 failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/ons/api/impl/authority/exception/AuthenticationException failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/channel/AbstractChannelHandlerContext$Tasks$4 failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/ons/api/impl/authority/SigningAlgorithm failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/sun/crypto/provider/HmacSHA1 failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/org/apache/commons/codec/binary/Base64 failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/org/apache/commons/codec/binary/BaseNCodec failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/org/apache/commons/codec/BinaryEncoder failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/org/apache/commons/codec/Encoder failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/org/apache/commons/codec/BinaryDecoder failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/org/apache/commons/codec/Decoder failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/org/apache/commons/codec/DecoderException failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/org/apache/commons/codec/EncoderException failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/org/apache/commons/codec/binary/BaseNCodec$Context failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/ons/api/impl/MQClientInfo failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/com/alibaba/rocketmq/common/protocol/header/SendMessageRequestHeader failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/com/alibaba/rocketmq/common/protocol/header/SendMessageRequestHeaderV2 failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/com/alibaba/rocketmq/common/protocol/header/PullMessageRequestHeader failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/com/alibaba/rocketmq/common/protocol/header/PopMessageRequestHeader failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/com/alibaba/rocketmq/common/metrics/MetricsInfo failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/com/alibaba/rocketmq/common/metrics/MetricsUtils failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/CollectorRegistry failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/Counter failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/Collector$Describable failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/SimpleCollector failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/Collector failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/SimpleCollector$Builder failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/Counter$Builder failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/CounterMetricFamily failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/Collector$MetricFamilySamples failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/Collector$Type failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/CollectorRegistry$1 failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/Counter$Child failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/DoubleAdder failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/Striped64 failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/Striped64$1 failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/Striped64$Cell failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/Gauge failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/Gauge$Builder failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/GaugeMetricFamily failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/Gauge$Child failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/Gauge$TimeProvider failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/Histogram failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/Histogram$Builder failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/Histogram$Child failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/Histogram$Timer failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/SimpleTimer failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/prometheus/client/SimpleTimer$TimeProvider failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/com/alibaba/rocketmq/common/metrics/MetricsTimerWrapper failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/com/alibaba/rocketmq/remoting/netty/ResponseFuture failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/util/ReferenceCountUtil failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/channel/AbstractChannelHandlerContext$WriteTask failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/util/internal/ObjectPool$ObjectCreator failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/channel/AbstractChannelHandlerContext$WriteTask$1 failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/util/internal/ObjectPool failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/util/internal/ObjectPool$RecyclerObjectPool failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/util/Recycler failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/util/internal/ObjectPool$RecyclerObjectPool$1 failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/util/Recycler$2 failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/util/Recycler$Handle failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/util/internal/ObjectPool$Handle failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/util/Recycler$3 failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/util/Recycler$1 failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/util/internal/MathUtil failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/util/Recycler$Stack failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/util/Recycler$DefaultHandle failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/ByteBufHolder failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/util/IllegalReferenceCountException failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/com/alibaba/rocketmq/remoting/netty/NettyRemotingAbstract$3 failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/UnpooledDuplicatedByteBuf failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/DuplicatedByteBuf failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/AbstractDerivedByteBuf failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/UnpooledSlicedByteBuf failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/AbstractUnpooledSlicedByteBuf failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/SwappedByteBuf failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/util/internal/ReferenceCountUpdater failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/AbstractReferenceCountedByteBuf$1 failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/CompositeByteBuf$ByteWrapper failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/util/ResourceLeakDetectorFactory failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/util/ResourceLeakDetectorFactory$DefaultResourceLeakDetectorFactory failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/Unpooled failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/WrappedUnpooledUnsafeDirectByteBuf failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/ReadOnlyUnsafeDirectByteBuf failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/ReadOnlyByteBufferBuf failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/UnreleasableByteBuf failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/FixedCompositeByteBuf failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/ReadOnlyByteBuf failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/UnpooledByteBufAllocator failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/UnpooledByteBufAllocator$InstrumentedUnpooledUnsafeHeapByteBuf failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/UnpooledByteBufAllocator$InstrumentedUnpooledHeapByteBuf failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/UnpooledByteBufAllocator$InstrumentedUnpooledUnsafeNoCleanerDirectByteBuf failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/UnpooledUnsafeNoCleanerDirectByteBuf failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/UnpooledByteBufAllocator$InstrumentedUnpooledUnsafeDirectByteBuf failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/UnpooledByteBufAllocator$InstrumentedUnpooledDirectByteBuf failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager 2022-11-16 11:01:04 [io.dongtai.iast.agent] [WARN] transform class com/aliyun/openservices/shade/io/netty/buffer/UnpooledByteBufAllocator$UnpooledByteBufAllocatorMetric failed, Exception: java.lang.NoClassDefFoundError: io/dongtai/iast/common/scope/ScopeManager

Additional Information

No response

Logs

No response

Preflight Checklist

• [X] I agree to follow the Code of Conduct that this project adheres to.
• [X] I have searched the issue tracker for an issue that matches the one I want to file, without success.
• [X] I am not looking for support or already pursued the available support channels without success.

Version

latest

Installation Type

Official Kubernetes

Service Name

DongTai-Web

Describe the details of the bug and the steps to reproduce it

下载agent后在windows下运行（运行命令java -javaagent:dongtai-agent.jar -jar xxx.jar），报错注册失败： 2022-11-03 09:00:11 [io.dongtai.iast.agent] [ERROR] Register msg: {"status": 202, "msg": "\u63a2\u9488\u6ce8\u518c\u5931\u8d25"}

Additional Information

查看服务端日志，疑似编码问题。 相关日志： ERROR 2022-11-03 10:28:09,614 [agent_register.post:298] 探针注册失败，原因：'utf-8' codec can't decode byte 0xbb in position 480: invalid start byte Traceback (most recent call last): File "/opt/dongtai/./dongtai_protocol/views/agent_register.py", line 272, in post self.register_server( File "/opt/dongtai/./dongtai_protocol/views/agent_register.py", line 122, in register_server env = base64.b64decode(server_env).decode('utf-8') UnicodeDecodeError: 'utf-8' codec can't decode byte 0xbb in position 480: invalid start byte [pid: 25|app: 0|req: 1/5] 10.42.178.223 () {42 vars in 643 bytes} [Thu Nov 3 10:28:08 2022] POST /api/v1/agent/register => generated 62

Logs

ERROR 2022-11-03 10:28:09,614 [agent_register.post:298] 探针注册失败，原因：'utf-8' codec can't decode byte 0xbb in position 480: invalid start byte
Traceback (most recent call last):
  File "/opt/dongtai/./dongtai_protocol/views/agent_register.py", line 272, in post
    self.register_server(
  File "/opt/dongtai/./dongtai_protocol/views/agent_register.py", line 122, in register_server
    env = base64.b64decode(server_env).decode('utf-8')
UnicodeDecodeError: 'utf-8' codec can't decode byte 0xbb in position 480: invalid start byte
[pid: 25|app: 0|req: 1/5] 10.42.178.223 () {42 vars in 643 bytes} [Thu Nov  3 10:28:08 2022] POST /api/v1/agent/register => generated 62

error log:

java.lang.ClassCastException: weblogic.net.http.SOAPHttpsURLConnection cannot be cast to javax.net.ssl.HttpsURLConnection
at io.dongtai.iast.core.utils.HttpClientUtils.sendRequest(HttpClientUtils.java:73)
at io.dongtai.iast.core.utils.HttpClientUtils.sendPost(HttpClientUtils.java:56)
at io.dongtai.iast.core.bytecode.sca.ScaReport.sendReport(ScaReport.java:25)
at io.dongtai.iast.core.bytecode.sca.ScaScanner$ScaScanThread.run(ScaScanner.java:217)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at java.lang.Thread.run(Thread.java:748)

Set parameter a to true to solve the problem:

System.setProperty("UseSunHttpHandler", "true");

    public static void sendErrorLog(Throwable t) {
        if (ENABLE_UPLOAD) {
            StringWriter sw = new StringWriter();
            PrintWriter pw = new PrintWriter(sw);
            t.printStackTrace(pw);
            sendErrorLog(t);
        }
    }

fix:

    public static void sendErrorLog(Throwable t) {
        if (ENABLE_UPLOAD) {
            StringWriter sw = new StringWriter();
            PrintWriter pw = new PrintWriter(sw);
            t.printStackTrace(pw);
            sendErrorLog(t.toString());
        }
    }

Preflight Checklist

• [X] I agree to follow the Code of Conduct that this project adheres to.
• [X] I have searched the issue tracker for an issue that matches the one I want to file, without success.

Problem Description

支持 “java -jar agent.jar -m install -p ”方式部署时增加部署参数，

Proposed Solution

在attach方式部署agent中，支持 部署参数 。

Alternatives Considered

No response

Additional Information

No response

Preflight Checklist

• [X] I agree to follow the Code of Conduct that this project adheres to.
• [X] I have searched the issue tracker for an issue that matches the one I want to file, without success.
• [X] I am not looking for support or already pursued the available support channels without success.

Version

1.3.0

Installation Type

Other (specify below)

Service Name

DongTai-agent-java

Describe the details of the bug and the steps to reproduce it

cn.huoxian.iast.api.WrapperOutputStreamCopier 这个类替换了请求响应原本的 ServletOutputStream, 但只重写了 void write(int b) 方法，而没有重写 void write(byte b[], int off, int len) 方法。在 Spring WebFlux 和 Tomcat 组合中， Spring 是使用 void write(byte b[], int off, int len) 输出响应结果的，而 Tomcat 并不会把 void write(byte b[], int off, int len) 的实现引向 void write(int b), 这是两个独立实现的方法。所以 WrapperOutputStreamCopier 在事实上就把响应结果输出的数据丢失了。请求端的表现是发出请求后一直等待结果数据却永远不会等到。

Spring WebMVC 不确定是不是也是这样的表现，没有做测试。但如果也是使用 void write(byte b[], int off, int len) 输出结果的话，表现应该是一样的。

在 OutputStream 的实现中，void write(byte b[], int off, int len) 方法写数据时，实际又调用了 void write(int b) 方法。但 Tomcat 在实现 ServletOutputStream 时，并没有保持这一作法，估计主要是性能上的考虑。两个方法是分别独立实现，并没有调用关系。所以在这种情况下 WrapperOutputStreamCopier 只重写 void write(int b) 方法肯定是不够的。

推荐的作法是，WrapperOutputStreamCopier 应该参考类似 HttpServletResponseWrapper 的作法，在上面再提供一个 ServletOutputStreamWrapper，用于重写所有的方法把实际动作再引向原始的 ServletOutputStream 对象，这样就不会有中断的可能性了。WrapperOutputStreamCopier 再继承 ServletOutputStreamWrapper，这样就可以只重写合适的方法来处理缓存数据就行了。 ServletOutputStreamWrapper 关注包装对象到原始对象之间的联接，而 WrapperOutputStreamCopier 主要关注自己要做的数据缓存。

Additional Information

No response

Logs

No response

java.lang.StringIndexOutOfBoundsException: String index out of range: -1 at java.lang.String.substring(String.java:1967) at com.secnium.iast.core.replay.HttpRequestReplay.splitHeaderStringToHashmap(HttpRequestReplay.java:102) at com.secnium.iast.core.replay.HttpRequestReplay.doReplay(HttpRequestReplay.java:80) at com.secnium.iast.core.replay.HttpRequestReplay.send(HttpRequestReplay.java:172) at com.secnium.iast.core.AbstractThread.run(AbstractThread.java:24) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:308) at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:180) at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:294) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)

Preflight Checklist

• [X] I agree to follow the Code of Conduct that this project adheres to.
• [X] I have searched the issue tracker for an issue that matches the one I want to file, without success.
• [X] I am not looking for support or already pursued the available support channels without success.

Version

1.9.1

Installation Type

Official Kubernetes

Describe the details of the bug and the steps to reproduce it

用k8s部署时在线拉的洞态不是离线下载的， 现在的情况是用自动部署的命令安装时，应用漏洞是空的，用java agent命令安装时只存在一个硬编码漏洞

问微信群说是要看debug日志，报错的只有这段

还想问下就是docker类型的java业务该怎么部署，用自动命令安装会失败

Additional Information

No response

Logs

No response

Preflight Checklist

• [X] I agree to follow the Code of Conduct that this project adheres to.
• [X] I have searched the issue tracker for an issue that matches the one I want to file, without success.
• [X] I am not looking for support or already pursued the available support channels without success.

Version

1.74

Installation Type

Official Docker Compose

Service Name

DongTai-agent-java

Describe the details of the bug and the steps to reproduce it

dongtai-agent-java 服务端使用resttemplate.exchange 访问其他服务，无法访问 。

Additional Information

No response

Logs

No response

Preflight Checklist

• [X] I agree to follow the Code of Conduct that this project adheres to.
• [X] I have searched the issue tracker for an issue that matches the one I want to file, without success.
• [X] I am not looking for support or already pursued the available support channels without success.

Version

1.9.0

Installation Type

Official Docker Compose

Describe the details of the bug and the steps to reproduce it

agent在web端展示的ip与本机IP不一致，并不是获取的本机的ip，而是一张虚拟网卡的ip

Additional Information

No response

Logs

No response

Preflight Checklist

• [X] I agree to follow the Code of Conduct that this project adheres to.
• [X] I have searched the issue tracker for an issue that matches the one I want to file, without success.
• [X] I am not looking for support or already pursued the available support channels without success.

Version

1.7.7

Installation Type

Official Kubernetes

Service Name

DongTai-Core, DongTai-agent-java

Describe the details of the bug and the steps to reproduce it

pod在启动的时候出现了性能压力，所以dongtai 的agent自动卸载了 但是这个卸载可能存在bug，因为agent还是注入了dubbo的入口。

Additional Information

No response

Logs

No response

Preflight Checklist

• [X] I agree to follow the Code of Conduct that this project adheres to.
• [X] I have searched the issue tracker for an issue that matches the one I want to file, without success.
• [X] I am not looking for support or already pursued the available support channels without success.

Version

最新版本

Installation Type

Official Docker Compose

Service Name

DongTai-agent-java

Describe the details of the bug and the steps to reproduce it

server使用centos7.9-docker部署。拉取最新版本。 部署参考： https://zone.huoxian.cn/d/2552-iastsqlbypasscve

客户端用windows部署。 tomcat版本:apache-tomcat-9.0.56 cms使用jspxcms测试。

无法加载agent。一直错误

Additional Information

No response

Logs

No response

Preflight Checklist

• [X] I agree to follow the Code of Conduct that this project adheres to.
• [X] I have searched the issue tracker for an issue that matches the one I want to file, without success.
• [X] I am not looking for support or already pursued the available support channels without success.

Version

1.3.1

Installation Type

Other (specify below)

Service Name

DongTai-agent-java

Describe the details of the bug and the steps to reproduce it

SpringBoot 替换内部容器Tomcat为 undertow 容器会引发请求失败错误

Additional Information

POM相关 <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-web</artifactId> <exclusions> <exclusion> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-tomcat</artifactId> </exclusion> </exclusions> </dependency> <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-undertow</artifactId> <exclusions> <exclusion> <groupId>org.jboss.spec.javax.servlet</groupId> <artifactId>*</artifactId> </exclusion> </exclusions> </dependency> <dependency> <groupId>javax.servlet</groupId> <artifactId>javax.servlet-api</artifactId> <version>${servlet.version}</version> </dependency>

Logs

No response