检索结果-内蒙古大学图书馆

Exception analysis in the java native interface

SCIENCE OF COMPUTER PROGRAMMING 2014年第Partc期89卷 273-297页

作者： Li, Siliang Tan, Gang Lehigh Univ Packard Lab PC Rossin Coll Engn & Appl Sci Bethlehem PA 18015 USA

A Foreign Function interface (FFI) allows one host programming language to interoperate with another foreign language. It enables efficient software development by permitting developers to assemble components in different languages. One typical FFI is the java native interface (JNI), through which java programs can invoke native-code components developed in C, C++, or assembly code. Although FFIs bring convenience to software development, interface code developed in FFIs is often error prone because of the lack of safety and security enforcement. This paper introduces a static-analysis framework, Turbojet, which finds exception-related bugs in JNI applications. It finds bugs of inconsistent exception declarations and bugs of mishandling JNI exceptions. Turbojet is carefully engineered to achieve both high efficiency and accuracy. We have applied Turbojet on a set of benchmark programs and identified many errors. We have also implemented a practical Eclipse plug-in based on Turbojet that can be used by JNI programmers to find errors in their code. (C) 2014 Elsevier B.V. All rights reserved.

关键词： Foreign Function interface java native interface Exception checking Static analysis

来源：评论

学校读者我要写书评

暂无评论

java native interface idioms for C++ class hierarchies

引用

SOFTWARE-PRACTICE & EXPERIENCE 2000年第15期30卷 1641-1660页

作者： Parson, D Zhu, ZY Bell Labs Lucent Technol Allentown PA 18103 USA Lehigh Univ Bethlehem PA 18015 USA

The java(TM) native interface (JNI) provides a set of mechanisms for implementing java methods in C or C++, JNI is useful for reusing C and C++ code repositories within java frameworks, JNI is also useful for real-time systems, where compiled C/C++ code executes performance-critical tasks, while java code executes system control and feature tasks, Available JNI literature concentrates on creating java proxy classes that allow java clients to interact with C++ classes, Current JNI literature does not discuss java proxies for entire C++ inheritance hierarchies;that is the topic of this paper, Our experience in reusing C++ class hierarchies within a java framework has uncovered a set of useful techniques for constructing java proxy class hierarchies that mirror their C++ counterparts. This report gives both high level design guidelines and specific programming idioms for constructing java class hierarchies that serve as proxies for C++ counterparts, We begin by discussing opportunities for reuse within a proxy class hierarchy, as well as problems caused by differences between the java and C++ approaches to inheritance, The two most significant differences are due to C++ support for invocation of a member function based on the static type of its class, and C++ support for multiple implementation inheritance, Two example C++ class hierarchies provide the basis for a set of sections that present the design guidelines and that codify the programming idioms, This work could serve as the basis for an automatic generator of java proxy class hierarchies, Copyright (C) 2000 John Whey & Sons, Ltd.

关键词： java native interface C plus class hierarchy proxy class design pattern

来源：评论

学校读者我要写书评

暂无评论

JET: Exception Checking in the java native interface 11

JET: Exception Checking in the Java Native Interface

引用

2011 ACM International Conference on Object Oriented Programming Systems Languages and Applications

作者： Li, Siliang Tan, Gang Lehigh Univ Bethlehem PA 18015 USA

ISBN: (纸本)9781450309400

java's type system enforces exception-checking rules that stipulate a checked exception thrown by a method must be declared in the throws clause of the method. Software written in java often invokes native methods through the use of the java native interface (JNI). java's type system, however, cannot enforce the same exception-checking rules on java exceptions raised in native methods. This gap makes java software potentially buggy and often difficult to debug when an exception is raised in native code. In this paper, we propose a complete static-analysis framework called JET to extend exception-checking rules even on native code. The framework has a two-stage design where the first stage throws away a large portion of irrelevant code so that the second stage, a fine-grained analysis, can concentrate on a small set of code for accurate bug finding. This design achieves both high efficiency and accuracy. We have applied JET on a set of benchmark programs with a total over 227K lines of source code and identified 12 inconsistent native-method exception declarations.

关键词： Languages Reliability Exception Checking java native interface Static Analysis

来源：评论

学校读者我要写书评

暂无评论

A Heuristic Fuzz Test Generator for java native interface 2

A Heuristic Fuzz Test Generator for Java Native Interface

引用

2nd ACM SIGSOFT International Workshop on Software Qualities and Their Dependencies (SQUADE)

作者： Zhao, Jinjing Wen, Yan Li, Xiang Pang, Ling Kuang, Xiaohui Wang, Dongxia Natl Key Lab Sci & Technol Informat Syst Secur Beijing Peoples R China Beijing Linzhuo Infomat Technol Co Ltd Beijing Beijing Peoples R China

ISBN: (纸本)9781450368575

It is well known that once a java application uses native C/C++ methods through the java native interface (JNI), any security guarantees provided by java might be invalidated by the native methods. So any vulnerability in this trusted native code can compromise the security of the java program. Fuzzing test is an approach to software testing whereby the system being tested is bombarded with inputs generated by another program. When using fuzzer to test JNI programs, how to accurately reach the JNI functions and run through them to find the sensitive system APIs is the pre-condition of the test. In this paper, we present a heuristic fuzz generator method on JNI vulnerability detection based on the branch predication information of program. The result in the experiment shows our method can use less fuzzing times to reach more sensitive windows APIs in java native code.

关键词： java native interface Fuzz Test Test Generator Program Security Test System API

来源：评论

学校读者我要写书评

暂无评论

Evaluating the java native interface (JNI): Data Types and Strings

引用

INTERNATIONAL JOURNAL OF DISTRIBUTED SYSTEMS AND TECHNOLOGIES 2018年第2期9卷 27-38页

作者： Sotiriadis, Stelios Omosebi, Oladotun Ayapbergenova, Assem Saparkhojayev, Nurbek P. Univ Toronto Edward Rogers Sr Dept Elect & Comp Engn Toronto ON Canada Edge Hill Univ Dept Comp Sci Ormskirk Lancs England Satbayev Univ Dept Informat Technol Alma Ata Kazakhstan

This article describes how the java native interface (JNI) is a powerful feature of the java platform that started to draw attention in the latter years as an efficient programming framework for building and delivering innovative technological applications based on disruptive technologies such as mobile, Internet of Things and embedded systems. Developers use it to incorporate native code written in programming languages such as C, C++, python etc., into java. JNI is particularly useful when java applications need to access existing native libraries or code blocks written in other languages to increase performance, avoid recoding and expand interoperability between programming languages for processes that reside in the same process. This article aims to explore JNI features and to discover fundamental operations of the java programming language, such as arrays, objects, classes, threads and exception handling, and to illustrate these by using various algorithms and code samples.

关键词： java native interface Invocation API java native interface java One-To-One Mapping java Shared Stubs java Virtual Machine as a native Library java native Threads

来源：评论

学校读者我要写书评

暂无评论

Evaluating the java native interface (JNI): Leveraging Existing native Code, Libraries and Threads to a Running java Virtual Machine

引用

INTERNATIONAL JOURNAL OF DISTRIBUTED SYSTEMS AND TECHNOLOGIES 2018年第2期9卷 39-61页

This article aims to explore JNI features and to discover fundamental operations of the java programming language, such as arrays, objects, classes, threads and exception handling, and to illustrate these by using various algorithms and code samples. The authors also investigate the JNI Invocation API that allows native applications to interact with the java Virtual Machine (JVM). They focus on attaching native threads to a running JVM and on leveraging existing native code using one-to-one mapping and shared stubs.

关键词： java native interface Invocation API java native interface java One-To-One Mapping java Shared Stubs java Virtual Machine as a native Library java native Threads

来源：评论

学校读者我要写书评

暂无评论

State of practices of java native interface 19

State of practices of Java native interface

引用

Proceedings of the 29th Annual International Conference on Computer Science and Software Engineering

作者： Manel Grichi Mouna Abidi Yann-Gaël Guéhéneuc Foutse Khomh École Polytechnique Montréal Montréal Canada University of Concordia Montréal Canada

The use of the java native interface (JNI) allows taking advantage of the existing libraries written in different programming languages for code reuse, performance, and security. Despite the importance of JNI in development, practices on its usages are not well studied yet. In this paper, we investigated the usage of JNI in 100 open source systems collected from OpenHub and Github, around 8k of source code files combined between java and C/C++, including the java class libraries part of the JDK v9. We identified the state of the practice in JNI systems by semi-automatically and manually analyzing the source *** qualitative analysis shows eleven JNI practices where they are mainly related to loading libraries, implementing native methods, exception management, return types, and local/global references management. Basing on our findings, we provided some suggestions and recommendations to developers to facilitate the debugging tasks of JNI in multi-language systems, which can also help them to deal with the java and C memory.

关键词： java development kit practices code analysis java native interface usages multi-language systems

来源：评论

学校读者我要写书评

暂无评论

Bringing java's Wild native World under Control

引用

ACM TRANSACTIONS ON INFORMATION AND SYSTEM SECURITY 2013年第3期16卷 9-9页

作者： Sun, Mengtao Tan, Gang Siefers, Joseph Zeng, Bin Morrisett, Greg Lehigh Univ Comp Sci & Engn Dept Bethlehem PA 18015 USA Harvard Univ Sch Engn & Appl Sci Cambridge MA 02138 USA

For performance and for incorporating legacy libraries, many java applications contain native-code components written in unsafe languages such as C and C++. native-code components interoperate with java components through the java native interface (JNI). As native code is not regulated by java's security model, it poses serious security threats to the managed java world. We introduce a security framework that extends java's security model and brings native code under control. Leveraging software-based fault isolation, the framework puts native code in a separate sandbox and allows the interaction between the native world and the java world only through a carefully designed pathway. Two different implementations were built. In one implementation, the security framework is integrated into a java Virtual Machine (JVM). In the second implementation, the framework is built outside of the JVM and takes advantage of JVM-independent interfaces. The second implementation provides JVM portability, at the expense of some performance degradation. Evaluation of our framework demonstrates that it incurs modest runtime overhead while significantly enhancing the security of java applications.

关键词： Security java native interface java virtual machine software-based fault isolation

来源：评论

学校读者我要写书评

暂无评论

Executing native java code in R: an approach based on a local server

引用

PEERJ COMPUTER SCIENCE 2020年 6卷 e300页

作者： Fortin, Mathieu Canadian Forest Serv Canadian Wood Fibre Ctr Ottawa ON Canada

The R language is widely used for data analysis. However, it does not allow for complex object-oriented implementation and it tends to be slower than other languages such as java, C and C++. Consequently, it can be more computationally efficient to run native java code in R. To do this, there exist at least two approaches. One is based on the java native interface (JNI) and it has been successfully implemented in the rjava package. An alternative approach consists of running a local server in java and linking it to an R environment through a socket connection. This alternative approach has been implemented in an R package called J4R. This article shows how this approach makes it possible to simplify the calls to java methods and to integrate the R vectorization. The downside is a loss of performance. However, if the vectorization is used in conjunction with multithreading, this loss of performance can be compensated for.

关键词： Interoperability java local server TCP/IP connection R vectorization java native interface

来源：评论

学校读者我要写书评

暂无评论

A web-based distributed problem-solving environment for engineering applications

引用

ADVANCES IN ENGINEERING SOFTWARE 2006年第2期37卷 112-128页

作者： Cheng, HC Fen, CS Feng Chia Univ Dept Aerosp & Syst Engn Taichung 407 Taiwan Feng Chia Univ Dept Environm Sci & Engn Taichung 407 Taiwan

In this study, a prototype of web-based distributed problem-solving environment (W-DPSE) is presented to facilitate computer aided engineering (CAE) technologies. This system provides an effective approach to distributed modeling and simulation, and in addition, to support networked collaboration such that scientists around the world could interactively, visually and experimentally explore their daily design work through the proposed system. The W-DPSE system is constructed as a three-tiered architecture, consisting of three major layers: a web client presentation interface (WCPI), computing solver servers (CSS), and a system management server (SMS). All the components within this architecture are implemented with an object-oriented approach-java while transparent communication across these three layers is attained through the remote method invocation (RMI) technology. To generalize the applicability of the system so as to accommodate interdisciplinary and diversified applications, a novel and efficient interface is developed for wrapping legacy computation codes, including C and FORTRAN etc., as a java component. Note that in the interface, the communication mechanisms between java objects and legacy codes are implemented by way of java native interface (JNI) and Unix inter-process communication (IPC) provided by OS. At last, the applicability of the W-DPSE system is extensively confirmed through the practices of two engineering applications: topology optimization of structures and pollutant transport simulations of coastal waters. (C) 2005 Elsevier Ltd. All rights reserved.

关键词： distributed computing problem solving environment remote method invocation technology java native interface java3D Web-based application collaborative design

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：