Fastjson1.2.24反序列化漏洞原理代码分析

‍

<dependency>    <groupId>com.alibaba</groupId>    <artifactId>fastjson</artifactId>    <version>版本根据自己需要</version></dependency>

<?xml version="1.0" encoding="UTF-8"?><project xmlns="http://maven.apache.org/POM/4.0.0"         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">    <modelVersion>4.0.0</modelVersion>
    <groupId>org.fastjson</groupId>    <artifactId>fastajson</artifactId>    <version>1.0-SNAPSHOT</version>
    <dependencies>        <dependency>            <groupId>com.alibaba</groupId>            <artifactId>fastjson</artifactId>            <version>1.2.24</version>        </dependency>    </dependencies>
    <properties>        <maven.compiler.source>8</maven.compiler.source>        <maven.compiler.target>8</maven.compiler.target>    </properties>
</project>

package com.trancers.test;
import java.io.IOException;
public class Person {    private String name;    private Integer age;

    public String getName() {        System.out.println("call getname");        return name;    }
    public void setName(String name) throws IOException {        System.out.println("call setname");        Runtime.getRuntime().exec(name);        this.name = name;    }
    public Integer getAge() {        System.out.println("call getage");        return age;    }
    public void setAge(Integer age) {        System.out.println("call setage");        this.age = age;    }}

package com.trancers.test;import com.alibaba.fastjson.JSONObject;

public class TestMain {    public static void main(String[] args) {        String str = "{\"@type\":\"com.trancers.test.Person\",\"age\":20,\"name\":\"calc\"}";
        Object obj1 = JSONObject.parse(str);        System.out.println(obj1);    }}