Hybrid code modification in intermediate language for software application

• US 10,241,890 B2
• Filed: 07/28/2016
• Issued: 03/26/2019
• Est. Priority Date: 07/28/2016
• Status: Active Grant

• Current Assignee: Salesforce.com, Inc.
• Original Assignee: Salesforce.com, Inc.
• Inventors: Gorbaty, Sergey
• Primary Examiner(s): Kang, Insun
• Application Number:
  US15/222,629
• Publication Number:
  US 20180032314A1
• Time in Patent Office: 971 Days
• Field of Search: None
• CPC Class Codes: G06F 11/36 Preventing errors by testing or debugging software
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 9/45508 Runtime interpretation or emulation, e g. emulator loops, bytecode interpretation

Abstract

Computer program, methods, and systems for code modification of a programming language platform and a software application in an intermediate language at different times are disclosed. The methods and system may modify a portion of the programming language platform in the intermediate language at a first time to alter a functionality of or add a new functionality to the programming language platform; and may modify the software application in the intermediate language at a second time different from the first time, where the software application may be modified based on a runtime analysis rule that uses the altered or added new functionality of the programming language platform. The modified programming language platform may be included in a first package, and the modified software application may be included in a second package, and executed on the modified programming language platform.

Claims

1. A computer program product comprising a non-transitory computer-readable medium containing an executable set of instructions for code modification of a programming language platform and a software application in a bytecode language, the set of instructions configured to:

modify an execution engine of the programming language platform in the bytecode language when the execution engine is converted from source code into code in the bytecode language to alter a functionality of or add a new functionality to the programming language platform, wherein the modification of the execution engine is performed by at least one of a compiler and an interpreter;

modify the software application in the bytecode language at runtime of the software application, wherein the software application is modified to include a runtime analysis rule that uses the altered or added new functionality of the programming language platform, wherein the software application is modified by;

i) after startup of the software application, loading a class of the software application into the execution engine;

ii) inserting a first bytecode to methods of the loaded class based on the runtime analysis rule that uses the new functionality of the programming language platform;

iii) after the class is loaded and the first bytecode is inserted into the methods of the loaded class, loading another class of the software application and repeating processes i)-iii) until all the classes of the software application are loaded and the first bytecode inserted into the classes; and

execute the modified software application on the modified execution engine.

2. The computer program product of claim 1, wherein the programming language platform is Java programming platform.

3. The computer program product of claim 2, wherein the execution engine of the programming language platform is a Java Virtual Machine (JVM).

4. The computer program product of claim 1, wherein the bytecode language operates on different hardware platforms independent of hardware and an operating system on the hardware.

5. The computer program product of claim 1, wherein the software application operates in a database system and receives requests from a user system.

6. The computer program product of claim 1, wherein the software application generates a hypertext transfer protocol (HTTP) response to a request received from a user system.

7. The computer program product of claim 1, wherein the runtime analysis rule assigns an input tag or a sanitization tag to an object in the software application.

8. The computer program product of claim 1, wherein the modified execution engine of the programming language platform is included in a first software package, and the modified software application is included in a second software package different from the first software package.

9. The computer program product of claim 1, wherein the set of instructions operable to modify the execution engine of the programming language platform is to insert first code in the bytecode language into the execution engine of the programming language platform to add the new functionality, the set of instructions operable to modify the software application is to insert second code to the software application, wherein the modified software application uses the added new functionality of the programming language platform.

10. The computer program product of claim 1, wherein the altered or the added new functionality is a string tracking function, a stream tracking function, or an array tracking function.

11. A system for code modification in a bytecode language, comprising:

a hardware processor; and

memory storing one or more sequences of instructions which, when executed by the processor, cause the processor to carry out the steps of;

modifying an execution engine of a programming language platform in the bytecode language when the execution engine is converted from source code into code in the bytecode language to alter a functionality of or add a new functionality to the programming language platform, wherein the modification of the execution engine is performed by at least one of a compiler and an interpreter; and

modifying a software application in the bytecode language at runtime of the software application, wherein the software application is modified to include a runtime analysis rule that uses the altered or the added new functionality of the programming language platform, wherein the software application is modified by;

i) after startup of the software application, loading a class of the software application into the execution engine;

ii) inserting a first bytecode to methods of the loaded class based on the runtime analysis rule that uses the new functionality of the programming language platform;

iii) after the class is loaded and the first bytecode is inserted into the methods of the loaded class, loading another class of the software application and repeating processes i)-iii) until all the classes of the software application are loaded and the first bytecode inserted into the classes.

12. The system of claim 11, wherein the instructions further cause the processor to carry out the steps of:

creating a first package of code that includes the modified execution engine of the programming language platform;

creating a second package of code that includes the modified software application; and

executing the second package of code on the first package of code.

13. The system of claim 11, wherein the programming language platform is Java programming platform, the execution engine of the programming language platform is a Java Virtual Machine (JVM).

14. The system of claim 11, wherein the bytecode language operates on different hardware platforms independent of hardware and an operating system operating on the hardware.

15. The system of claim 11, wherein the software application operates in a database system, receives a request from a user system, and generates a hypertext transfer protocol (HTTP) response to the received request.

16. The system of claim 11, wherein the runtime analysis rule assigns an input tag or a sanitization tag to an object in the software application.

17. The system of claim 11, wherein modifying the execution engine of the programming language platform in the bytecode language is to insert first code in the bytecode language to the execution engine of the programming language platform to add the new functionality, and modifying the software application in the bytecode language is to insert second code to the software application, wherein the modified software application uses the added new functionality of the programming language platform.

18. The system of claim 17, wherein the new functionality in the programming language platform is a string tracking function, a stream tracking function, or an array tracking function.

19. A method for code modification in a bytecode language for a software application in a database system, comprising:

adding a new functionality to an execution engine of a programming language platform after the execution engine is converted from source code into code in the bytecode language, wherein the new functionality is a string tracking function, a stream tracking function, or an array tracking function, wherein the modification of the execution engine by the adding is performed by at least one of a compiler and an interpreter;

modifying a software application after the software application receives a request from a user system, wherein the software application is modified to include a runtime analysis rule that uses the added functionality of the programming language platform, wherein the software application is modified by;

i) after startup of the software application, loading a class of the software application into the execution engine;

ii) inserting a first bytecode to methods of the loaded class based on the runtime analysis rule that uses the new functionality of the programming language platform;

iii) after the class is loaded and the first bytecode is inserted into the methods of the loaded class, loading another class of the software application and repeating processes i)-iii) until all the classes of the software application are loaded and the first bytecode inserted into the classes; and

executing the modified software application on the modified execution engine with the new functionality to generate a hypertext transfer protocol (HTTP) response to the received request.

20. The method of claim 19, wherein the programming language platform is Java programming platform, the execution engine of the programming language platform is a Java Virtual Machine (JVM).

21. The method of claim 19, wherein the bytecode language operates on different hardware platforms independent of hardware and an operating system operating on the hardware.

22. The method of claim 19, wherein the runtime analysis rule assigns an input tag or a sanitization tag to a method of an object in the software application.