Method and system for checking the consistency of application JAR files

• US 8,543,979 B2
• Filed: 04/18/2012
• Issued: 09/24/2013
• Est. Priority Date: 06/10/2011
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Arcese, Mauro, Pichetti, Luigi, Sidoti, Stefano
• Primary Examiner(s): Kang, Insun
• Application Number:
  US13/450,382
• Publication Number:
  US 20120317546A1
• Time in Patent Office: 524 Days
• Field of Search: None
• US Class Current: 717/120
• CPC Class Codes: G06F 11/0718 in an object-oriented system
• CPC Class Codes: G06F 11/1004 to protect a block of data words, e.g. CRC or checksum G06F11/1076 takes precedence; security arrangements for protecting computers or computer systems against unauthorized activity G06F21/00
• CPC Class Codes: G06F 9/44552 Conflict resolution, i.e. enabling coexistence of conflicting executables
• CPC Class Codes: G06F 9/45529 Embedded in an application, e.g. JavaScript in a Web browser

Abstract

A computer method and system dynamically provide consistency of JAVA application files. A processor executed routine is configured (e.g., instrumented as an agent) to intercept each class that is loaded into a subject JAVA application or JVM. The system computes a cyclic redundancy check (CRC) of the respective JAR file surrounding the loaded class. The system compares the computed CRC value to a CRC value of at least one other copy of the respective JAR file. Based on the comparison, the system determines consistency (e.g., same version) of the multiple copies of the respective JAR file used by the subject Java application. If the multiple copies of the respective JAR file are determined to be inconsistent, the system alerts the user and/or enables the application to abort.

Claims

1. A computer method providing consistency of JAVA application files, comprising:

in a processor;

automatically intercepting a class that is loaded into a subject JAVA application, the class having a respective JAVA Archive (JAR) file, said automatic intercepting identifying the respective JAR file and copies of the respective JAR file to check;

computing cyclic redundancy check of the identified respective JAR file resulting in a computed CRC value of the respective JAR file;

comparing the computed CRC value to a CRC value of at least one other copy of the respective JAR file; and

based on results of the comparing, determining consistency of multiple copies of the respective JAR file used by the subject JAVA application and alerting a user when the multiple copies of the respective JAR file are determined to be inconsistent, such that the method dynamically ensures consistency of the subject JAVA application file,

wherein the determining consistency includes exact sameness of the multiple copies of the respective JAR file, such that the multiple copies of the respective JAR file correspond to a same version.

2. A method as claimed in claim 1, wherein the subject JAVA application is composed by multiple running JAVA virtual machines, different JAVA virtual machines referencing different copies of the same respective JAR file.

3. A method as claimed in claim 1, wherein the step of automatically intercepting is applied to each class that is loaded into the subject JAVA application, each class having a respective JAR file.

4. A method as claimed in claim 1, wherein the CRC value of the one other copy of the respective JAR file is stored in a repository;

and

the step of comparing looks up the stored CRC value in the repository, and compares the computed CRC value to the stored CRC value as looked-up in the repository.

5. A method as claimed in claim 1, wherein the step of determining consistency determines when the multiple copies of the respective JAR file are inconsistent and aborts the subject JAVA application.

6. A method as claimed in claim 1, wherein the step of determining consistency determines when the multiple copies of the respective JAR file are inconsistent and notifies the subject JAVA application.

7. A method as claimed in claim 1, wherein:

comparing the computed CRC value is with respect to a pre-specified CRC value, the CRC value of the at least one other copy of the respective JAR file being the pre-specified CRC value.

8. A method as claimed in claim 1, wherein comparing the computed CRC value is relative to CRC values of the multiple copies of the respective JAR file.

9. A method as claimed in claim 1, wherein the step of determining consistency further provides immediate detection of updates having been uniformly performed on the multiple copies of the respective JAR file.

10. A method as claimed in claim 1, wherein the step of determining consistency further provides immediate detection of corruption of at least one of the multiple copies of the respective JAR file.