Method and system for correcting portion of software application

• US 9,141,408 B2
• Filed: 07/20/2012
• Issued: 09/22/2015
• Est. Priority Date: 07/20/2012
• Status: Active Grant

• Current Assignee: Sonatype
• Original Assignee: Sonatype
• Inventors: Jackson, Wayne, Fox, Brian Edward, Hansen, Mike, McCulloch, Stuart, Van Zyl, Jason
• Primary Examiner(s): Dao, Thuy
• Assistant Examiner(s): BERMAN, STEPHEN DAVID
• Application Number:
  US13/554,335
• Publication Number:
  US 20140026121A1
• Time in Patent Office: 1,159 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 9/445 Program loading or initiating bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57
• CPC Class Codes: G06F 9/44521 Dynamic linking or loading; Link editing at or after load time, e.g. Java class loading
• CPC Class Codes: G06F 9/44589 Program code verification, e.g. Java bytecode verification, proof-carrying code high-level semantic checks G06F8/43; testing and debugging software G06F11/36

Abstract

A computer system, method, or computer-readable medium corrects a broken portion of an application. A fingerprint indicates classes that comprise the application. The classes indicated in the fingerprint are looked up to determine whether any is broken. For a broken class, a fixed class is substituted when the broken class is loaded at class load time for the application; a fixed class method is substituted into the broken class, when the broken class is loaded at class load time; fixed byte code is substituted for broken byte code corresponding to the broken class, when the broken class is loaded at class load time; the broken class is unloaded and the fixed class is loaded instead, when the application is running; or the broken class is replaced inside the static application with the fixed class; all without replacing classes which are not broken.

Claims

1. A method for correcting a portion of an application, comprising:

determining, in a computer, a fingerprint, which is a single fingerprint that indicates plural different classes that collectively comprise the application, the fingerprint being a universal fingerprint from a component normalized to reduce the data introduced by a programmer and to retain a semantic character of component content;

referring, in the computer, to the plural different classes, indicated in the fingerprint, that collectively comprise the application, and looking up whether any of the plural different classes that comprise the application is a broken class;

for each of the plural different classes in the application which is determined to be the broken class;

substituting a fixed class for the broken class, when the broken class is loaded at class load time for the application, or

substituting a fixed class method into the broken class, when the broken class is loaded in the computer at class load time for the application, or

substituting fixed byte code for broken byte code corresponding to the broken class, when the broken class is loaded in the computer at class load time for the application, or

replacing the broken class inside the static application with the fixed class, without replacing classes which are not broken, when the application is not running;

wherein the fingerprint for the application is obtained on a just-in-time basis at class load time; and

scanning, at run time with a byte code interpreting virtual machine running the application, classes before they are being loaded to determine the classes that comprise the application.

2. The method of claim 1, wherein the fingerprint for the application is obtained from a class path of the application.

3. The method of claim 1, further comprising inserting an agent that performs the scanning into the byte code interpreting virtual machine before the classes begin loading, wherein the agent performs the looking up whether the class is one of the broken classes before they are loaded, and the agent serves up the fixed class instead of the broken class to the virtual machine which loads the class for the application.

4. The method of claim 1, wherein the application is run in a context of the byte code interpreting virtual machine.

5. The method of claim 1, wherein the fixed classes to be substituted for the broken classes are served from a database.

6. The method of claim 1, wherein the fingerprint for the application is obtained based on a scan of the application external to a virtual machine on which the application is configured to be executed.

19. The method of claim 1, further comprising unloading the broken class and then loading the fixed class in place of the broken class, while the application is running, when it is determined that the application is running.

7. A computer that corrects a portion of an application, comprising:

an i/o interface operable to transmit and receive communications over at least a portion of a communication network; and

a processor cooperatively operable with the i/o interface, and configured to facilitate;

determining a fingerprint, which is a single fingerprint that indicates plural different classes that collectively comprise the application, the fingerprint being a universal fingerprint from a component normalized to reduce the data introduced by a programmer and to retain a semantic character of component content;

referring to the plural different classes, indicated in the fingerprint, which collectively comprise the application, and looking up whether any of the plural different classes that comprise the application is a broken class;

for each of the plural different classes in the application which is determined to be the broken class;

substituting a fixed class for the broken class, when the broken class is loaded at class load time for the application, or

substituting a fixed class method into the broken class, when the broken class is loaded at class load time for the application, or

substituting fixed byte code for broken byte code corresponding to the broken class, when the broken class is loaded at class load time for the application, or

replacing the broken class inside the static application with the fixed class, without replacing classes which are not broken, when the application is not running;

wherein the fingerprint for the application is obtained on a just-in-time basis at class load time; and

scanning, at run time with a byte code interpreting virtual machine running the application in the processor, classes before they are being loaded to determine the classes that comprise the application.

8. The computer of claim 7, wherein the fingerprint for the application is obtained from a class path of the application.

9. The computer of claim 7, wherein the processor is configured to insert an agent that performs the scanning into the byte code interpreting virtual machine before the classes begin loading, wherein the agent in the processor performs the looking up whether the class is one of the broken classes before they are loaded, and the agent in the processor serves up the fixed class instead of the broken class to the virtual machine which loads the class for the application.

10. The computer of claim 7, wherein the application is run on the processor in a context of the byte code interpreting virtual machine.

11. The computer of claim 7, wherein the fixed classes to be substituted for the broken classes are served from a database.

12. The computer of claim 7, wherein the fingerprint for the application is obtained based on a scan of the application external to a virtual machine on which the application is configured to be executed.

20. The computer of claim 7, further comprising unloading the broken class and then loading the fixed class in place of the broken class, while the application is running, when it is determined that the application is running.

13. A non-transitory computer-readable medium comprising instructions for execution by a computer, the instructions including a computer-implemented method for correcting a portion of an application, the instructions for implementing:

determining, in a computer, a fingerprint which is a fingerprint that indicates plural different classes that collectively comprise the application, the fingerprint being a universal fingerprint from a component normalized to reduce the data introduced by a programmer and to retain a semantic character of component content;

referring, in the computer, to the plural different classes, indicated in the fingerprint, that collectively comprise the application, and looking up whether any of the plural different classes that comprise the application is a broken class;

for each of the plural different classes in the application which is determined to be the broken class;

substituting a fixed class for the broken class, when the broken class is loaded at class load time for the application, or

substituting a fixed class method into the broken class, when the broken class is loaded in the computer at class load time for the application, or

substituting fixed byte code for broken byte code corresponding to the broken class, when the broken class is loaded in the computer at class load time for the application, or

replacing the broken class inside the static application with the fixed class, without replacing classes which are not broken, when the application is not running;

wherein the fingerprint for the application is obtained on a just-in-time basis at class load time; and

scanning, at run time with a byte code interpreting virtual machine running the application, classes before they are being loaded to determine the classes that comprise the application.

14. The non-transitory computer-readable medium of claim 13, wherein the fingerprint for the application is obtained from a class path of the application.

15. The non-transitory computer-readable medium of claim 13, further comprising inserting an agent that performs the scanning into the byte code interpreting virtual machine before the classes begin loading, wherein the agent performs the looking up whether the class is one of the broken classes before they are loaded, and the agent serves up the fixed class instead of the broken class to the virtual machine which loads the class for the application.

16. The non-transitory computer-readable medium of claim 13, wherein the application is run in a context of the byte code interpreting virtual machine.

17. The non-transitory computer-readable medium of claim 13, wherein the fixed classes to be substituted for the broken classes are served from a database.

18. The non-transitory computer-readable medium of claim 13, wherein the fingerprint for the application is obtained based on a scan of the application external to a virtual machine on which the application is configured to be executed.

21. The non-transitory computer-readable medium of claim 13, further comprising unloading the broken class and then loading the fixed class in place of the broken class, while the application is running, when it is determined that the application is running.