Java ã¢ããªã±ã¼ã·ã§ã³ã Docker ã³ã³ããä¸ã§å®è¡ãããã¨ããã¨ãã«ããã¼ã¹ã¤ã¡ã¼ã¸ã¨ãã¦ã©ã® Docker ã¤ã¡ã¼ã¸ãé¸ã¶ã®ãããããèãã¦ã¿ã¾ãã ã¯ããã«Permalink Java ã§ Web ã¢ããªã±ã¼ã·ã§ã³ãéçºãã¦éç¨ãã¨ããã¨ãæã¯ Tomcat ãã¤ã³ã¹ãã¼ã«ãããµã¼ãã« JAR ãã¡ã¤ã«ã WAR ãã¡ã¤ã«ãé å¸ãã¦ãããã¤ãã¦ãããããªè¨æ¶ãå¾®ãã«æ®ã£ã¦ããã®ã§ãããæ°å¹´åãã㯠Spring Boot ã®ããã«çµã¿è¾¼ã¿ Tomcat ãªã©ãæ¡ç¨ããMaven ã Gradle ã®ãã«ããªã¼ãã¡ã¼ã·ã§ã³ãã¼ã«ã®åãåã㦠Java ã¢ããªã±ã¼ã·ã§ã³ã®å®è¡ã«å¿ è¦ãª JAR ãã¡ã¤ã«ãã²ã¨ã¾ã¨ãã«ãã fat JAR (uber JAR) ãæ§ç¯ããåä½ã® JAR ãã¡ã¤ã«ã ãã Java ãã¤ã³ã¹ãã¼ã«ããã¦ãããµã¼ãã«é å¸ãã¦ãããã¤â¦ ã¨ãããã¨ãå§åçã«
ã¯ã©ã¹ãã¡ã¤ã«ã®ä¸èº« ã¯ã©ã¹ãã¡ã¤ã«ã®æ§é javap ã³ãã³ã javap åºåã®æ¦è¦ åã¨ã¡ã½ããã®èªã¿æ¹ ãªãã©ã³ãã¹ã¿ã㯠ã³ã³ã¹ãã©ã¯ã¿ã®å®è¡ å ç®ã¡ã½ãã invoke ç³»å½ä»¤ æ¡ä»¶å¤æ for ã«ã¼ã ã¾ã¨ã æ®æ®µä½¿ãã§ã¯å°ããã¨ã¯ãªãã§ãããæ¨ä»ã¯ãã¤ãã³ã¼ããããã¥ã¬ã¼ã·ã§ã³ã«ããé»éè¡ã謳æãã¦ãããããç¥ã£ã¦ããã¨å½¹ã«ç«ã¤å ´åããããã¤ãã³ã¼ãã®æä½éã®èªã¿æ¹ã説æãã¾ãã ã¯ã©ã¹ãã¡ã¤ã«ã®ä¸èº« 以ä¸ã®ãããªç°¡åãªã½ã¼ã¹ã³ã¼ããèãã¾ãããã public class Class1 { public int add(int x, int y) { return x + y; } } ãã®ã½ã¼ã¹ã³ã¼ããã³ã³ãã¤ã«ãã¦ä½æããã Class1.class ã®ä¸èº«ã®ãã³ããè¦ã¦ã¿ã¾ãã $ hexdump -C Class1.class 00000000 ca fe ba
ã¯ããã« Apache Tomcatã«ç«ã¦ç¶ãã«è¦ã¤ãã£ãCVE-2017-12615ï½12617ã®3ã¤ã®èå¼±æ§ã¯åºæ¬çã«ã¯åãåå ã«ãããã®ã§ããã3ã¤ã®ãã¡2ã¤ã¯ä»»æã®JSPãã¡ã¤ã«ãPUTãªã¯ã¨ã¹ãã§ã¢ãããã¼ãã§ãã¦ãã¾ããã¢ãããã¼ãå¾ã«ã¢ã¯ã»ã¹ãããã¨ã§Javaã®ã³ã¼ããå®è¡ã§ãã¦ãã¾ããã¨ãããã¿ã¼ã³ã®RCEãæ®ãã®1ã¤ã¯JSPããã®ã¾ã¾éçãã¡ã¤ã«ã¨ãã¦ã¢ã¯ã»ã¹å¯è½ãªããã«ã½ã¼ã¹ã³ã¼ããæ¼æ´©ãã¦ãã¾ããã¨ãããã®ã§ãã ä»åJPCERT/CCãæ³¨æåèµ·ãããªã©ãåºãç¥ããããã¨ã«ãªãã¾ãããã䏿¹ã§ãªããªãããããæä¾ãããªãã¨ããç¶æ³ã«ããªã£ã¦ãã¾ããä»åã¯ãã®èå¼±æ§ã«ã¤ãã¦ã®èª¿æ»ãå ±åãã¾ãã readonlyãã©ã¡ã¼ã¿ã¨ã¯ä½ã JSPãã¢ãããã¼ãã§ãã¦ãã¾ãã®ã¯readonlyãã©ã¡ã¼ã¿ãfalseã«ãªã£ã¦ããå ´åã§ãããã®ãã©ã¡ã¼ã¿ã¯ããã©ã«ãã§trueã§ãããf
ã¾ãOGNL絡ã¿ã®èå¼±æ§ãè¦ã¤ããã¾ããã ã¢ã¦ãã©ã¤ã³ã¯id:Kangoæ°ãã¾ã¨ãã¦ãããã¡ããåèã«ãªãã¾ãã http://d.hatena.ne.jp/Kango/20170307/1488907259 ãã¦ããã®èå¼±æ§ã®åä½åçã調ã¹ã¦ã¿ã¾ããã ãã¡ã¤ã«ã¢ãããã¼ãæã®ãããã®å¦çæ¹å¼ã«åé¡ãããããã§ãã åè¿°ã®URLã§è¿°ã¹ããã¦ããPoCã¯ãããªæãã import requests import sys def poc(url): payload = "%{(#test='multipart/form-data').(#[email protected]text@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.
qiita.com ããã®è©±ããã³ã¡ã«æ¸ããã¨ããã4000åã¯å ¥ããªãã£ãã Microsoft Java VM ãã¤ã¦ã® WIndows ã«ã¯ MS 製㮠Java VM ãæè¼ããã¦ãã¾ããã å¤ä»£ã® Java ã¯ãWrite once, run anywhereããæ²ãã¦ããéããã¯ã©ã¤ã¢ã³ããµã¤ãã§ Java ã¢ãã¬ããã¨ãã¦å©ç¨ãããã®ã主æµã§ããï¼ãµã¼ãã¼ãµã¤ãã§åãããã«ãªã£ã¦ãç価ãçºæ®ããæããããã¾ãï¼ã ããã Java VM ã®ä»æ§ã¯ãããã©ã¼ãã³ã¹ã«ã¤ãã¦ã®è¨è¿°ã¯ææ§ã«ãªã£ã¦ãããOS ãã¨ã®å®è£ ã®éãã«ãã£ã¦ãå®è¡é度ã«é¡èãªå·®ãããã¾ããã Windows ã® Sun ç´æ£ã® Java VM ã¯æ§è½ãæªãã£ããããMS ã¯ç¬èªã® Java VM ãéçºããInternet Explorer ã«ãã³ãã«ãã¾ããã調åã«ä¹ã£ã MS 㯠Windows GUI
java.io.Serializable â¦ãããç¨åº¦Javaã«è§¦ãã¦æ¥ã人ã¯å¿ ãè¦ããã¨ãããã¤ã³ã¿ã¼ãã§ã¤ã¹ã ã¨æããç§ãä½åº¦ãè¦ã¦ããããå¿ è¦ã«è¿«ããã¦èªåã®ä½ã£ãã¯ã©ã¹ã«Serializableãã¤ãããã¨ããããããããããã¤ã¯ä¸ä½ä½ãªã®ãï¼ ç¶æ¿ã®ä¾¿å©ã åããã¾ã Javaåå¿è ã ã£ãé ãç¶æ¿ã¨ããã¡ã«ããºã ã«å©ããããªããè²ã£ã¦æ¥ããç°¡åã«è¨ãã°ãHttpServletã¯ã©ã¹ãç¶æ¿ãããããã°ãèªåã®ä½ã£ãã¯ã©ã¹ããµã¼ãã¬ããã¨ãã¦èªèãããã®ã ãã¾ããabstractã¡ã½ãããªã©ã¨ãã便å©ãªæ©è½ããããç¶æ¿ã«ããã£ã¦å®è£ ããªããã°ãããªãã¡ã½ããã¯ç¢ºå®ã«æç¤ºãããè¨ãããéãã«ãã®ã¡ã½ãããå®è£ ããã°è¯ãã Strutsã®Actionãç¶ãããããå¤ãã®å ´åã¯ãç¶æ¿ããããã°ãæãç©ãã ãããåºæ¥ä¸ãããã¨ããã®ãJavaã®ä¸çã ã¨æã£ã¦ããã ã ããä¸ã®ä¸ãããªã«çããªã
æ¬è¨äºã¯Â Java Advent Calendar 2015 19æ¥ç®Â ã§ãã19æ¥ç®å¤§å¤ã®ãªã®ãªã®æç¨¿ã§æ¬å½ã«ç³ã訳ãªãã§ãã ã©ããããã«ã¡ã¯ãã¾ã¼ãã§ããJavaã®çè ãéãã¢ããã³ãã«ã¬ã³ãã¼ã«ãªãããã£ããåå ãã¡ãã£ãåå¿è ç³»ã®äººéã®ã話ã§ãã æè¿ãä»äºã§åç»ããææ¹ä¿®ããã¸ã§ã¯ãã§ã¯ãæååã®é£çµã®å¦çããã®ãããå¤ãã½ã¼ã¹ã§ãããæ¹ä¿®ã«ããããããããã°æåã®é£çµã£ã¦ã©ã®ãããã®éã®æã«ã©ã使ãã°ããã®ããããâ¦ãã¨ãµã¨èãã¾ãããå¤åå¤ãã®ã§ããã¨ã³ã¸ãã¢ã¨ã£ãã«ãããªã¨ããã¯éãéããã¨æãããã°ã°ãã°âãããããå·®ããããï¼âã£ã¦çµæãåºãããè¨äºãããããè¦ããã¨ãã§ããã§ãããããã¦ãèªåã§ãæ¤è¨¼ãã¦ã¿ããããã¨ããã®ãä»åã®è¨äºã®å 容ã»ã»ã»ã ã£ããã§ãããã¿ã¤ãã«ã®éããè±ç·ãã¦ã¾ã¼ããããã«ç¡ç¥ã ã£ããã®è©±ã«ãªãã¾ãã ãæåã«èãã¦ãããã¨ã æååã®é£çµ
ãã㯠Java EE Advent Calendar 2014 ã®6æ¥ç®ã§ããæ¨æ¥ã¯ tq_jappy ããã®ãJava SE 8ã¨Java EE 7ã«ããã¢ããªã±ã¼ã·ã§ã³ã®ã¢ããã¤ã¼ã¼ã·ã§ã³ï½ä¸éãµããããï½ããææ¥ã¯ yamadamn ããã§ãã Servletã ã£ã¦Java EEãã ã£ããTomcatã ã£ã¦ããã Java EEã¨è¨ãã°WildFlyãGlassfishããããã¯åç¨ã¢ããªã±ã¼ã·ã§ã³ãµã¼ãã¼ã§ãCDIã¨ãEJBã¨ãJSF....ã使ããã£ããããã¤ãè¨ããããã§ããããã§ãåã¯ã¾ã 使ã£ããã¨ãããã¾ããã åã¯ã¾ã Tomcatã使ã£ã¦ãã¾ãã Tomcatã¨ããã°ã坿ããªãããã _人人人人人人人人人_ ï¼ã坿ããªããããï¼ ï¿£Y^Y^Y^Y^Y^Y^Y^Yï¿£ ãªã©ãæ£ã ãªè¨ããæ¹ããã¦ãã¾ããããããªããããªãã¦ãããã®ã«ï¼ãããã«æ¡å¼µæ§ãããããã§æå¤ã¨ãã
What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your Application Have in Common? This Vulnerability. What? The most underrated, underhyped vulnerability of 2015 has recently come to my attention, and Iâm about to bring it to yours. No one gave it a fancy name, there were no press releases, nobody called Mandiant to come put out the fires. In fact, even though proof of concept code was re
OpenJDKã¯ä½¿ãç©ã«ãªããï¼OpenJDKã®å®éã¨ä»å¾ ï¼NTTãã¼ã¿ ãªã¼ãã³ã½ã¼ã¹DAY 2015 Autumn è¬æ¼è³æï¼ â NTTãã¼ã¿ ãªã¼ãã³ã½ã¼ã¹DAY 2015 Autumn (2015/10/19 è¬æ¼è³æï¼ ãOpenJDKã¯ä½¿ãç©ã«ãªããï¼ OpenJDKã®å®éã¨ä»å¾ã NTTã³ã ã¦ã§ã¢æ ªå¼ä¼ç¤¾ æ«æ°¸ ææ£ http://oss.nttdata.co.jp/hadoop/event/201510/
ä¹ ã ã«ã¯ã¾ã£ãããã 以åã«ãæ¸ãã¾ããããJDTã³ã³ãã¤ã©ã¨Sunã®ç´æ£ã³ã³ãã¤ã©ã¯ããããå¾®å¦ã«æ¯ãèããéã£ã¦ã¾ãã 01:public class Sample { 02: public static void main(String[] args) { 03: List list = new ArrayList(); 04: list.add(1L); 05: list.add(2L); 06: List<Object[]> list2 = list; 07: for(Object o : list2) { 08: System.out.println(o); 09: } 10: } 11:}åå夿ããã±ã¼ã¹ã¯ãã³ã³ãã¤ã«æç¹ã§çºè¦ããã®ã§ããã ä¸è¨ã³ã¼ãã¯ãJDTã³ã³ãã¤ã©ã§ã¯æ£ããåä½ããã®ã§ãããSunã®ç´æ£ã³ã³ãã¤ã©ã§ã¯ã ClassCastExceptionãçºçã
â» WebLogicã ãæ¸ãã¦ããã®ãä½ãªã®ã§ããã®ä»ã®åç¨Java EEãµã¼ãã¼ããã¡ãã§ã¾ã¨ãã¦ã¿ã¾ãã(2013/12/08 22:20) https://www.mushagaeshi.com/2013/12/08/from-glassfish-to-other-commercial/ â» GlassFish2ç³»ã»3ç³»ã®ãµãã¼ãç¶ç¶ã«ã¤ãã¦è¨èãè¶³ããªãã£ãã®ã§ã念ã®ããè£è¶³ãå ¥ãã¾ãã(2013/12/09 14:46) ããã«ã¡ã¯ãAdvent Calendarãªææã«ãªãã¾ãããããã®è¨äºã¯Java EE Advent Calendar 2013ã®12/7ã®æ å½åã§ãã12/6ã®åã¯waritohutsuããã® http://d.hatena.ne.jp/waritohutsu/20131206 ã«ãªãã¾ãã Java EE Advent Calendar 2013 http
ã¿ãªããããã«ã¡ã¯ãmasa ã§ãã仿¥ã¯æè¿ã® Java ã¢ããªã±ã¼ã·ã§ã³ãµã¼ãã¼äºæ ã«ã¤ãã¦åãä¸ãã¾ãã ãã¾ãæµè¡ãå»ãã®æ¿ãããªã Java ãµã¼ãã¼ã§ããã Spring Boot  RCçã§ Tomcat ã®ã»ãã« Jetty ã Undertow ã鏿ã§ãããã¨ãç¥ããæ¹ãã¦æè¿ã® Java ã¢ããªã±ã¼ã·ã§ã³ãµã¼ãã¼ã®ãã¬ã³ãã調ã¹ã¦ã¿ãããªã£ã次第ã§ãã Google ãã¬ã³ãã®çµæã¯ä»¥ä¸ã®éã 2015å¹´ 2010å¹´ Tomcat ããã³ãããªã®ã¯æããå¤ããã¾ããããå¤åã¨ãã¦ã¯ Jetty ããã®5å¹´ã§ä¸ãã¦ãã¦ããã¨ãããæ°ã«ãªãã¾ãã åã¢ããªã±ã¼ã·ã§ã³ãµã¼ãã¼ã®ç¹å¾´ããªã¼ãã³ã½ã¼ã¹ããªã©ã¯ã«ãã¬ããããããIBM 系ã«ããã¦ã¾ã¨ãã¦ã¿ã¾ãããâ»()å ã¯æ£å¼åç§° Tomcat (Apache Tomcat) ããªã¼ãã³ã½ã¼ã¹ 1999å¹´èªçããªãã ããã ã¨10
- The document discusses optimizing Java performance on hardware by leveraging features like AES-NI, transparent huge pages, and compiler intrinsics. - It provides examples showing performance improvements from using these features, such as faster encryption times when enabling AES-NI and fewer TLB misses with transparent huge pages. - It also discusses Java VM options, garbage collection, and the
4æ8æ¥ã«Java Day Tokyo,11æ¥ã«JJUG CCC 2015 Springã¨Javaã®å¤§ããªã¤ãã³ããç¶ãã¦ãã£ã¦ãã©ã¡ããæããæè¦ªä¼ã¾ã§åå ãã¦ããã Java Day Tokyo Pepperã¨ãããã«ã¼ã¨ãè»ã¨ããããã¨ãããããã®ãJavaã§åãã¦ããã Java9ã¯æ¥å¹´ãªãªã¼ã¹ãããããã ãã³ãºãªã³ã§ã¯ããã¦ã©ã ãå¼ã¨StreamAPIã®æ¸ãæ¹ãããã£ãã JJUGä¼é·ã®é´æ¨ããã«Dukeã®ãã«ãã«ãããã ãã(å®¶å®) ã¿ããªã§Javaã®20å¨å¹´ãç¥ã£ã¦ã±ã¼ããé£ã¹ã JJUG CCC 2015 Spring Javaã§ã³ã¼ãã¼ãå ¥ãããããã«ã¼ï¼ãåãããã3Dããªã³ã¿ãå¶å¾¡ããããã¦ã Groovyã§Excelæä½ãç°¡åã«ã§ãããã¨ãç¥ã£ã nullãå¶å¾¡ããããã®èãæ¹ãç¥ã£ã æãããªããéãåºãã¦ãããã»ãããããã¨ãç¥ã£ã é£ã³å ¥ãLTã¯æéãçããª
22æã«ã¯å¯ã¦ï¼æé èµ·ãåºããæ¼éãã¾ã§é¨å±ã«ããã£ã¦åç¨¿ãæ¸ããæ¼ããæ¬æ¥ã®ä»äºã«è¡ã£ã¦å¤ã¾ã§ããã¬ããè¦ããæ°èãèªã¾ããé ã飲ã¾ã・・・ãï¼æä»¥éãæè¿ã¾ã§ä»äººã®ãããªçæ´»ããã¦ãã¾ããããªãã¨ãçµãã£ãã®ã§ããããããã°ãåéã§ãã¾ãã Wildflyã®è¨äºãããããã¢ããããäºå®ã§ãããã¾ãã¯ãåºæ¥ä¸ãã£ããããããããJavaEEãã«ã¤ãã¦è£è©±çãªãã¨ãæ¸ããããªãã¾ããã å§ã¾ãã¯YOUTUBE ä»ã¯RedHatã«ç§»ã£ãã°ãã¿ããã®è§£èª¬ãããªãyouTubeã§è¦ãã®ãå§ã¾ãã§ããã https://www.youtube.com/watch?v=9Kf5m7bMu74 ãããã°ãã¿ãããã¾ã¨ãæ¹ããã¾ãã§ããããªããªããªãã¨ããã¯ä¾¿å©ã ãã¨ããã®ãåãã¦ã®ææ³ã§ãããããã¾ã§JEFã¨ããServletãã¼ã¹ã®ãã¬ã¼ã ã¯ã¼ã¯ï¼èªä½ã§ãï¼ã使ã£ã¦ããã®ã§ããã¾ãã®è½å·®ã«é©ãã¾ãã
ãã®è¨äºã®æ³å®èªè Struts 1.xã®ä»£æ¿æè¡ã模索ãã¦ããæ¹ Java EEã¨ããè¨èã¯ç¥ã£ã¦ããããä¸èº«ã¯ãã¾ãç¥ããªãã¨ããæ¹ Java EEã£ã¦ããããä½ï¼ã¨ããæ¹ ä»åã¯ããããããJava EEã£ã¦ä½ï¼ãããªãJava EEãæ³¨ç®ããã¦ããã®ï¼ãã¨ãããã¨ã解説ããã¨ã¨ãã«ãJava EE 8ã§å°å ¥ããããMVC 1.0ããå©ç¨ãã¦ãJava EEã®æè¡ã§ç°¡åãªæ¤ç´¢Webã¢ããªã®éçºããæ¹æ³ã解説ãã¾ãã MVC 1.0ã«ã¤ãã¦ å æ¥ã2æ¬ã®è¨äºãæ¸ãã¾ããã®ã§ããã¡ããã覧ãã ããã MVC 1.0ï¼Java EE 8ï¼ãã¨ããããåããã¦ã¿ã - Java EE äºå§ãï¼ JSR 371ï¼MVC 1.0ï¼Early Draftãªãªã¼ã¹&ç°¡åã«è§£èª¬ã - Java EE äºå§ãï¼ ããã¾ã§ã®Javaã«ããéçº ããã¾ã§ãJavaã§ã·ã¹ãã éçºãè¡ãéã«ã¯ãè¤æ°ã®ãªã¼ãã³ã½
ãªãªã¼ã¹ãé害æ å ±ãªã©ã®ãµã¼ãã¹ã®ãç¥ãã
ææ°ã®äººæ°ã¨ã³ããªã¼ã®é ä¿¡
å¦çãå®è¡ä¸ã§ã
j次ã®ããã¯ãã¼ã¯
kåã®ããã¯ãã¼ã¯
lãã¨ã§èªã
eã³ã¡ã³ãä¸è¦§ãéã
oãã¼ã¸ãéã
{{#tags}}- {{label}}
{{/tags}}